MDMAgent.exe

  • File Path: C:\Windows\system32\MDMAgent.exe
  • Description: MDMAgent

Hashes

Type Hash
MD5 40A522C2F89681519468566933C5429A
SHA1 CE67647BF6A5B6A8A7C3A420592DB17F18B47807
SHA256 489E36752E19E566410AEA869888033AA630D8BC433DDDF842DC4BED1CA18CC0
SHA384 B7A05C75B4BC3252FAC51E15F04ED055039AE6C4CD954BDAF547CD40EB974DCC990FCB056D94641F322FE6A17E51A6C5
SHA512 71B889E47E00090859D064D9A898E8F5ACD3A5BE28FA0CD52FF3DF82F20A2DFE42792FB74CED8CDA45C9F1A2FC8879AC762A669C720A658C6716D6DF258776A5
SSDEEP 3072:VzIFn3f23BLHwQCc1wnFsHW2HsnZjHiP6G38C:VzIR+51wFVMPrs
IMP 4E278F06A4DC1675FD6CF67F253DA848
PESHA1 117649A5C256AD771C07160EBEA75C2098F3CAC7
PE256 7ADA999BD136734619C67428CFC3F0BD73A6B41D5F6D2567952A06DF0DE48761

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\bcrypt.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\cfgmgr32.dll
C:\Windows\System32\combase.dll
C:\Windows\System32\CRYPT32.dll
C:\Windows\System32\CRYPTSP.dll
C:\Windows\system32\DEVOBJ.dll
C:\Windows\system32\DMCmnUtils.dll
C:\Windows\system32\dmEnrollEngine.DLL
C:\Windows\system32\iri.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\MDMAgent.exe
C:\Windows\System32\MSASN1.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\system32\msvcp110_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\system32\omadmapi.dll
C:\Windows\System32\profapi.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\system32\USERENV.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: MDMAgent
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.17763.592 (WinBuild.160101.0800)
  • Product Version: 10.0.17763.592
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/489e36752e19e566410aea869888033aa630d8bc433dddf842dc4bed1ca18cc0/detection/

MIT License. Copyright (c) 2020-2021 Strontic.