storagekd.dll

Storage debugger extensions file version info

Library on Windows 4 known copies with hashes

Is it the real storagekd.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionStorage debugger extensions

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\storagekd.dll · signed by Microsoft Windows Kits Publisher

2621649196200084afc1027fe34547c049d0bd1b5497704bbe7a88abb412de8c

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\storagekd.dll · signed by Microsoft Corporation

ac37811386d688601815b9f1b4e119473d31b98169dce2fbb764659acbc626ac

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\storagekd.dll · signed by Microsoft Corporation

cd38da6013ac278eeca0886ec9bac6d7425c6be04128444ab3660c3aa501a9d8

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\storagekd.dll · signed by Microsoft Windows Kits Publisher

de847e592c29c4675b4f343c0885cc1210e72cbeba4e54ee7bb83651adc98e53

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.