cng.sys
Kernel Cryptography, Next Generation
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “CNG”. It is installed with Windows 7.

Product:
Microsoft® Windows® Operating System
Description:
Kernel Cryptography, Next Generation
Part of the Windows 7 (with Service Pack 1) Operating System
Version:
6.1.7601.21861 (win7sp1_ldr.111116-1505)
MD5:
378fe2aef273419d1ee31620e83de94a
SHA-1:
691a8401c09e6b90b0538f6d1af068f3b24217f7
SHA-256:
a39a1f7b879ad073f284b97b0cd42ec6fb532952099e71d9abb695942e41c442
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
4/1/2026 8:51:19 PM UTC (today)
File size:
360.7 KB (369,352 bytes)
Product version:
6.1.7601.21861
Copyright:
© Microsoft Corporation. All rights reserved.
Original file name:
cng.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\cng.sys
Authority:
Microsoft Corporation
Valid from:
2/14/2011 11:11:34 PM
Valid to:
5/14/2012 11:11:34 PM
Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
6102E0B900000000000E
CTPH (ssdeep):
6144:SfXfiypFqiayFEdQbXLD1OkHmjhZXJHcil4Uf+YR32DCh3qqDL6nqqDLu0f5BvKv:SfXfiy1FuEDmj/XzFz32DQaqn6qqnu/R
Driver
Type:
Kernel device driver (KernelDriver)

