CmdID

CmdID / Files

CheckNetIsolation.exe

AppContainer Network Isolation Diagnostic Tool file version info

Program on Windows 14 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CheckNetIsolation.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAppContainer Network Isolation Diagnostic Tool

14 known copies

10.0.22000.258 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

81a5c19ea60c4232341abeadd916406ecff7746c9cf9cc2c32f57dfe459e5283

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CheckNetIsolation.exe · signed by Microsoft Windows

87a0c85a178f3afcdce380a1802fe6b50f1d3c0e996d25a58bf1e4213f9e7f43

10.0.19041.964 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

6e480fcb3c5b621025ea1e12810d58e64b5ad260e6dfbae8017468b07f20c381

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

9243004d116c726f0ad5dcd744d1b2242fc40917d1fde5396cdc8516369dacf3

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CheckNetIsolation.exe · signed by Microsoft Windows

9cb971f87c46b7f96b83cf601c49af9629d0b688a6a8b5c68192aa96adef6c45

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CheckNetIsolation.exe · signed by Microsoft Windows

b344ec7d8384b00b3c97c9b82aa37d92a7d36142fe8dd321b24b475779ded3f9

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CheckNetIsolation.exe · signed by Microsoft Windows

09942e17fdf9f9f951796121d6ea02b023c1b75667402db6c1de72b93119bc88

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

e32f16168e09cb3b18c512c682074d1938c408fd5a8cd92752b2d4f911dad97c

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\CheckNetIsolation.exe · signed by Microsoft Windows

67bc058c8ea0b7fd21c412efc0d2eecc4afb67cf5bdc5981a8212e1af8fdf49e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

bf557534ced01cf06a6d53c9b61cbe7668163c7b3aab7bff386fada0f68a122e

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\CheckNetIsolation.exe · signed by Microsoft Windows

50347f36c3a86fe09d643faec7be702ce6e36ed0ac4904ca441d188f8c7766c9

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\CheckNetIsolation.exe · signed by Microsoft Windows

5c47ab615178cfbd5633f77029f7b05c8f7151c865a3cf3e347312c6a04167aa

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\CheckNetIsolation.exe · not signed

259e2c3bc9b6655876caf607dd15c88c96cb532a26d5520bdebaa5d388714eb5

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\CheckNetIsolation.exe · not signed

a36892e480544b78981c04b26dd144f2c8db1430caa1b31a112ae6045b4e77a0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.