rtlist.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\rtlist.exe
  • Description: Microsoft User-Mode Process Server Query Tool

Hashes

Type Hash
MD5 7507ED8EAC18BC6B4B360549E5F94787
SHA1 60BFBC463B89FC917726D8EDF9D1A704109BB7EB
SHA256 6640E4E7E9C2C0F0EAC82134D6600E2F5ED550D4716EF8D12C79D91FED1EA813
SHA384 2A2036E77D36D11FD8679231B6AD2763F87071CF019927F594BD39B20C4B0DB5C36AF806465BCFFEA31EF4B23180CE3C
SHA512 821D5E4037E08A3F571B36DBFD7171E1CD9BAD1C7B56F1D18DF7C1A7584D05157B44CE0EAFDBED4FB299B6FD465205CD7EB27CC17F58B3D00B9850369619BDC2
SSDEEP 384:Ur7nvIJf+n3Ly2D259gBWO73ZW3qwGyjlD:0Tn3HE9gNh
IMP 7691408898FCC0FDFE9278339D36DA6F
PESHA1 1E099C755249ADC7B85074395F5AE18E84BD656B
PE256 F6B496E461E587B3846AD425BFE5107CA04B993F81DF9CA4440942FF12314EFD

Runtime Data

Usage (stdout):

Usage: rtlist <Options>
Options are:
    -premote <Options> - Connect to process server
    -pn <Name>         - Look for process name

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\rtlist.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rtlist.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\rtlist.exe 36
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\rtlist.exe 43

MIT License. Copyright (c) 2020-2021 Strontic.