» userexts.dll
Overview
Analysis
File Details
Programs (1)

userexts.dll

USER Symbolic Debugger Extensions

Microsoft Corporation

This is installed with Debugging Tools for Windows (x64).

File name:

userexts.dll

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Operating System

Description:

USER Symbolic Debugger Extensions

Version:

6.1.7650.0 (fbl_tools_debugger(wmbla).091016-1729)

MD5:

cc4f90d7ced4a47a881f07bbc54c54dc

SHA-1:

4a56a0c6cf46cefe8c5b8c617975775c6a4a51fc

SHA-256:

37cae88ee0a623c3356cfbc5403f37389436188885fc1b9de5c244e855965dc9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

5/10/2024 10:35:59 PM UTC (today)

File size:

202.3 KB (207,104 bytes)

Product version:

6.1.7650.0

Original file name:

userexts

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\debugging tools for windows (x64)\pri\userexts.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

7/13/2009 4:00:18 PM

Valid to:

10/13/2010 4:10:18 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6105F71E000000000032

File PE Metadata

Compilation timestamp:

10/16/2009 5:33:42 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

3072:SSXpGDrtFFp1xFzQGEg4RYSY4akNAVrpd3JI9kHBIqzT/4Y1AX:SS4rtFFJFeg4RFAVn5I9kHBIqzzZM

Entry address:

0x26078

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 0B, 02, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, CB, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 29, 20, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, 70, 02, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC... 
[+]

Entropy:

5.8024

Code size:

155 KB (158,720 bytes)

The file userexts.dll has been discovered within the following program.

Debugging Tools for Windows (x64) by Microsoft Corporation

Use Debugging Tools for Windows to debug drivers, applications, and services on Windows systems. Debugging Tools for Windows includes a core debugging engine and several tools that provide interfaces to the debugging engine.

www.microsoft.com

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.