MdRes.exe

  • File Path: C:\WINDOWS\system32\MdRes.exe
  • Description: Windows Memory Diagnostic

Hashes

Type Hash
MD5 4D39CFCDAE03CBD0CE29CAE5CFD45883
SHA1 F849D5882359A6F0F25A91E958C1EA7DBCF0FF9A
SHA256 D0D1FF3026085B35EB40F1A00D5C238824964C39E9C19D9CE41AA3FF43A45A64
SHA384 CCE25E908C8F9BD1D979638D282B531B82A2B75AB9FECAF1D6A331DEF5B8455F5E7DF77D48E2E652DF2B09BDAF6AC049
SHA512 3B216CA948FC9111AEF0F402580B67334D46C4356EBB09976D74C85FF0A97D3BDDEBD016DD77560155B92721EFB47147C1E32164802F235BAD1FB14CEDB5F378
SSDEEP 1536:YQM40nim+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:YQM4Mie/FO+VQDUcUNWs+jm6

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MdRes.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 85
C:\Windows\system32\MdRes.exe 85
C:\windows\system32\MdRes.exe 85
C:\Windows\system32\MdRes.exe 88
C:\Windows\system32\MdSched.exe 80
C:\windows\system32\MdSched.exe 75
C:\Windows\system32\MdSched.exe 83
C:\Windows\system32\MdSched.exe 79
C:\WINDOWS\system32\MdSched.exe 80

MIT License. Copyright (c) 2020-2021 Strontic.