hdwwiz.exe

  • File Path: C:\Windows\SysWOW64\hdwwiz.exe
  • Description: Add Hardware Wizard

Screenshot

hdwwiz.exe

Hashes

Type Hash
MD5 AAB85DCBD157E87F02D6CA30E31A5CB4
SHA1 78565EDE1FDE1545B670BD1A9ADD6848144C0E9F
SHA256 79CCCF88DD152C2AB8BE92BC8B835CDA56728D381BE3617042620B0A5CD9308B
SHA384 24A647E19588E14196127CEFA37C842EECD7A6FA44DF5C8D68EBC80691D963EB95B9F37B4C144C4ED2E183C40F846739
SHA512 50C341D3B5E382B96E6023E75BF457D8A367A5F3AEEF1BDA91F19C48EFEFDEE2A3ADE77AD8BC474CC764C32DBADAC0436218D605623DB312F007EF3D05EFE22D
SSDEEP 768:5f9l5eg2CdmmZy4G0In3BhzhWM1GOVz17Lu:V9begXZ4Z3qOTH
IMP 16C7138C6C79EEC345D753F88CF4C38D
PESHA1 76B52F2DC406628181A6745DEDDAE87D81637C14
PE256 1710DE00C714815FD3ACA9B1E3B05A0B96B3D45354B07729655FD568C0B68E2B

Runtime Data

Window Title:

Add Hardware

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\devmgr.dll.mui File
(R-D) C:\Windows\System32\en-US\hdwwiz.cpl.mui File
(R-D) C:\Windows\System32\en-US\hdwwiz.exe.mui File
(R-D) C:\Windows\System32\en-US\newdev.dll.mui File
(R-D) C:\Windows\System32\en-US\setupapi.dll.mui File
(R-D) C:\Windows\System32\en-US\shell32.dll.mui File
(R-D) C:\Windows\System32\shell32.dll File
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.1518_en-us_3c26ab8c9470805a\comctl32.dll.mui File
(RW-) C:\Users\user File
(RW-) C:\Windows File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.17763.1518_en-us_3c26ab8c9470805a File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.1518_none_261b62a767ca4e6d File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme2131664586 Section
\Windows\Theme966197582 Section

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\hdwwiz.exe

Signature

  • Status: Signature verified.
  • Serial: 33000001C422B2F79B793DACB20000000001C4
  • Thumbprint: AE9C1AE54763822EEC42474983D8B635116C8452
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: HdwWiz.EXE
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.1 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/79cccf88dd152c2ab8be92bc8b835cda56728d381be3617042620b0a5cd9308b/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\DevicePairingWizard.exe 44
C:\Windows\system32\hdwwiz.exe 63
C:\Windows\system32\hdwwiz.exe 61
C:\WINDOWS\system32\hdwwiz.exe 63
C:\WINDOWS\system32\hdwwiz.exe 66
C:\Windows\system32\hdwwiz.exe 58
C:\Windows\SysWOW64\DevicePairingWizard.exe 50
C:\WINDOWS\SysWOW64\DevicePairingWizard.exe 57
C:\Windows\SysWOW64\DevicePairingWizard.exe 46
C:\Windows\SysWOW64\hdwwiz.exe 69
C:\WINDOWS\SysWOW64\hdwwiz.exe 65
C:\WINDOWS\SysWOW64\hdwwiz.exe 68
C:\Windows\SysWOW64\hdwwiz.exe 60

MIT License. Copyright (c) 2020-2021 Strontic.