MdSched.exe

  • File Path: C:\windows\system32\MdSched.exe
  • Description: Windows Memory Diagnostics Tool

Hashes

Type Hash
MD5 377CC9DAE7227D875154579C7BAA6625
SHA1 BAF7066245FB3F9BDE818752A7E666631B8262DC
SHA256 1795E55A21685950E13465873866A4CB79BF6C958F121C124DBCD8D75F155E04
SHA384 99EE7051A2149B24FFD26A4017216431D120F2EDB945CC8CCCADA7D6D3F44B88A69EC5100E46D9F3817494BF47B620B9
SHA512 56BACD36C1547CE6DA750CB6BCB3ED1EBEA75059CCE3E25A6453EB10FA5BF601B5523E1B641D82598A0B6D223A24ACEB8F8902101423D672B9CCD5EA4D8B7EBE
SSDEEP 1536:e1IKpgH5WLasOSDOPm+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:mLdOcOPe/FO+VQDUcUNWs+jm6

Signature

  • Status: The file C:\windows\system32\MdSched.exe is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at http://go.microsoft.com/fwlink/?LinkID=135170
  • Serial: ``
  • Thumbprint: ``
  • Issuer:
  • Subject:

File Metadata

  • Original Filename: MdSched.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 6.3.9600.16384 (winblue_rtm.130821-1623)
  • Product Version: 6.3.9600.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 82
C:\WINDOWS\system32\MdRes.exe 75
C:\Windows\system32\MdRes.exe 80
C:\windows\system32\MdRes.exe 79
C:\Windows\system32\MdRes.exe 83
C:\Windows\system32\MdSched.exe 74
C:\Windows\system32\MdSched.exe 77
C:\Windows\system32\MdSched.exe 75
C:\WINDOWS\system32\MdSched.exe 72

MIT License. Copyright (c) 2020-2021 Strontic.