kill.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kill.exe
  • Description: Microsoft Process Kill Utility

Hashes

Type Hash
MD5 1068294A19FE12065DE0A97BA0ABB627
SHA1 FF523C049584554159A586E58A02351C6C4CA775
SHA256 02B7A8389602DA429607650F15E20250ACB1DF754C5DB3118E0F3542E1D5A316
SHA384 3350EFAE3490B29F0EE1B6C44205A2A8156D745FC8B98B41C72186D908BF481A8115DC92D8117BCEB823507B0E9A6180
SHA512 B21603B08D75DD4EE97F7F6AEFE83F430FADE022720A5D115DEDA85ABC926568024BC250D44DC69BA5C3F980512F544830BFA5FECA104EE39489D7F203A9526C
SSDEEP 384:T+n+EwU6KhfPRQiXdr3g019+UN1Cjyq45RJRi6IiWciqvWLwGyy4ulI:T++EH6wPR/wORz1xbJ3Ik+i
IMP DA6D5C1049DA679AB196D41CA3A57EE3
PESHA1 6AC1EF2D70F0C837C688E2247E323EA23F3F2753
PE256 B3312AC61D1CC4F907198B60DDB3DBC71BAB82D1919D19976F07DA5E6738621E

Runtime Data

Usage (stderr):

Microsoft (R) Windows NT (TM) Version 3.5 KILL
Copyright (C) 1994-1998 Microsoft Corp. All rights reserved

usage: KILL [options] <<pid> | <pattern>>*

           [options]:
               -f     Force process kill

           <pid>
              This is the process id for the task
               to be killed.  Use TLIST to get a
               valid pid

           <pattern>
              The pattern can be a complete task
              name or a regular expression pattern
              to use as a match.  Kill matches the
              supplied pattern against the task names
              and the window titles.

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\kill.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: kill.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/02b7a8389602da429607650f15e20250acb1df754c5db3118e0f3542e1d5a316/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\kill.exe 32

MIT License. Copyright (c) 2020-2021 Strontic.