profext.dll

  • File Path: C:\Windows\system32\profext.dll
  • Description: profext

Hashes

Type Hash
MD5 2013542ED70BBBAF2821C6C4BBAFD6A4
SHA1 E819AEB47BFA3F1A9E93D3BEF80EA60B20C3BBFB
SHA256 FED18203E02D6EE1E08B33505E04C5524E55E02DEFC07AF5D9A8B7B8ABBD03EF
SHA384 9726E9A2E2C23A6F7C7FD30C4984D8BF0A0A71E1CC8E55408199D4D57AA0FBEBCFB624187B1D4F73C0682C2313D1B3A1
SHA512 8AC0114DB3063FEB047E852FE0F2DD14CEECD8C62763F309BB206F2CF38D559C958185A5B95B88E4B71DE91218B2A93E12175DD1CF6982AB6C64AE5381F48533
SSDEEP 3072:PjbcSuFP3SE8DU3RO9a/EgHKuEvk1ktL1WOs+UOOOOVOOOuMDdyc7OLZVn6:PMSuF6FD2hcgqF81EakP70c
IMP 39D087D317371814B9AD61C62C988743
PESHA1 55A448119CAAF91B199995EEC05E99E9FFB843BF
PE256 DBDA96D346224795178AEC292AF5290DE71A93CCCA2661432A46B592178D50AD

DLL Exports:

Function Name Ordinal Type
ProcessGroupPolicyCompletedExWorker 15 Exported Function
ProcessGroupPolicyCompletedWorker 16 Exported Function
LookupAppContainerDisplayNameWorker 14 Exported Function
GetAppContainerRegistryLocationWorker 12 Exported Function
IsAppContainerProfilePresentWorker 13 Exported Function
RsopSetPolicySettingStatusWorker 20 Exported Function
UpdateAppContainerProfileWorker 21 Exported Function
RsopResetPolicySettingStatusWorker 19 Exported Function
RsopAccessCheckByTypeWorker 17 Exported Function
RsopFileAccessCheckWorker 18 Exported Function
GetAppContainerFolderPathWorker 11 Exported Function
CreateGroupExWorker 4 Exported Function
CreateLinkFileExWorker 5 Exported Function
CreateDirectoryJunctionsForUserProfileWorker 3 Exported Function
CreateAppContainerProfileWorker 1 Exported Function
CreateDirectoryJunctionsForSystemWorker 2 Exported Function
DeriveAppContainerSidFromAppContainerNameWorker 9 Exported Function
DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedNameWorker 10 Exported Function
DeleteLinkFileWorker 8 Exported Function
DeleteAppContainerProfileWorker 6 Exported Function
DeleteGroupWorker 7 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: profext.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/fed18203e02d6ee1e08b33505e04c5524e55e02defc07af5d9a8b7b8abbd03ef/detection/

MIT License. Copyright (c) 2020-2021 Strontic.