dsregcmd.exe

  • File Path: C:\Windows\system32\dsregcmd.exe
  • Description: DSREG commandline tool

Hashes

Type Hash
MD5 F77A026636AA594B6A75EBA9CE157B76
SHA1 89639FE6E862D074068EF77620FC32CB4DECD12F
SHA256 94E9C63044E4C789896C9747340319E85053A16A69AE5BE0F22A2645BF11D472
SHA384 EC31283CA2EBF6300BB316646DF10293D663111ED53C793BAAD8B62F2602A57FDB71F384EC8FF6315D0AE243331FA813
SHA512 97AFDA6C1615EC651A05294ABDF11594071273D9254AD8907BCC9B935CD453769525C1EE3233806AA8C16EB4267A50E218CC1FADA34F4D81223C834CD539DC44
SSDEEP 6144:z0TUHV8egnGJK4nM07pIV4klKKFc3e17dwGfdHZlTyrCHVMFbACJnRnDX:E3egYK47pq4kldiu17PJjl1TId
IMP C2D1A2C9FFEA6DDBC11DE8E37CF589D3
PESHA1 7A7B44F79D8DA580BF487972742DD85BDA1F388A
PE256 74658E480E080A9FB2401CC4D86108ECCA3C74B0F0C1CFBD2950B6A6A93E1746

Runtime Data

Usage (stdout):

DSREGCMD switches
                        /? : Displays the help message for DSREGCMD
                   /status : Displays the device join status
               /status_old : Displays the device join status in old format
                     /join : Schedules and monitors the Autojoin task to Hybrid Join the device
                    /leave : Performs Hybrid Unjoin
                    /debug : Displays debug messages

Loaded Modules:

Path
C:\Windows\system32\dsregcmd.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: dsregcmd.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/94e9c63044e4c789896c9747340319e85053a16a69ae5be0f22a2645bf11d472/detection

MIT License. Copyright (c) 2020-2021 Strontic.