home

ntfskd.dll

Ntfs debugger extensions

Microsoft Corporation

This is installed with Debugging Tools for Windows (x64).
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Ntfs debugger extensions

Version:
6.1.7650.0 (fbl_tools_debugger(wmbla).091016-1729)

MD5:
6ff21d11d3e0c25edfb052974ce15d88

SHA-1:
c2d4a3c63d1e3fef12719ed5a35634053d3d3a67

SHA-256:
fb32f74b5b003f96f33fcb55e0dc741baeaf9a00a8f938c7ba23f5ab0e14e5e8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 6:54:27 AM UTC  (today)

File size:
178.3 KB (182,528 bytes)

Product version:
6.1.7650.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
ntfskd.dll

File type:
Dynamic link library (Win64 DLL)

Language:
English (United States)

Common path:
C:\Program Files\debugging tools for windows (x64)\pri\ntfskd.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/13/2009 4:00:18 PM

Valid to:
10/13/2010 4:10:18 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6105F71E000000000032

File PE Metadata
Compilation timestamp:
10/16/2009 5:34:09 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:GxUBXY5UpBH5q7jTMQ8oShNUhkRBrADkIGz3iD9wqpMjIbtKoH0J:eUVY5UpTqTM1YkIGzSmqpM2HO

Entry address:
0x17AB0

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 57, 1B, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, EF, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, F9, F6, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, 8C, 1D, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83...
 
[+]

Entropy:
6.2409

Code size:
152 KB (155,648 bytes)

The file ntfskd.dll has been discovered within the following program.

Debugging Tools for Windows (x64)  by Microsoft Corporation
Use Debugging Tools for Windows to debug drivers, applications, and services on Windows systems. Debugging Tools for Windows includes a core debugging engine and several tools that provide interfaces to the debugging engine.
www.microsoft.com
9% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.