kill.exe

File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kill.exe
Description: Microsoft Process Kill Utility

Hashes

Type	Hash
MD5	`95990D34832DAF395901F64C58EBEA0F`
SHA1	`AFF2F3DA3F322E2E57B073DE6079630B10C2FD0E`
SHA256	`6CF5144826E09AF4D9D3E41C717ED61D780E58383F62E635CDFF30EBD6B752FA`
SHA384	`27FBEAD5AFCDD98C0C70D1706F5852899062827CA17452E1F62F36E8EABCD360BFEBAD312FB3D6B9F4A00494A4D7E0B3`
SHA512	`D018CB8931618D3060A755A4CDC843D3FFEF5A2BCEB92AF00DCD9816DC18FDF6B909929ABFF6D791003C1F6CC0BC626E40AF92857C466D0D06DDD4551813203D`
SSDEEP	`384:Ql1RyR0nKGqTWyy3DKkaA3SN9arPA/kWl616WciqvWgWHwGyA4JeRlF:Ql1R3KFTWpmRA3SNiwkV1s9yg`
IMP	`E1C30333E11B84451371A3F4C6D114EE`
PESHA1	`51AC0D2246A7C0FADD46FD30B9B74DA521193586`
PE256	`987A53F0C2EF94369BBF608A5AC97A43EEAFE5CC27DB8A052EF0B2D5EC48695D`

Runtime Data

Usage (stderr):

Microsoft (R) Windows NT (TM) Version 3.5 KILL
Copyright (C) 1994-1998 Microsoft Corp. All rights reserved

usage: KILL [options] <<pid> | <pattern>>*

           [options]:
               -f     Force process kill

           <pid>
              This is the process id for the task
               to be killed.  Use TLIST to get a
               valid pid

           <pattern>
              The pattern can be a complete task
              name or a regular expression pattern
              to use as a match.  Kill matches the
              supplied pattern against the task names
              and the window titles.

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\kill.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

Status: Signature verified.
Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: kill.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 32-bit

File Scan

VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File	Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\kill.exe	33