CmdID

CmdID / Files

kdnet.exe

Net debugging configuration tool file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real kdnet.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNet debugging configuration tool

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kdnet.exe · signed by Microsoft Corporation

0db5a4dcb3be5abe889b94a976c203b303cbb189c4ded0c97be7b81bd1569ebc

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\kdnet.exe · signed by Microsoft Windows Kits Publisher

2ca0fb2e06cdb803031125f592a6ac40dae16c2584bd4cc9cbebf98f42a16a65

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\kdnet.exe · signed by Microsoft Windows Kits Publisher

a4801d4d945662b5596ab88042ee8df0d5ae5f0f7f600592d3d1e932c53b1af0

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kdnet.exe · signed by Microsoft Corporation

cf70ec7740426fa7dba91c505c9f8a510be65180451278b64a94970b93abeba4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.