mdmregistration.dll

  • File Path: C:\Windows\SysWOW64\mdmregistration.dll
  • Description: MDM Registration DLL

Hashes

Type Hash
MD5 366F01C4541B73DF4836CB9B39DA9063
SHA1 168D1F59F323639124ABF26F5E41742747D62E7E
SHA256 7786391769B85955C4898B6A53261ED695CA573EFA4CE311FC0113FB6DC04523
SHA384 FB77F67249FB5338EF6BDB0C58BBE039960BA5C5087141A5EE337657E0DDF31EFE6168B6831893118E3A08DB3E899906
SHA512 0148E3AE8DF78B8C8B9C73927AE1AA2D28A407C8836A069E3B0E64B75D596F71295A5A21F12948A443517F7FE6FA437F3DFC9F2D158A3899621DC7019418DD97
SSDEEP 6144:GlHXlHplH1lHCHhL4XqEMoPLxd+mhXO6wS+BzFgwUhI0:GlHXlHplH1lHC6XqEnBm/RgjI0
IMP 61EC18ED7970BB914CB5253980890EBF
PESHA1 835D3AFE1C49A9C75E1A486A67BF30EDF0B54754
PE256 386C6CA70C4B734BD5F841A5BCA2891875537D7D353BEC260C86B2EDCD4F1F9D

DLL Exports:

Function Name Ordinal Type
RegisterDeviceWithManagementUsingAADCredentials 11 Exported Function
RegisterDeviceWithManagement 10 Exported Function
IsMdmUxWithoutAadAllowed 9 Exported Function
UnregisterDeviceWithManagement 14 Exported Function
SetManagedExternally 13 Exported Function
RegisterDeviceWithManagementUsingAADDeviceCredentials 12 Exported Function
IsManagementRegistrationAllowed 8 Exported Function
FindDiscoveryService 2 Exported Function
DiscoverManagementServiceEx 4 Exported Function
DiscoverManagementService 3 Exported Function
IsDeviceRegisteredWithManagement 7 Exported Function
GetManagementAppHyperlink 6 Exported Function
GetDeviceRegistrationInfo 5 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: mdmregistration.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/7786391769b85955c4898b6a53261ed695ca573efa4ce311fc0113fb6dc04523/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\mdmregistration.dll 46
C:\Windows\SysWOW64\dmenrollengine.dll 46

MIT License. Copyright (c) 2020-2021 Strontic.