cng.sys
Kernel Cryptography, Next Generation
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “CNG”. It is installed with Windows 7 as a General Distribution Release (GDR) as part of a Hotfix.

Product:
Microsoft® Windows® Operating System
Description:
Kernel Cryptography, Next Generation
Part of the Windows 7 (with Service Pack 1) Operating System
Version:
6.1.7601.17725 (win7sp1_gdr.111116-1503)
MD5:
6427525d76f61d0c519b008d3680e8e7
SHA-1:
bd82171b34bc5a1a5d7d3d94523cd5366a3a5dd3
SHA-256:
956e0fe9c628d0017f36c01f1a326231da64d1cd94d5ab16ebfea103d3960367
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
4/1/2026 10:24:38 PM UTC (today)
File size:
360.7 KB (369,352 bytes)
Product version:
6.1.7601.17725
Copyright:
© Microsoft Corporation. All rights reserved.
Original file name:
cng.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\cng.sys
Authority:
Microsoft Corporation
Valid from:
2/14/2011 7:11:34 PM
Valid to:
5/14/2012 6:11:34 PM
Subject:
CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Windows Verification PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
6102E0B900000000000E
CTPH (ssdeep):
6144:DfXfiypFqiayFEdQbXLD1OkHmjhZXJHcil4Uf+YR32DChUqqDL66qqDLu0f5BvKN:DfXfiy1FuEDmj/XzFz32DQxqn6Pqnuhh
Driver
Type:
Kernel device driver (KernelDriver)

