MdRes.exe

  • File Path: C:\Windows\system32\MdRes.exe
  • Description: Windows Memory Diagnostic

Hashes

Type Hash
MD5 65AA6B6B47D01BF36898D5D06617C623
SHA1 D556B77A69583447BD45FC7D9BD369EDC213F8F5
SHA256 5F81350F8147E8632C6514F06F4487DAAEE7CE2FF1EC53B821D14D862C21A08E
SHA384 C9D630960BD54483BB3EF6C8755FF104C1BFC4A03E456D61C9A7E538AE2E02228CE38C9C9AF4F99EF641F8A958AF8846
SHA512 CEA0D2B7F4EE529994EB0CF955B4F969D22D5A5487B77DB50C043576AE6CF6500914D682380C99C9FA24663F88BAAC1AD4595F9100BE8CE56794333AC9C3FB22
SSDEEP 1536:rZ9Hurm+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:rZ9Ore/FO+VQDUcUNWs+jm6

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MdRes.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 85
C:\WINDOWS\system32\MdRes.exe 85
C:\windows\system32\MdRes.exe 86
C:\WINDOWS\system32\MdRes.exe 86
C:\Windows\system32\MdRes.exe 88
C:\Windows\system32\MdSched.exe 82
C:\windows\system32\MdSched.exe 80
C:\Windows\system32\MdSched.exe 85
C:\Windows\system32\MdSched.exe 82
C:\WINDOWS\system32\MdSched.exe 83
C:\WINDOWS\system32\MdSched.exe 79

MIT License. Copyright (c) 2020-2021 Strontic.