MdSched.exe

  • File Path: C:\Windows\system32\MdSched.exe
  • Description: Windows Memory Diagnostics Tool

Hashes

Type Hash
MD5 8F8886C005711C2EAA283E3DF2CE01EC
SHA1 DC1DA6F30F6347024161C210BA6CFC96C7DF8843
SHA256 071A7027621AFFE293F6C99AF0700CC26BEEBF0974DC864AB5C9A1A6751CCA2F
SHA384 F75C4B32D8BE04B4410BD6326220D2BA05A53792F72E135896040D856C5B264C632DB5549A0F149531D0E66A98FCFB6B
SHA512 291659582BADB57E1375E3FB1CAD8D9C9C79C207CD86C3A6BD8CDA269D00394201D9C95BE7D94D59EE585E6E2811D0A1E1B765D17CD3FACCA56EADF03A9B3084
SSDEEP 1536:XCuhL13HwZEUm+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:txNSEUe/FO+VQDUcUNWs+jm6

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MdSched.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 83
C:\WINDOWS\system32\MdRes.exe 79
C:\Windows\system32\MdRes.exe 82
C:\windows\system32\MdRes.exe 80
C:\WINDOWS\system32\MdRes.exe 79
C:\Windows\system32\MdRes.exe 82
C:\Windows\system32\MdSched.exe 82
C:\windows\system32\MdSched.exe 75
C:\Windows\system32\MdSched.exe 82
C:\WINDOWS\system32\MdSched.exe 77
C:\WINDOWS\system32\MdSched.exe 75

MIT License. Copyright (c) 2020-2021 Strontic.