DeviceEnroller.exe

File Path: C:\Windows\system32\DeviceEnroller.exe
Description: API for MDM Enrollment

Hashes

Type	Hash
MD5	`946D9474533F58D2613078FD14CA7473`
SHA1	`C2620AC9522FA3702A6A03299B930D6044AA5E49`
SHA256	`CF5F5FE084F172E9C435615C1DC6AE7D3BD8C5EC8EA290CAA0627C2F392760CB`
SHA384	`F143ABFD8FCE6155A201CFF1C56DF1DB068DB3FB1D041ACA1A238E86D88AF3EA30AF93A8C7AB7F14586AD0216352D9AB`
SHA512	`3653D41A0553EE63A43490F682C9B528651A6336F28ADAFC333D4D148577351122DB8279FF83EE59BB0A9C17BB384E9F6C9C78677C8C5ED671A42036DEC1F8C1`
SSDEEP	`6144:8DNjllkyM6cRqd+cdxTgJ1/sp9ExZsKFWMZB/+8wXg0q1o:8dnkcLdxTgHq4gIBG8zD`
IMP	`8AE64693DFE51FE262C1A95FA92D149D`
PESHA1	`E196787345F2F2D4D9066C838540FFAA1FF18E9F`
PE256	`BB40D8E1971F8F3CEF9F83D03219ED18176755E859D3CC005C20F713232BFAC2`

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\system32\DeviceEnroller.exe
C:\Windows\system32\DMCmnUtils.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\ucrtbase.dll

Signature

Status: Signature verified.
Serial: 33000002EC6579AD1E670890130000000002EC
Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: deviceenroller.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1202 (WinBuild.160101.0800)
Product Version: 10.0.19041.1202
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/72
VirusTotal Link: https://www.virustotal.com/gui/file/cf5f5fe084f172e9c435615c1dc6ae7d3bd8c5ec8ea290caa0627c2f392760cb/detection

MIT License. Copyright (c) 2020-2021 Strontic.