gpprefcl.dll

• File Path: C:\Windows\system32\gpprefcl.dll
• Description: Group Policy Preference Client

Hashes

Type	Hash
MD5	AD7369C40E9DF800CFD7306334084795
SHA1	BEE127189D326610BF5CE53AE1944EB60F4ED027
SHA256	C2A2328E344579AAAAB2BDC8C6084C59E33D5FBBF7BED0713C7ECBABF1963D4C
SHA384	84E6B55856F18FFD9D8F7E8F3BBCAD3BD1BC9C421DA320C168C87A99FA8887CD2800450910B3240952C05300FB547B1A
SHA512	9104548E01C4C0FCD069C963A7D0D3D4A60D7FB662282601DC15B87D40A502661CCE26AA8F3B4C73352D2379DCC89DE203D93CC64D6FE42078E4723B44644E52
SSDEEP	12288:gBPXYgToACoG5kze//zvz+2AMo5SFt9PX+eRSlIi:gBPXyoG5R//eko5SFPPOiSlj
IMP	6B40A567626BB6B689368F7EEE1DC3FD
PESHA1	6C9469B0129C22CD3D63D60989B0315100FA7F36
PE256	B39B5B97268423ED76F957724E4E5CDB9E1575310CA69DB6F00A6EF303EE9539

DLL Exports:

Function Name	Ordinal	Type
ProcessGroupPolicyExRegistry	49	Exported Function
ProcessGroupPolicyExSchedTasks	50	Exported Function
ProcessGroupPolicyExPrinters	47	Exported Function
ProcessGroupPolicyExRegionOptions	48	Exported Function
ProcessGroupPolicyExStartMenu	53	Exported Function
ProcessGroupPolicyFiles	54	Exported Function
ProcessGroupPolicyExServices	51	Exported Function
ProcessGroupPolicyExShortcuts	52	Exported Function
ProcessGroupPolicyExPowerOptions	46	Exported Function
ProcessGroupPolicyExFolders	40	Exported Function
ProcessGroupPolicyExIniFile	41	Exported Function
ProcessGroupPolicyExFiles	38	Exported Function
ProcessGroupPolicyExFolderOptions	39	Exported Function
ProcessGroupPolicyExNetShares	44	Exported Function
ProcessGroupPolicyExNetworkOptions	45	Exported Function
ProcessGroupPolicyExInternet	42	Exported Function
ProcessGroupPolicyExLocUsAndGroups	43	Exported Function
ProcessGroupPolicyRegionOptions	64	Exported Function
ProcessGroupPolicyRegistry	65	Exported Function
ProcessGroupPolicyPrinters	63	Exported Function
ProcessGroupPolicyProcessMitigationOptions	2	Exported Function
ProcessGroupPolicyShortcuts	68	Exported Function
ProcessGroupPolicyStartMenu	69	Exported Function
ProcessGroupPolicySchedTasks	66	Exported Function
ProcessGroupPolicyServices	67	Exported Function
ProcessGroupPolicyPowerOptions	62	Exported Function
ProcessGroupPolicyIniFile	57	Exported Function
ProcessGroupPolicyInternet	58	Exported Function
ProcessGroupPolicyFolderOptions	55	Exported Function
ProcessGroupPolicyFolders	56	Exported Function
ProcessGroupPolicyNetShares	60	Exported Function
ProcessGroupPolicyNetworkOptions	61	Exported Function
ProcessGroupPolicyLocUsAndGroups	59	Exported Function
ProcessGroupPolicyMitigationOptions	1	Exported Function
ProcessGroupPolicyExEnviron	37	Exported Function
GenerateGroupPolicyFolders	14	Exported Function
GenerateGroupPolicyIniFile	15	Exported Function
GenerateGroupPolicyFiles	12	Exported Function
GenerateGroupPolicyFolderOptions	13	Exported Function
GenerateGroupPolicyNetShares	18	Exported Function
GenerateGroupPolicyNetworkOptions	19	Exported Function
GenerateGroupPolicyInternet	16	Exported Function
GenerateGroupPolicyLocUsAndGroups	17	Exported Function
GenerateGroupPolicyEnviron	11	Exported Function
DllRegisterServer	5	Exported Function
DllUnregisterServer	6	Exported Function
DllCanUnloadNow	3	Exported Function
DllGetClassObject	4	Exported Function
GenerateGroupPolicyDevices	9	Exported Function
GenerateGroupPolicyDrives	10	Exported Function
GenerateGroupPolicyApplications	7	Exported Function
GenerateGroupPolicyDataSources	8	Exported Function
ProcessGroupPolicyDrives	31	Exported Function
ProcessGroupPolicyEnviron	32	Exported Function
ProcessGroupPolicyDataSources	29	Exported Function
ProcessGroupPolicyDevices	30	Exported Function
ProcessGroupPolicyExDevices	35	Exported Function
ProcessGroupPolicyExDrives	36	Exported Function
ProcessGroupPolicyExApplications	33	Exported Function
ProcessGroupPolicyExDataSources	34	Exported Function
ProcessGroupPolicyApplications	28	Exported Function
GenerateGroupPolicyRegionOptions	22	Exported Function
GenerateGroupPolicyRegistry	23	Exported Function
GenerateGroupPolicyPowerOptions	20	Exported Function
GenerateGroupPolicyPrinters	21	Exported Function
GenerateGroupPolicyShortcuts	26	Exported Function
GenerateGroupPolicyStartMenu	27	Exported Function
GenerateGroupPolicySchedTasks	24	Exported Function
GenerateGroupPolicyServices	25	Exported Function

Signature

• Status: Signature verified.
• Serial: 3300000266BD1580EFA75CD6D3000000000266
• Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: gpprefcl
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.19041.1 (WinBuild.160101.0800)
• Product Version: 10.0.19041.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.
• Machine Type: 64-bit

File Scan

• VirusTotal Detections: 0/68
• VirusTotal Link: https://www.virustotal.com/gui/file/c2a2328e344579aaaab2bdc8c6084c59e33d5fbbf7bed0713c7ecbabf1963d4c/detection/

MIT License. Copyright (c) 2020-2021 Strontic.