CmdID

CmdID / Files

securekernel.exe

NT Secure Kernel file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real securekernel.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNT Secure Kernel

12 known copies

10.0.22000.71 (WinBuild.160101.0800) · C:\WINDOWS\system32\securekernel.exe · signed by Microsoft Windows

af37451f7ca47ef501f7307e7d45142a839e2e16b820f342efd223e4bb341c4a

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

76e30b0ee68cd42445ad5cf493cb178c3fb4b6fba70d62847b03c26b9cc4e43e

10.0.19041.572 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

96e7806b10255d429a05ea93c36fcfeda8a4c3b7c7a9e7ac06342a3085512762

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

74c75424ffb3be1457a5ded49f0a112af4f80430cc7554e5b03998ac84383daa

10.0.19041.450 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

178d6dd6d9931b8d9d69f6e475725c2cc447d7d1d0ea97b908154428b9de4e54

10.0.19041.207 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

7f85188451ee4671f4a82e296fca5a6fc2abdcfa99ee26a39566030aab9f31fd

10.0.19041.1023 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

f33a1fa4ad884e6f26629edb406729c492c10628f955849d7e9e09a9386b938f

10.0.18362.778 (WinBuild.160101.0800) · C:\WINDOWS\system32\securekernel.exe · signed by Microsoft Windows

b9f662eb2da3106f40904b82c8c0d30673726469edfc7093f25405db1811666d

10.0.17763.1518 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

b24a313e33ca411d6510de7a6101c594d10ee6922a58a9dc59328429e2e86007

10.0.17763.1397 (WinBuild.160101.0800) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

66d246747370a38b9be3d5d55a5e178cc6c35ec1f845d08a64cd8e9b6054fe7d

10.0.17763.1158 (WinBuild.160101.0800) · C:\windows\system32\securekernel.exe · signed by Microsoft Windows

8c28b246b2f38b920135a556cb8d26529f6e8df9bf3abe104ac3f1f4485b31f4

10.0.14393.3503 (rs1_release.200131-0410) · C:\Windows\system32\securekernel.exe · signed by Microsoft Windows

19690101cd07a131e458a9bbc8e9cf2bea82bc9fb5252c63a3f6cbe73c0e58a3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.