djoin.exe

  • File Path: C:\Windows\system32\djoin.exe
  • Description: Unattended Setup Generic Command For Domain Join

Hashes

Type Hash
MD5 726941D90F681899D8592E0744CA1BED
SHA1 E23633EFB171A357C8E0E106B2F50193BF616E7A
SHA256 AAA3994D7C79226680D59F82E8BA59807B08AAB0B796EF6323FAB915FC532153
SHA384 63326DECEA1FC02645CFCE7193E53FC4421AAC18E1A3AAC71402CED08F3EE1249F591A58ACA172969DED21FD58CE46EB
SHA512 7337C2B87B5416E2B13A49807318EA0E1AF2CBC3D5AAA895A58FD3BBDCD70E173165F9129202633B2D837DBFC39359C8CC472DDF76474AB47FF062FC3CD05133
SSDEEP 768:yQB2SWB6ueUI1mhw7gQBNgowc6sKjHNbGj3kNfIj8FW06hpqjerb0J2GNnxQJ68O:5TUcmhw7Tgo+tKj3kNcGWBQeX+NnxQJ
IMP 7A9621EB5A43DAA61A65399F202CE2EF
PESHA1 DCA30C92148E5592392111A1D5BE1906FEE980AE
PE256 F29C993509258F8528947CB922D0FED06C83C92782795BA719A5DDA8DFBDDEE9

Runtime Data

Usage (stdout):

Usage: djoin.exe [/OPTIONS]

  /PROVISION  - Provision a computer account in the domain
      /DOMAIN <Name> - <Name> of the domain to join
      /MACHINE <Name> - Host <Name> of the computer joining the domain
      /MACHINEOU <OU> - Optional <OU> where the account is created
      /DCNAME <DC> - Optional <DC> to target for account creation
      /REUSE - Reuse any existing account (password will be reset)
      /SAVEFILE <FilePath> - Save provisioning data to a file at <FilePath>
      /NOSEARCH - Skip account conflict detection, requires DCNAME (faster)
      /DOWNLEVEL - Support using a Windows Server 2008 DC or earlier
      /PRINTBLOB - Return base64 encoded metadata blob for an answer file
      /DEFPWD - Use default machine account password (not recommended)
      /ROOTCACERTS - Opt. include root Certificate Authority certificates.
      /CERTTEMPLATE <Name> - Optional <Name> of machine certificate template.
                             Includes root Certificate Authority certificates.
      /POLICYNAMES <Name(s)> - Opt. semicolon-separated list of policy names.
                               Each name is the displayName of the GPO in AD.
      /POLICYPATHS <Path(s)> - Opt. semicolon-separated list of policy paths.
                               Each path is a path to a registry policy file.
      /NETBIOS <Name> - Opt. Netbios <Name> of the computer joining the domain.
      /PSITE <Name> - Opt. <Name> of persistent site to put the computer joining
                      the domain in.
      /DSITE <Name> - Opt. <Name> of dynamic site to initially put the computer 
                      joining the domain in.
      /PRIMARYDNS <Name> - Opt. <Name> of primary DNS domain of the computer
                           joining the domain.

  /REQUESTODJ  - Request offline domain join at next boot
      /LOADFILE <FilePath> - <FilePath> specified previously via /SAVEFILE
      /WINDOWSPATH <Path> - <Path> to the Windows directory in an offline image
      /LOCALOS - Allows /WINDOWSPATH to specify the locally running OS.
                 This command must be run as a local Administrator.
                 This option requires a reboot for changes to be applied.
      
Examples:

To provision a computer account in the domain:
djoin.exe /PROVISION /DOMAIN <DomainName> /MACHINE <MachineName>
          /SAVEFILE <FilePath>
          Note: Other parameters are optional
          
To request the local machine to perform an offline domain join:
djoin.exe /REQUESTODJ /LOADFILE <FilePath> /WINDOWSPATH <Path>
          Note: Other parameters are optional
The parameter is incorrect.

Loaded Modules:

Path
C:\Windows\system32\djoin.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: djoin.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/aaa3994d7c79226680d59f82e8ba59807b08aab0b796ef6323fab915fc532153/detection/

MIT License. Copyright (c) 2020-2021 Strontic.