newdev.exe

  • File Path: C:\Windows\system32\newdev.exe
  • Description: Device driver software installation

Hashes

Type Hash
MD5 FD9D8BCD91AC3ADBE818A312600908DD
SHA1 91779EC02A72435FFAA5FDA208FB25C574E325ED
SHA256 2CBF1FA6A259A39E14F3C02C6CD1BEF205F7C6BB4B922B61C2E5F17372503481
SHA384 1699F0F89CD246429CCA21BA36E098F7949E7FBB4C8B9D497239EEFD2A9E36F1A24DCC968298B69E7563E9162237DAEF
SHA512 50F35CB4097D6D22EF52D2A5199856CB1B13BE9E592783F233A35F32670F7D657E1E1E69BB9804BF552E7ED844B07A0F6D9FEA367644290CBD140FFD1F775BDD
SSDEEP 1536:Vaaowgx1sh/xgS5x2NCJfFrGUUUUUUUUUUUU3+:VQ1yx04Jh
IMP 48DD034AB19D7BA73498C3949ED8DC2B
PESHA1 320228C7711B137963491836E6A278F5C61A8A9E
PE256 BC3AD11F06B2B116497B4B354859FA8A2CE96B958B0BEB7AE4A40A135BCF2964

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: NewDev.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 5.2.3668.0
  • Product Version: 5.2.3668.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/2cbf1fa6a259a39e14f3c02c6cd1bef205f7c6bb4b922b61c2e5f17372503481/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\ndadmin.exe 38
C:\Windows\system32\ndadmin.exe 38
C:\Windows\system32\ndadmin.exe 44
C:\WINDOWS\system32\ndadmin.exe 47
C:\WINDOWS\system32\ndadmin.exe 47
C:\Windows\system32\ndadmin.exe 41
C:\Windows\system32\ndadmin.exe 38
C:\Windows\system32\newdev.exe 47
C:\WINDOWS\system32\newdev.exe 49
C:\Windows\system32\newdev.exe 50
C:\Windows\system32\newdev.exe 50
C:\Windows\system32\newdev.exe 50
C:\WINDOWS\system32\newdev.exe 49
C:\Windows\system32\pnpclean.dll 30
C:\Windows\SysWOW64\ndadmin.exe 46
C:\Windows\SysWOW64\ndadmin.exe 50
C:\Windows\SysWOW64\ndadmin.exe 46
C:\Windows\SysWOW64\ndadmin.exe 47
C:\Windows\SysWOW64\ndadmin.exe 43
C:\WINDOWS\SysWOW64\ndadmin.exe 44
C:\WINDOWS\SysWOW64\ndadmin.exe 47
C:\Windows\SysWOW64\newdev.exe 49
C:\Windows\SysWOW64\newdev.exe 52
C:\Windows\SysWOW64\newdev.exe 49
C:\Windows\SysWOW64\newdev.exe 52
C:\WINDOWS\SysWOW64\newdev.exe 54
C:\WINDOWS\SysWOW64\newdev.exe 44
C:\Windows\SysWOW64\newdev.exe 52

MIT License. Copyright (c) 2020-2021 Strontic.