» msafdext.dll
Overview
Analysis
File Details
Programs (1)

msafdext.dll

MSAFD NTSD Debugger Extension

Microsoft Corporation

This is installed with Debugging Tools for Windows (x64).

File name:

msafdext.dll

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Operating System

Description:

MSAFD NTSD Debugger Extension

Version:

6.1.7650.0 (fbl_tools_debugger(wmbla).091016-1729)

MD5:

ff17e5cc266f500bec4aa67e46400d71

SHA-1:

5fcc07c3e027e54029139f9ca2212eb042ab0f3b

SHA-256:

0c98fe5fe8dbd472b77db6d03e17d35b8679c4fa9afcdecf5606fc213d30c7b2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/26/2024 9:57:35 PM UTC (today)

File size:

48.3 KB (49,408 bytes)

Product version:

6.1.7650.0

Original file name:

msafdext.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\debugging tools for windows (x64)\pri\msafdext.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

7/13/2009 4:00:18 PM

Valid to:

10/13/2010 4:10:18 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6105F71E000000000032

File PE Metadata

Compilation timestamp:

10/16/2009 5:33:58 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

768:loh+nnBtcS45N3WV0m8QxiblYI/qCULclGGApgLS:loh+AS4PQ0m8Q4bl1UAdLS

Entry address:

0x9124

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 0F, 02, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, CB, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48... 
[+]

Entropy:

6.0860

Code size:

36 KB (36,864 bytes)

The file msafdext.dll has been discovered within the following program.

Debugging Tools for Windows (x64) by Microsoft Corporation

Use Debugging Tools for Windows to debug drivers, applications, and services on Windows systems. Debugging Tools for Windows includes a core debugging engine and several tools that provide interfaces to the debugging engine.

www.microsoft.com

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.