uext.dll

Debugger Extensions file version info

Library on Windows 4 known copies with hashes

Is it the real uext.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionDebugger Extensions

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\uext.dll · signed by Microsoft Windows Kits Publisher

0d0e368e0c224752fa71c9869a7ee60a8a65b4e71d07fb61db257e5479744f34

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\uext.dll · signed by Microsoft Corporation

7173c72a68bbd62e3a70fe264c5fc4a752f8b7d08b3962e071dd6149d9074c96

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\uext.dll · signed by Microsoft Corporation

d5224a42e65dc6dd5740f176dc653bea9ccc0d8e47017158e7ed272cbe94de8e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\uext.dll · signed by Microsoft Windows Kits Publisher

e5ffac5c471ec66cf8b3a5e724786861277a486c7dd11b7fe80a26960706aeb4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.