rhs.exe

  • File Path: C:\Windows\SysWOW64\rhs.exe
  • Description: Failover Cluster Resource Host Subsystem

Hashes

Type Hash
MD5 F3A807F807E9826D9F523101599207A7
SHA1 BBB27F366369FB2585E76EC5979117C91F572D18
SHA256 C3489B02E9BA00774676812640664B1EFB0C98A1E5D4D046BD6B7125498F3747
SHA384 AD7772A86E1A48D1C26C08A43916DC1DA5407072EEBD2B38A6554529B9DC25DA24F40D35630773162B7C330BFB124885
SHA512 8BF61771E3D7FEAEC5746389D125A0234DC393FB0199A6F81DA2F571CA66D416100D9323D8C011822590136BF9E6388B9868FF5BD7B3583F799416EC0953BE84
SSDEEP 12288:MFm2Q95REKEz8mN20g3g03ubyIYgNl06Xg2TaNfvxU1AICo:B2QMz8mvgN3ubyID0qaNfvx0lCo

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\rhs.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Rhs.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.