dmenrollengine.dll

  • File Path: C:\Windows\SysWOW64\dmenrollengine.dll
  • Description: Enroll Engine DLL

Hashes

Type Hash
MD5 5E12476CA507DA0085E31DC2270D4EA7
SHA1 C92AE2D924E37A2551911489DCE90864FEA359E0
SHA256 D7107BD364E0650E552E554E990B5E687EE68A2F90A479E331872E57F432CBA7
SHA384 002D64D1782C68694400C424E8722F66A4D5DA4E58B37212E86F23D13ADCF8A2F6E0C685FF37227D85D1BA564A796668
SHA512 9CE2560637FE11C3881D226F6BC59E72C518970E6E9F8453DDBA479235B9B79CB06B27A5F3A0CF67032C3ACB83CCFE3F139D4EBE8995CF35C5AEEF5722C7C19C
SSDEEP 12288:1nYlHXlHplH1lHlRT0b2z3NZyqE2fZs3zlN9VCm1s+8gJj:1nYlHXlHplH1lHl1023NZ6h3zlN9omt8
IMP 57F32211FAC5B8CD5CB1E6B9CCEB33E3
PESHA1 C5B3AA8C6105CE0A4884AFD0F92828623F9E68CC
PE256 759251F9D9C0E3FEBC44A6DA2A07647AD8717588841367A5D8D20992BBF5102A

DLL Exports:

Function Name Ordinal Type
GetEnrollmentType 33 Exported Function
GetEnrollmentState 32 Exported Function
GetProviderID 11 Exported Function
GetEnrollmentUPN 34 Exported Function
GetEnrollmentSID 31 Exported Function
GetEnrollmentClientContext 7 Exported Function
GetEnrollmentClientCertThumbprint 28 Exported Function
GetEnrollmentPartnerOpaqueID 30 Exported Function
GetEnrollmentDiscoveryService 29 Exported Function
SetEnrollmentUPN 13 Exported Function
SetEnrollmentPartnerOpaqueID 36 Exported Function
SwitchAADLinkedEnrollment 14 Exported Function
SetProviderID 12 Exported Function
SetEnrollmentDormant 15 Exported Function
OpenEnrollmentsHKEY 9 Exported Function
MmpcDiscoverEndpoint 35 Exported Function
SetEnrollmentAadSendDeviceToken 17 Exported Function
SetEnrollmentAadResourceUrl 8 Exported Function
DllGetActivationFactory 19 Exported Function
DllCanUnloadNow 18 Exported Function
EnableLogging 4 Exported Function
DllGetClassObject 20 Exported Function
DiscoverEndpointEx 5 Exported Function
AutoEnrollMDM 21 Exported Function
_IsManagementRegistrationAllowed 16 Exported Function
DiscoverEndpoint 1 Exported Function
CleanupExpiredOMADMSessions 3 Exported Function
GetEnrollmentAadResourceUrl 25 Exported Function
GetDatabaseManagerInstance 10 Exported Function
GetEnrollmentCertStore 27 Exported Function
GetEnrollmentAadSendDeviceToken 26 Exported Function
GetCertificatePolicy 24 Exported Function
FindDiscoveryService 2 Exported Function
EnrollEngineInitialize 22 Exported Function
FreeMmpcDiscoveryResultsData 23 Exported Function
FindDiscoveryServiceEx 6 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: dmEnrollEngine.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/65
  • VirusTotal Link: https://www.virustotal.com/gui/file/d7107bd364e0650e552e554e990b5e687ee68a2f90a479e331872e57f432cba7/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\mdmregistration.dll 36
C:\Windows\SysWOW64\mdmregistration.dll 46

MIT License. Copyright (c) 2020-2021 Strontic.