DeviceEnroller.exe

  • File Path: C:\WINDOWS\system32\DeviceEnroller.exe
  • Description: API for MDM Enrollment

Hashes

Type Hash
MD5 24BEF0D6B0ECED36BB41831759FDE18D
SHA1 F04939B1D0D0A44409BE225F0CCDB45A943511A5
SHA256 5D5EEDF15D4823C74840EC0209451B360C0EE4AAF9C1E7EDDAD27C49AEB76CE2
SHA384 3F5802AB11383D6D87AE630AF2B90E4325EA6029A8C3741D739C67C4727057752C34C8C11AB0DB7CB059A063A4D9E1D0
SHA512 638CC93D0E68B3E33A04A1F38C2C7624EA6726CA3EF2E0537AE90E291EE0CF0799CD23FA2417F5D0BB566D0987353D3C129F7017D586B78EC16BEB36FEB50E47
SSDEEP 12288:SQRetEg0f2BLqfRI9xqPmCulbuVp47IqPxMyapDzKC:XVfOBLqfRI9xhlbuXqPxAhm
IMP 29D2B1395E6A910BA4399CD534CADD11
PESHA1 7A857D7839BA3149DBABEB2BB17618F9C2D6D269
PE256 B265E318172F37CE44CC85E8D8C952AEACCC4EA3430112B503C37B3724595718

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\system32\DeviceEnroller.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\System32\msvcrt.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: deviceenroller.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/5d5eedf15d4823c74840ec0209451b360c0ee4aaf9c1e7eddad27c49aeb76ce2/detection

MIT License. Copyright (c) 2020-2021 Strontic.