DeviceEnroller.exe

  • File Path: C:\Windows\system32\DeviceEnroller.exe
  • Description: API for MDM Enrollment

Hashes

Type Hash
MD5 3F35801C79C2EA45ABB85645DA66D7E6
SHA1 997A0BC3C35CBA9863057F758F2D34F0864BCBE9
SHA256 A3B38A659B9939703CB31A819288C711450CE1135C0143329801F8CABEE0D288
SHA384 32FCDA6110776D68E6EF0A1DF316E7CE1C41C74071BC13E084DD9F5AE2D8FBA0E4AD22612E4D64BAD0F052ACC4B3928E
SHA512 E326390046437A14BA4111388E892AD673B606C1305D2FFC60653D9273206C65E6334A85F80AAC881EA57152AD186B83B585FB722903087D8099E778D29CFC73
SSDEEP 6144:j/xk5py+XqCdPWzskwq3j0QPkl0VI1kFqQOQ2DrRaOQQJK4k:azyqPWzskwq3oQPklHSOrRmB4
IMP 2ED7EADD460E2FCDF75F4C11011A4EBD
PESHA1 8ACA85F9B33AA79817783534ECA9BA64F0659A0F
PE256 A62D22E765C8D985D4FBB9BA2AD57C6FE2FAF27AD7B6303DF4D8FD20CDEE163D

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\CRYPT32.dll
C:\Windows\System32\CRYPTSP.dll
C:\Windows\system32\DeviceEnroller.exe
C:\Windows\system32\DEVOBJ.dll
C:\Windows\system32\DMCmnUtils.dll
C:\Windows\system32\dmEnrollEngine.DLL
C:\Windows\system32\dmenterprisediagnostics.dll
C:\Windows\system32\iri.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\MSASN1.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\system32\netutils.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\system32\omadmapi.dll
C:\Windows\System32\profapi.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\system32\samcli.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\USERENV.dll
C:\Windows\system32\XmlLite.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: deviceenroller.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.831 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.831
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/a3b38a659b9939703cb31a819288c711450ce1135c0143329801f8cabee0d288/detection/

MIT License. Copyright (c) 2020-2021 Strontic.