cng.sys
Kernel Cryptography, Next Generation
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “CNG”. It is included with the Windows 7 OS.

Product:
Microsoft® Windows® Operating System
Description:
Kernel Cryptography, Next Generation
Part of the Windows 7 Operating System
Version:
6.1.7600.21092 (win7_ldr.111116-1503)
MD5:
2100a7156575e789c17f50fba75d4db8
SHA-1:
0b3e65481564833d6df6630b1de2f543427aec8d
SHA-256:
e03b6b3f4c44a94370d646910a8f409f5d3264a6fa8ace1f03d4bd3bd570185c
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
4/1/2026 10:24:58 PM UTC (today)
File size:
360.7 KB (369,352 bytes)
Product version:
6.1.7600.21092
Copyright:
© Microsoft Corporation. All rights reserved.
Original file name:
cng.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\cng.sys
Authority:
Microsoft Corporation
Valid from:
2/14/2011 9:11:34 PM
Valid to:
5/14/2012 9:11:34 PM
Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
6102E0B900000000000E
CTPH (ssdeep):
6144:hfXfiypFqiayFEdQbXLD1OkHmjhZXJHcil4Uf+YR32DChvqqDL65qqDLu0f5BvKy:hfXfiy1FuEDmj/XzFz32DQyqn60qnuIb
Driver
Type:
Kernel device driver (KernelDriver)

