DeviceEnroller.exe
- File Path:
C:\Windows\system32\DeviceEnroller.exe - Description: API for MDM Enrollment
Hashes
| Type | Hash |
|---|---|
| MD5 | 1041383E30E1920B4678E89A4BB18F9C |
| SHA1 | 8B0F34D60EED4583F82F764A11DCE4B00048A4A7 |
| SHA256 | B9ABAA487AB9F4F25EC61A98485766FB4D6EE97C4B0ECB202C23B9807FEEBC9B |
| SHA384 | 44262A0E713B4BA7DBC33ED069B3056A0AA0FC6F8414BD5306CF26EEE8479DB853DCF208BA1A3DDA295FA860C61F728D |
| SHA512 | 86C9F0F80AE8288E5579A2F6F4DD9FFFAB0C7EE2FF4A9145248DACB2003FE8F8D019D565404D9F06ECD543B5EC3624FA6985817E0461DE78040033BB52BDFF16 |
| SSDEEP | 6144:z9phZbNsvOdG4FF87Vb5fB3Doz5gUPXk/2mZ7HZTRIhsVcJw16F:fhZq487Z5fBTW5gU+2U5TRImcJwo |
| IMP | 4C5FF3E49D0CFA853B183D09EA0613F4 |
| PESHA1 | 11C7CA145DDE39718651485F3537478846050AE4 |
| PE256 | 46979DFB2E0AB7E6B0CEF177E2A066C9F297A06C21A7D70C9103FED3222A2763 |
Runtime Data
Loaded Modules:
| Path |
|---|
| C:\Windows\System32\advapi32.dll |
| C:\Windows\System32\bcrypt.dll |
| C:\Windows\System32\combase.dll |
| C:\Windows\System32\CRYPT32.dll |
| C:\Windows\system32\CRYPTSP.dll |
| C:\Windows\system32\DeviceEnroller.exe |
| C:\Windows\system32\DEVOBJ.dll |
| C:\Windows\system32\DMCmnUtils.dll |
| C:\Windows\system32\dmEnrollEngine.DLL |
| C:\Windows\system32\iri.dll |
| C:\Windows\System32\KERNEL32.DLL |
| C:\Windows\System32\KERNELBASE.dll |
| C:\Windows\System32\msvcp_win.dll |
| C:\Windows\system32\msvcp110_win.dll |
| C:\Windows\System32\msvcrt.dll |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\OLEAUT32.dll |
| C:\Windows\system32\omadmapi.dll |
| C:\Windows\SYSTEM32\powrprof.dll |
| C:\Windows\System32\RPCRT4.dll |
| C:\Windows\System32\sechost.dll |
| C:\Windows\System32\shcore.dll |
| C:\Windows\System32\ucrtbase.dll |
| C:\Windows\system32\UMPDC.dll |
| C:\Windows\system32\XmlLite.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266 - Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840 - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: deviceenroller.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.423 (WinBuild.160101.0800)
- Product Version: 10.0.19041.423
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/b9abaa487ab9f4f25ec61a98485766fb4d6ee97c4b0ecb202c23b9807feebc9b/detection
File Similarity (ssdeep match)
| File | Score |
|---|---|
| C:\Windows\system32\DeviceEnroller.exe | 69 |
MIT License. Copyright (c) 2020-2021 Strontic.