» winidbg.dll
Overview
Analysis
File Details
Programs (1)

winidbg.dll

WinInet Debugger Extension

Microsoft Corporation

This is installed with Debugging Tools for Windows (x64).

File name:

winidbg.dll

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft® Windows® Operating System

Description:

WinInet Debugger Extension

Version:

6.1.7650.0 (fbl_tools_debugger(wmbla).091016-1729)

MD5:

870e3bfac547e5803ff9941f2e67666b

SHA-1:

a1420a3e916052ca504d5d6ed0f50f8e50c0ae64

SHA-256:

fb1204e63f3c8227ae27a65b02a8d9fedb22a348ff63d2e251f6ae6c12c3fecb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/27/2024 2:01:53 AM UTC (today)

File size:

33.3 KB (34,048 bytes)

Product version:

6.1.7650.0

Original file name:

winidbg.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\Program Files\debugging tools for windows (x64)\pri\winidbg.dll

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

7/13/2009 4:00:18 PM

Valid to:

10/13/2010 4:10:18 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6105F71E000000000032

File PE Metadata

Compilation timestamp:

10/16/2009 5:33:51 PM

OS version:

6.1

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

384:CwjEiIyiWpoIjW4D7suWX95kIitX4w+aomyUjmDt30Iq0VmE95YKRfd2K/146WWa:HjEiIHWPD7suWMIL9LVrYB69+GAZ

Entry address:

0x4DA4

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 97, 02, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, CB, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, 40, 53, 48, 83, EC, 20, 45, 8B, 18, 48, 8B, DA, 4C, 8B, C9, 41, 83, E3, F8, 41, F6, 00, 04, 4C, 8B, D1, 74, 13, 41, 8B, 40, 08, 4D, 63, 50, 04, F7, D8, 4C, 03, D1, 48, 63, C8, 4C, 23, D1, 49, 63, C3, 4A, 8B, 14, 10, 48, 8B, 43, 10, 8B, 48... 
[+]

Entropy:

6.1749

Code size:

19 KB (19,456 bytes)

The file winidbg.dll has been discovered within the following program.

Debugging Tools for Windows (x64) by Microsoft Corporation

Use Debugging Tools for Windows to debug drivers, applications, and services on Windows systems. Debugging Tools for Windows includes a core debugging engine and several tools that provide interfaces to the debugging engine.

www.microsoft.com

9% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.