devenum.dll
- File Path:
C:\Windows\SysWOW64\devenum.dll
- Description: Device enumeration.
Hashes
Type |
Hash |
MD5 |
101B526154B377FE2479BC5A9398E72C |
SHA1 |
6B709BDBC16A740F0F8B2826987E6C8CD7A4C9C3 |
SHA256 |
B9B2D2F8F3A32FE24914D6F7B86277F4EB641DB769B672D7A454C87D5EC94AA4 |
SHA384 |
026BC3403657C97D50BC5256E7A0D997297CAE8E5A54E6CB9DE39988F723BF4E35021847EFDFD87037CC9B36CFF8B1BC |
SHA512 |
DFE96065F5560276C9405526DADA05AEBAE68B3B550710649DC676C06A9B16AE17116D79F8CD031671D58D03A899DB61CF662C1CE7AEA9A2DA4441D06CDE353E |
SSDEEP |
1536:h6iK+66Gukmxkllij6SlC6VEArMV0WnW+UrDQdRC3arIkAfciP:h6mGmxili37VTrK0WnfQkY |
IMP |
A7EE839CC3FEA1940F907307A6E0846D |
PESHA1 |
6547C7012407AF9F98D6312B5E41AAD7B9A63BDB |
PE256 |
8859C38DF012B51BBE6327F66EEA53D67D31C8A9D3B05579AE20F760231A47BD |
DLL Exports:
Function Name |
Ordinal |
Type |
DllRegisterServer |
3 |
Exported Function |
DllUnregisterServer |
4 |
Exported Function |
DllCanUnloadNow |
1 |
Exported Function |
DllGetClassObject |
2 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: devenum.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.329 (WinBuild.160101.0800)
- Product Version: 10.0.19041.329
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/b9b2d2f8f3a32fe24914d6f7b86277f4eb641db769b672d7a454c87d5ec94aa4/detection/
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.