usbkd.dll

Microsoft USB Kernel Debugger Extensions file version info

Library on Windows 4 known copies with hashes

Is it the real usbkd.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft USB Kernel Debugger Extensions

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\winext\usbkd.dll · signed by Microsoft Windows Kits Publisher

17a36a7cd06aac1eb0cef6cfc0a60ec55cf423a73ca0321c245e4f9e48667358

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\winext\usbkd.dll · signed by Microsoft Corporation

6af880a3ff0e475381c723fa6e1bc88f151462b54d84ec2813e8bc8895ec4f47

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\winext\usbkd.dll · signed by Microsoft Corporation

b01637fabaccd46168d9b24c6acb39afa4232b1663ae2fad9bcae5c217885a06

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\winext\usbkd.dll · signed by Microsoft Windows Kits Publisher

ef135ca082119de7aa318a577e8877b2037762719929d3e62f91a0ebaa218b92

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.