hdwwiz.cpl

File Path: C:\Windows\system32\hdwwiz.cpl
Description: Add Hardware Control Panel Applet

Hashes

Type	Hash
MD5	`E2AE9AB93593594E27467175167A5394`
SHA1	`C0F2BF086581249A68CDFBA77ACF5E3BB5D9A314`
SHA256	`4EED83D77AE627A52250852C739B76E97617228DF585060084CFC08B2853A482`
SHA384	`34D6D7C945B6C5DBCE8F97F5A81A544346A5744B80CBE217CB4226C150DA0AD215161E8437DF7A1212381E4E00567E74`
SHA512	`BA6A7970E0E49F61F69B89B998255BD69030498A23CA24D2C6401D303BD46691B42C5C86601BCF5202C7201F977FB839BD55D6EEEA62C22A058D5ECE9B9DA1D4`
SSDEEP	`6144:PY11gaKzK2yi/MFJmF5GnXsSUnL620P3cRRtyQZBRYWRDMuFz3o3xPS4BP:6jJNsSUL8tucu93o3JS4BP`
IMP	`976BC6136381FA7001B36350E621A6C8`
PESHA1	`24372689F868AFC348E745F15A27FB60D59F45D9`
PE256	`B4ECA93B70986613DA4EBF6A30EE1ED09AD0949EC0E7AFB151034743CDC1FCC6`

Runtime Data

Child Processes:

mmc.exe

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\imagehlp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\SYSTEM32\rundll32.exe
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: hdwwiz.cpl.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/4eed83d77ae627a52250852c739b76e97617228df585060084cfc08b2853a482/detection

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\hdwwiz.cpl	85

MIT License. Copyright (c) 2020-2021 Strontic.