MdRes.exe

• File Path: C:\WINDOWS\system32\MdRes.exe
• Description: Windows Memory Diagnostic

Hashes

Type	Hash
MD5	4D39CFCDAE03CBD0CE29CAE5CFD45883
SHA1	F849D5882359A6F0F25A91E958C1EA7DBCF0FF9A
SHA256	D0D1FF3026085B35EB40F1A00D5C238824964C39E9C19D9CE41AA3FF43A45A64
SHA384	CCE25E908C8F9BD1D979638D282B531B82A2B75AB9FECAF1D6A331DEF5B8455F5E7DF77D48E2E652DF2B09BDAF6AC049
SHA512	3B216CA948FC9111AEF0F402580B67334D46C4356EBB09976D74C85FF0A97D3BDDEBD016DD77560155B92721EFB47147C1E32164802F235BAD1FB14CEDB5F378
SSDEEP	1536:YQM40nim+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:YQM4Mie/FO+VQDUcUNWs+jm6

Signature

• Status: Signature verified.
• Serial: 3300000266BD1580EFA75CD6D3000000000266
• Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: MdRes.exe.mui
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.18362.1 (WinBuild.160101.0800)
• Product Version: 10.0.18362.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\MdRes.exe	85
C:\Windows\system32\MdRes.exe	85
C:\windows\system32\MdRes.exe	85
C:\WINDOWS\system32\MdRes.exe	83
C:\Windows\system32\MdRes.exe	88
C:\Windows\system32\MdSched.exe	80
C:\windows\system32\MdSched.exe	75
C:\Windows\system32\MdSched.exe	83
C:\Windows\system32\MdSched.exe	79
C:\WINDOWS\system32\MdSched.exe	80
C:\WINDOWS\system32\MdSched.exe	80

MIT License. Copyright (c) 2020-2021 Strontic.