MdSched.exe

  • File Path: C:\WINDOWS\system32\MdSched.exe
  • Description: Windows Memory Diagnostics Tool

Hashes

Type Hash
MD5 D8E7439565B126AD33520B090E7888B0
SHA1 D9CD3860E0A2583447743B019D2ADCBE8D45220E
SHA256 AC2549C243DE7C7B334CCA215AF81EB4289A864DF9410D8C74B29B141D26EADB
SHA384 1CA0DAC57834BA675699624018AF78830EB942B114394CA722BD804B002B5E6808CDFBFCC582D0C7C178B1346BBF2F40
SHA512 205463DD025D051BFB9F79AF2F3F6AF1D493E5157ED2828DA0868D372EE67D898F6EF19737CB1FC5DC1A9969B58C3C58B77B69EBD7904CC843AF39B3B59E8582
SSDEEP 1536:i9n7ttvwY5rA7m+65tFI720+VpmDOzc4JNWxwB1MjVJmRc:ixttvXA7e/FO+VQDUcUNWs+jm6

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MdSched.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\MdRes.exe 80
C:\WINDOWS\system32\MdRes.exe 80
C:\Windows\system32\MdRes.exe 83
C:\windows\system32\MdRes.exe 77
C:\WINDOWS\system32\MdRes.exe 79
C:\Windows\system32\MdRes.exe 79
C:\Windows\system32\MdSched.exe 80
C:\windows\system32\MdSched.exe 72
C:\Windows\system32\MdSched.exe 83
C:\Windows\system32\MdSched.exe 77
C:\WINDOWS\system32\MdSched.exe 77

MIT License. Copyright (c) 2020-2021 Strontic.