profext.dll

  • File Path: C:\Windows\SysWOW64\profext.dll
  • Description: profext

Hashes

Type Hash
MD5 4F0B94DA6BE383A9C6C2B79BACDBB806
SHA1 713734EDC4A737886612034F5AA9088CDD4014E3
SHA256 10651F01A14CA3520BB4445D5F785A57505E672B85A567C3EAE26759C45B14A7
SHA384 5C0C0CF71C77E5F5AA0064E4CD727CC89CF2FDB69731079090FB83FFAA7AD256E56C196EE5854BC433222914E8576621
SHA512 B056E9814744272A2DB137D13839F3D34C9800AE2548EABC36CB8D66B05F0E744FFDFD2D05742691D13265E75AA3F50176C5948A7863F5F8D3ED052A5D4903B7
SSDEEP 3072:uOOOBOf+UOOOOMvWD6As2mHZ7NF3bkBdAag+1poIQ2wFOcDBqkjfaU2Atc8RWJX1:eAWDNwZ73381eIQ2Kq9AK8IJl
IMP 7169A8AD0E45799E9DEA65F3096E63AA
PESHA1 A2977518A4D690D02C861F5714E9026CA3CC114F
PE256 5D803423277FD3167E210122AAC27071DA3354FADB744688E80E6F6689178CC4

DLL Exports:

Function Name Ordinal Type
ProcessGroupPolicyCompletedExWorker 15 Exported Function
ProcessGroupPolicyCompletedWorker 16 Exported Function
LookupAppContainerDisplayNameWorker 14 Exported Function
GetAppContainerRegistryLocationWorker 12 Exported Function
IsAppContainerProfilePresentWorker 13 Exported Function
RsopSetPolicySettingStatusWorker 20 Exported Function
UpdateAppContainerProfileWorker 21 Exported Function
RsopResetPolicySettingStatusWorker 19 Exported Function
RsopAccessCheckByTypeWorker 17 Exported Function
RsopFileAccessCheckWorker 18 Exported Function
GetAppContainerFolderPathWorker 11 Exported Function
CreateGroupExWorker 4 Exported Function
CreateLinkFileExWorker 5 Exported Function
CreateDirectoryJunctionsForUserProfileWorker 3 Exported Function
CreateAppContainerProfileWorker 1 Exported Function
CreateDirectoryJunctionsForSystemWorker 2 Exported Function
DeriveAppContainerSidFromAppContainerNameWorker 9 Exported Function
DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedNameWorker 10 Exported Function
DeleteLinkFileWorker 8 Exported Function
DeleteAppContainerProfileWorker 6 Exported Function
DeleteGroupWorker 7 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: profext.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.153 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.153
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/10651f01a14ca3520bb4445d5f785a57505e672b85a567c3eae26759c45b14a7/detection/

MIT License. Copyright (c) 2020-2021 Strontic.