dmenrollengine.dll

File Path: C:\Windows\system32\dmenrollengine.dll
Description: Enroll Engine DLL

Hashes

Type	Hash
MD5	`D5CCE743CC2C2589F46827E8FD113C12`
SHA1	`899309FF4609F1C79164C04722B9FB4389C9E01F`
SHA256	`B41084F9CA6650339823D642A820ACF989B1655D6BB99C65ADCD6AD2F0CD0745`
SHA384	`899F249294A9897564D768EFD95B9814138CF083E8F6656DB58AB86770005EF11C12F8459FC3A480AB29F76F9D9B2849`
SHA512	`9FD3DB0E41C0BA319D8AE84E2B89332ECF668ACEBAE38DBD464F4FAE648C470655EFD390C22E6CFABBA21BBB11B04263C18FEBB8DCF6CF8C863C4A71F0FD3767`
SSDEEP	`12288:gBrJvI8mXNwngydLjUhoWxExU02/tlHJlHXlH/lHAK8TK:gBrPwNLMWF04tlHJlHXlH/lHh8G`
IMP	`1CA9DA0A0D0BF54B682A3AE926524384`
PESHA1	`7718DCE150F05F21C770A995009F31DB6144FCB8`
PE256	`9DE3606D48880D49961106138491347EFF410685FD73AA76BD466021D8C02D4D`

DLL Exports:

Function Name	Ordinal	Type
`GetEnrollmentType`	33	Exported Function
`GetEnrollmentState`	32	Exported Function
`GetProviderID`	11	Exported Function
`GetEnrollmentUPN`	34	Exported Function
`GetEnrollmentSID`	31	Exported Function
`GetEnrollmentClientContext`	7	Exported Function
`GetEnrollmentClientCertThumbprint`	28	Exported Function
`GetEnrollmentPartnerOpaqueID`	30	Exported Function
`GetEnrollmentDiscoveryService`	29	Exported Function
`SetEnrollmentUPN`	13	Exported Function
`SetEnrollmentPartnerOpaqueID`	36	Exported Function
`SwitchAADLinkedEnrollment`	14	Exported Function
`SetProviderID`	12	Exported Function
`SetEnrollmentDormant`	15	Exported Function
`OpenEnrollmentsHKEY`	9	Exported Function
`MmpcDiscoverEndpoint`	35	Exported Function
`SetEnrollmentAadSendDeviceToken`	17	Exported Function
`SetEnrollmentAadResourceUrl`	8	Exported Function
`DllGetActivationFactory`	20	Exported Function
`DllCanUnloadNow`	19	Exported Function
`EnableLogging`	4	Exported Function
`DllGetClassObject`	21	Exported Function
`DiscoverEndpointEx`	5	Exported Function
`AutoEnrollMDM`	18	Exported Function
`_IsManagementRegistrationAllowed`	16	Exported Function
`DiscoverEndpoint`	1	Exported Function
`CleanupExpiredOMADMSessions`	3	Exported Function
`GetEnrollmentAadResourceUrl`	25	Exported Function
`GetDatabaseManagerInstance`	10	Exported Function
`GetEnrollmentCertStore`	27	Exported Function
`GetEnrollmentAadSendDeviceToken`	26	Exported Function
`GetCertificatePolicy`	24	Exported Function
`FindDiscoveryService`	2	Exported Function
`EnrollEngineInitialize`	22	Exported Function
`FreeMmpcDiscoveryResultsData`	23	Exported Function
`FindDiscoveryServiceEx`	6	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: dmEnrollEngine.dll
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.488 (WinBuild.160101.0800)
Product Version: 10.0.19041.488
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/67
VirusTotal Link: https://www.virustotal.com/gui/file/b41084f9ca6650339823d642a820acf989b1655d6bb99c65adcd6ad2f0cd0745/detection/