Clockres64.exe

  • File Path: C:\SysinternalsSuite\Clockres64.exe
  • Description: Clock resolution display utility

Hashes

Type Hash
MD5 12F3605F984AACBDD106BCD57A751EBF
SHA1 3EBA53BEA7BA8268286A6EBDCE11C466E1EEC183
SHA256 B594B8B9E5D6A706A33AE2E4C7B37C5AAFEE9BEF0B3E156205F65ECDAAB94FCD
SHA384 E2482DF820093D1F77CE3078EA4AAEBE8931C31BACE41A8126252010E62701ED7EC89A51C233D18F4D70443708D0A229
SHA512 1CE58FCA8CB3D6D06E7BB6877140864B64E29F771AE06A3999B08933D5AF0CBA2C0F30ABB7B1A5B8D7CB4B9006703CB6EDE54725B85BCEA1650582E3D21C5519
SSDEEP 6144:qXxIzn2Q+XfiohT1NBHhnsG0Z3v/dcMvpAYQhZqDQhZEvaJ+3xijPtvKgPN7u:qhyJ+XvnsG0Z3v/dcMaYQ7qD6Pdu
IMP 7D9D3C0AA1083962BB7CDC032BD7D101
PESHA1 F46E510152863921F8705D0956C1F99E87EE169B
PE256 5C1A6288324CE1D0D9A196FCA30E369780A9EC9CDD6A54CD22F6C0ED8055B13F

Runtime Data

Usage (stdout):


Clockres v2.1 - Clock resolution display utility
Copyright (C) 2016 Mark Russinovich
Sysinternals

Maximum timer interval: 15.625 ms
Minimum timer interval: 0.500 ms
Current timer interval: 15.625 ms

Loaded Modules:

Path
C:\SysinternalsSuite\Clockres64.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000187721772155940C709000000000187
  • Thumbprint: 2485A7AFA98E178CB8F30C9838346B514AEA4769
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Clockres
  • Product Name: Sysinternals Clockres
  • Company Name: Sysinternals
  • File Version: 2.1
  • Product Version: 2.1
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2016 Mark Russinovich
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/b594b8b9e5d6a706a33ae2e4c7b37c5aafee9bef0b3e156205f65ecdaab94fcd/detection/

Possible Misuse

The following table contains possible examples of Clockres64.exe being misused. While Clockres64.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_false_sysinternalsuite.yml - '\Clockres64.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.