ndadmin.exe

  • File Path: C:\Windows\system32\ndadmin.exe
  • Description: Device driver software installation

Hashes

Type Hash
MD5 C1E5E50078D849CE539FE60B0AAC1C43
SHA1 271513070D9193B4E6E1D0857AC423D088FF8140
SHA256 612B00C9C83C96E3E5A866B95A42A21ED42D9C4CC58A8F19297E3E6586976D30
SHA384 E4DFF96E1E4CE164782DA9BC9D0B2128A1F2C9D5B8B9FA644548BC3C13EEF9ADFEDC30EA35AA83403375E5C8D498EC12
SHA512 CEE50A1AF1A820DE4128ACF2E4A6158C72B08C6248FB348145C3C3B4254222FEC321526A12619ED4562CE175096495BA9CC633E8D51258F3F1CF0836B5062950
SSDEEP 768:6vyYSuGKYQmMjXmtarjQAhtqIrn8+1hrpFIUUUUUUUUUUUUqRcxM:YGKYQmMjXmwrjfFrGUUUUUUUUUUUU3+
IMP 3AED82C66B004C977279044836A79845
PESHA1 D59FE8E342E4FBB86D904E669FB15ADF862A1467
PE256 112CD4E44F7176E5E4C513BB072F0E5AD04BE65BB053E512CBB185A627AB2F80

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NDAdmin.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 5.2.3668.0
  • Product Version: 5.2.3668.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/612b00c9c83c96e3e5a866b95a42a21ed42d9c4cc58a8f19297e3e6586976d30/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\ndadmin.exe 63
C:\Windows\system32\ndadmin.exe 66
C:\Windows\system32\ndadmin.exe 71
C:\WINDOWS\system32\ndadmin.exe 66
C:\WINDOWS\system32\ndadmin.exe 75
C:\Windows\system32\ndadmin.exe 72
C:\Windows\system32\newdev.exe 46
C:\WINDOWS\system32\newdev.exe 47
C:\Windows\system32\newdev.exe 50
C:\Windows\system32\newdev.exe 44
C:\Windows\system32\newdev.exe 43
C:\WINDOWS\system32\newdev.exe 63
C:\Windows\system32\newdev.exe 41
C:\Windows\system32\pnpclean.dll 25
C:\Windows\SysWOW64\ndadmin.exe 63
C:\Windows\SysWOW64\ndadmin.exe 63
C:\Windows\SysWOW64\ndadmin.exe 63
C:\Windows\SysWOW64\ndadmin.exe 65
C:\Windows\SysWOW64\ndadmin.exe 72
C:\WINDOWS\SysWOW64\ndadmin.exe 63
C:\WINDOWS\SysWOW64\ndadmin.exe 68
C:\Windows\SysWOW64\newdev.exe 63
C:\Windows\SysWOW64\newdev.exe 65
C:\Windows\SysWOW64\newdev.exe 63
C:\Windows\SysWOW64\newdev.exe 66
C:\WINDOWS\SysWOW64\newdev.exe 44
C:\WINDOWS\SysWOW64\newdev.exe 46
C:\Windows\SysWOW64\newdev.exe 63

MIT License. Copyright (c) 2020-2021 Strontic.