kd.exe

• File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\kd.exe
• Description: Windows Kernel Debugger

Hashes

Type	Hash
MD5	F6B9E69A6C0563D9338B4B73EBAAC34C
SHA1	B5945BEDF6668DF73397745D150C828A928FEDB5
SHA256	23150CEB2FF1CA823095F297ACA32BC1B1EA3993E030C8CF0B48DA92094C7113
SHA384	493E1F93A1F71722169000A7C9192B94959069A256260BF2084120355345E69EFBAA0B07B32BBC8FB9CE195429B97836
SHA512	1B9C93FCFB38D4D165B367395BD0AD11D196F8A30D7CF40CAAD2F2F177EC0E15FEE84173A04038F97FADE7D00D7198CCF38A03AEB15F18173B1407736D97D70C
SSDEEP	3072:JQ+DfFnbMwmoWATuajAmobD8TiD7y3WKHp55AOxo3GIBNJ:JQpmCD7sHp5SOu3LZ
IMP	B4EBCFC93EB23586062A42954008DC26
PESHA1	093C91F0654D5FD16DEF24393BBB7EE2D322D98E
PE256	D5F18391480115627BCBA65A94E4DE6257A1DD90CEE7CD3081DA16FC3FCA1F9F

Signature

• Status: Signature verified.
• Serial: 33000002B7E8E007A82AEF13150000000002B7
• Thumbprint: 5A68625F1A516670A744F7EF919500A479D32A5B
• Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: kd.exe
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.1 (WinBuild.160101.0800)
• Product Version: 10.0.19041.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 452

File Scan

• VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File	Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\cdb.exe	41
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\ntkd.exe	41
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\ntsd.exe	38
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\cdb.exe	41
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kd.exe	49
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\ntkd.exe	40
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\ntsd.exe	40

MIT License. Copyright (c) 2020-2021 Strontic.