rtlist.exe
- File Path:
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\rtlist.exe
- Description: Microsoft User-Mode Process Server Query Tool
Hashes
Type |
Hash |
MD5 |
7507ED8EAC18BC6B4B360549E5F94787 |
SHA1 |
60BFBC463B89FC917726D8EDF9D1A704109BB7EB |
SHA256 |
6640E4E7E9C2C0F0EAC82134D6600E2F5ED550D4716EF8D12C79D91FED1EA813 |
SHA384 |
2A2036E77D36D11FD8679231B6AD2763F87071CF019927F594BD39B20C4B0DB5C36AF806465BCFFEA31EF4B23180CE3C |
SHA512 |
821D5E4037E08A3F571B36DBFD7171E1CD9BAD1C7B56F1D18DF7C1A7584D05157B44CE0EAFDBED4FB299B6FD465205CD7EB27CC17F58B3D00B9850369619BDC2 |
SSDEEP |
384:Ur7nvIJf+n3Ly2D259gBWO73ZW3qwGyjlD:0Tn3HE9gNh |
IMP |
7691408898FCC0FDFE9278339D36DA6F |
PESHA1 |
1E099C755249ADC7B85074395F5AE18E84BD656B |
PE256 |
F6B496E461E587B3846AD425BFE5107CA04B993F81DF9CA4440942FF12314EFD |
Runtime Data
Usage (stdout):
Usage: rtlist <Options>
Options are:
-premote <Options> - Connect to process server
-pn <Name> - Look for process name
Loaded Modules:
Path |
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\rtlist.exe |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\wow64.dll |
C:\Windows\System32\wow64cpu.dll |
C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
33000002CF6D2CC57CAA65A6D80000000002CF
- Thumbprint:
1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
- Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: rtlist.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: Unknown
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.