CmdID

CmdID / Files

kill.exe

Microsoft Process Kill Utility file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real kill.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Process Kill Utility

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kill.exe · signed by Microsoft Corporation

02b7a8389602da429607650f15e20250acb1df754c5db3118e0f3542e1d5a316

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kill.exe · signed by Microsoft Corporation

6cf5144826e09af4d9d3e41c717ed61d780e58383f62e635cdff30ebd6b752fa

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\kill.exe · signed by Microsoft Windows Kits Publisher

d1e263299752b18a056f5ee360b58a066a02c611da2316ddb1d02327f28bf7d6

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\kill.exe · signed by Microsoft Windows Kits Publisher

fc4c9e435686b3216ba1db06445b10c8af2ca176c5170a0624bc126e952e9326

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.