rtlist.exe

File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\rtlist.exe
Description: Microsoft User-Mode Process Server Query Tool

Hashes

Type	Hash
MD5	`76D12076EE703D65617C5519B5BC42C9`
SHA1	`BF579DF8C30D50910E729801390BC8B90F3D861D`
SHA256	`ECEFAE02B1D9FCF8618C91B4A949C719C55D414E581CD5E6F50B29A21AC836DE`
SHA384	`820A3BE09E81694F7375AABD45ED71B703F39352BC60753110337BE8BC598488198084891F341F2938C6A3443F6D0A36`
SHA512	`D9663502D4E864C2DA50559386DEDC8F968132BD276F5ED627C9C713C8AC444AD50CD75990AA60C9857C72C6025A8486E2155CE11D98044157CF4F9300FBD8E8`
SSDEEP	`384:2cQCcIYMeMC2teApWO73ZWj8fGw6lx2+t3a:NYMTeAllept3a`
IMP	`925D3A2AF095E9FFC054A76D8AAB9887`
PESHA1	`DC1CB83F2EA53C3704DB2F660B9E70C69E308C33`
PE256	`4A115F24B29341D6942EA188E113D22C9A349B62A16BDA24E7C53DC881BB0B79`

Signature

Status: Signature verified.
Serial: 33000002B7E8E007A82AEF13150000000002B7
Thumbprint: 5A68625F1A516670A744F7EF919500A479D32A5B
Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows Kits Publisher, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: rtlist.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit ARM

File Scan

VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File	Score
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIALoggerXml.dll	41
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIALoggerXml.dll	38
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\dumpchk.exe	36
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\rtlist.exe	33
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-heap-l1-1-0.dll	36
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-math-l1-1-0.dll	40
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-multibyte-l1-1-0.dll	35
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-datetime-l1-1-0.dll	40
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-debug-l1-1-0.dll	38
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-crt-time-l1-1-0.dll	43
C:\Windows\system32\cryptbase.dll	24
C:\Windows\system32\downlevel\api-ms-win-core-shutdown-l1-1-0.dll	36
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-0.dll	43
C:\Windows\system32\downlevel\api-ms-win-core-sysinfo-l1-2-1.dll	38
C:\Windows\system32\downlevel\API-MS-Win-devices-config-L1-1-0.dll	33
C:\Windows\system32\downlevel\API-MS-Win-Eventing-ClassicProvider-L1-1-0.dll	38
C:\Windows\system32\downlevel\API-MS-Win-security-lsapolicy-l1-1-0.dll	38
C:\Windows\SysWOW64\downlevel\api-ms-win-core-heap-l1-1-0.dll	36
C:\Windows\SysWOW64\downlevel\api-ms-win-core-threadpool-legacy-l1-1-0.dll	33
C:\Windows\SysWOW64\dsrole.dll	30
C:\Windows\SysWOW64\nsi.dll	32