rqs.exe

  • File Path: C:\Windows\system32\rqs.exe
  • Description: Windows NT Remote Quarantine Server

Hashes

Type Hash
MD5 AF012F15098B4F12612337B0032CF5AF
SHA1 861E4FE9A16D5B8AFBE3131F3D0550C2D4C10BDB
SHA256 70ECEF4987E8F3F4F71B63DE343CE70A3140D8109DFF4ADEB9AABB5DAB2A0D26
SHA384 57CD6E04FB07AC98A8A6468771D0122C53021C70E8E15D3C18EF9B4A2E54A1D1374779616B84F0D166697982FDBBAE03
SHA512 63A12CB844ED175B8CE5095219C5F0FE38A2C9EAFA37A77D922FC27E800041C76D9AF139D819BCFE64242CDBE6359734AD127260DDBC607EE29694E95E829678
SSDEEP 768:vfc/WvUmMPu0m8R16zZKtuvu8UQcclorRQ7/kgbYk0DYGo1:3SWvU/IsFcfk8Go1

Runtime Data

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\rqs.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: rqs.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

MIT License. Copyright (c) 2020-2021 Strontic.