scsikd.dll

ClassPnP and SCSI debugger extensions file version info

Library on Windows 4 known copies with hashes

Is it the real scsikd.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winxp\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionClassPnP and SCSI debugger extensions

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winxp\scsikd.dll · signed by Microsoft Corporation

123e4bd45339d59222100af6632ab4d3506e083542ebdd5d20f3140c0c53a500

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winxp\scsikd.dll · signed by Microsoft Windows Kits Publisher

6bf18556ba511bb032c2a0a7e6237a583d8b798b019600f56a2f44f2c7924275

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winxp\scsikd.dll · signed by Microsoft Corporation

7dc4a37b322eb05ffaf9101ede14305fc121615c656ccf0d14c676705244ce86

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winxp\scsikd.dll · signed by Microsoft Windows Kits Publisher

9491d2a9bf9ad354aa05f48fc5343d68729f66d9ed95c2ef99b31f4e516088b5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.