kdexts.dll

Microsoft Kernel Debugger Extensions file version info

Library on Windows 4 known copies with hashes

Is it the real kdexts.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winxp\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft Kernel Debugger Extensions

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winxp\kdexts.dll · signed by Microsoft Windows Kits Publisher

423d9d908bbef4df0b9752956bed2af733125b131eb488315070954294ed9741

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winxp\kdexts.dll · signed by Microsoft Corporation

773b613f027265f676b1fb40c8cb6a8295d52a897e1b3c406f419a6a6bc284b3

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\kdexts.dll · signed by Microsoft Corporation

fe7c38d2c30b770606da6ecbfce4310e5b7c88dc167a25d2b337ca40cc33e221

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\kdexts.dll · signed by Microsoft Windows Kits Publisher

ffb9ac92ceed2d6b6da10061efd087aff6bb60a75793045ad7cbc391e2f2bc38

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.