MdRes.exe

  • File Path: C:\windows\system32\MdRes.exe
  • Description: Windows Memory Diagnostic

Hashes

Type Hash
MD5 AADC9A8194CDEC4908A8DFD82FD75D9F
SHA1 95B4C4B713966A0F664C9551BBF25A12F2227FF6
SHA256 09BC5032927AE5EC5EDAA71DFF73372B9391C82D1FD6AE0BC1318D36749506E3
SHA384 88456E9B824C45EE7B346D9ED68D907F55B51F1B61B7849DBC5D42083115995896725C6462E26A843D7616237ED1BDB4
SHA512 879ED5FC921C2268C1811963FDA948C4EB1E32A5F50323133BE512171BC96FB87F263ADE640F3E3B5FEB4889EA731D9DAA80E166B61C1F1690F2F9B19CCF68DD
SSDEEP 1536:FrEzCPMLbiOm+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:FraC3Oe/FO+VQDUcUNWs+jm6

Signature

  • Status: The file C:\windows\system32\MdRes.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: MdRes.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 80
C:\WINDOWS\system32\MdRes.exe 85
C:\Windows\system32\MdRes.exe 86
C:\WINDOWS\system32\MdRes.exe 80
C:\Windows\system32\MdRes.exe 80
C:\Windows\system32\MdSched.exe 77
C:\windows\system32\MdSched.exe 79
C:\Windows\system32\MdSched.exe 79
C:\Windows\system32\MdSched.exe 80
C:\WINDOWS\system32\MdSched.exe 77
C:\WINDOWS\system32\MdSched.exe 77

MIT License. Copyright (c) 2020-2021 Strontic.