kdsrv.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kdsrv.exe
  • Description: Microsoft Kernel Debugger Connection Server

Hashes

Type Hash
MD5 2FD3B6C74E48584FCFB66D64F6994747
SHA1 92A26C448E87E874FF7796B1C3B4F1AB63F5CAC8
SHA256 6D2807F32A87DE9B0167136721B9F8332C1A58F33FC4792155D880052FC5B7F7
SHA384 245659F4A182177FC0F72E862879B8058DFBE684739E1D23933429F31920383DFE4761ECF27FDBE5D8AB3021BD1C1EA9
SHA512 C45AB7D2614C8A7ED6885DB58722869DA2178C556ABA905198105C0EBB97A9DBC1B9CDBF8BF8687DE442BA30C6F8ADA6205C04DD915DEBB57F13E9B3C49BBDA4
SSDEEP 3072:jcdLM8Omj79t4N27dH7SReekIdt1sompmTeKJhCK/oOMqqD8XK3MH0a80ChXk:jcRM4bHH7uHsSolqqDFaYJ
IMP EDEF8B0D306E305E62CB5B7C16E66E21
PESHA1 6DEE18626B98D34E2C0F439F3C4D774F127FC728
PE256 1B419FEC40B25577294B0DFD4DC170FDC54B837A430D180763C29C05CA5EB057

Runtime Data

Usage (stdout):

Error 0x80070057: Server initialization

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kdsrv.exe
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll
C:\Windows\System32\WS2_32.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kdsrv.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/6d2807f32a87de9b0167136721b9f8332c1a58f33fc4792155d880052fc5b7f7/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\kdsrv.exe 27
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kdsrv.exe 25
C:\Windows\system32\kdnet.dll 25

MIT License. Copyright (c) 2020-2021 Strontic.