hidkd.dll

HID Debug Extension file version info

Library on Windows 4 known copies with hashes

Is it the real hidkd.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionHID Debug Extension

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\hidkd.dll · signed by Microsoft Corporation

24441c45b78928a5b64801657fcbc9d434b2e86e8c5b15031e060d924d3caf35

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\hidkd.dll · signed by Microsoft Corporation

bd2dfc0361ddffdb26ae8c1cfa169ec2a5c2670372b558e2abaf73957239ba6e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\hidkd.dll · signed by Microsoft Windows Kits Publisher

c165ac681b4553839dcf411379bdc65188f0bca2246939941f26e346185faab6

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\hidkd.dll · signed by Microsoft Windows Kits Publisher

fab9dba88fbbfaa61f28af02a15ffd7aa8195d8e0524e11f3f7f4ed9624f9567

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.