devenum.dll

  • File Path: C:\Windows\SysWOW64\devenum.dll
  • Description: Device enumeration.

Hashes

Type Hash
MD5 101B526154B377FE2479BC5A9398E72C
SHA1 6B709BDBC16A740F0F8B2826987E6C8CD7A4C9C3
SHA256 B9B2D2F8F3A32FE24914D6F7B86277F4EB641DB769B672D7A454C87D5EC94AA4
SHA384 026BC3403657C97D50BC5256E7A0D997297CAE8E5A54E6CB9DE39988F723BF4E35021847EFDFD87037CC9B36CFF8B1BC
SHA512 DFE96065F5560276C9405526DADA05AEBAE68B3B550710649DC676C06A9B16AE17116D79F8CD031671D58D03A899DB61CF662C1CE7AEA9A2DA4441D06CDE353E
SSDEEP 1536:h6iK+66Gukmxkllij6SlC6VEArMV0WnW+UrDQdRC3arIkAfciP:h6mGmxili37VTrK0WnfQkY
IMP A7EE839CC3FEA1940F907307A6E0846D
PESHA1 6547C7012407AF9F98D6312B5E41AAD7B9A63BDB
PE256 8859C38DF012B51BBE6327F66EEA53D67D31C8A9D3B05579AE20F760231A47BD

DLL Exports:

Function Name Ordinal Type
DllRegisterServer 3 Exported Function
DllUnregisterServer 4 Exported Function
DllCanUnloadNow 1 Exported Function
DllGetClassObject 2 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: devenum.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.329 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.329
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/b9b2d2f8f3a32fe24914d6f7b86277f4eb641db769b672d7a454c87d5ec94aa4/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\devenum.dll 33

MIT License. Copyright (c) 2020-2021 Strontic.