Clockres.exe

  • File Path: C:\SysinternalsSuite\Clockres.exe
  • Description: Clock resolution display utility

Hashes

Type Hash
MD5 0097977DCD28839568F10FEABAD1B623
SHA1 D4B8BD3A2F2D8D495FE18E121C642B5CE3F4EE76
SHA256 4DB4539C62F448C5CF563CDD02CD6D349E9A5F66BA1D757A66C28C51EFFEB0A5
SHA384 53D2B83D31244EBAF55BAE4514F27FA6DACBC566DA44EB2CC10B61C31D8D5DA49114425167BAC90E9B549C38E3DBB7D8
SHA512 D8D8301CEFFCAEDE6CA79BEF9BE193261FE3ED20299FA3EB38733C1FFDA4020111D757047E763D004966C500C346A72008E841E28396A478F5D57C9C6A695060
SSDEEP 6144:AkGTJsj7Tgp4vfPIZAZ6RFk3WGo9AYfo6nswGqM:IJY3gp43PyAsG3NmM
IMP 62A04FCA0D3481E7403719E0018B6594
PESHA1 FB9744B0D4148E59A3E35A540AAC5C09678B74CD
PE256 F03A3A97208B373EEB997D1C154AD7FB642815324171CA478B8404497D28D5B9

Runtime Data

Usage (stdout):


Clockres v2.1 - Clock resolution display utility
Copyright (C) 2016 Mark Russinovich
Sysinternals

Maximum timer interval: 15.625 ms
Minimum timer interval: 0.500 ms
Current timer interval: 15.625 ms

Loaded Modules:

Path
C:\SysinternalsSuite\Clockres.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000187721772155940C709000000000187
  • Thumbprint: 2485A7AFA98E178CB8F30C9838346B514AEA4769
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Clockres
  • Product Name: Sysinternals Clockres
  • Company Name: Sysinternals
  • File Version: 2.1
  • Product Version: 2.1
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2016 Mark Russinovich
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/4db4539c62f448c5cf563cdd02cd6d349e9a5f66ba1d757a66c28c51effeb0a5/detection/

Possible Misuse

The following table contains possible examples of Clockres.exe being misused. While Clockres.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\Clockres.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.