proquota.exe

  • File Path: C:\WINDOWS\system32\proquota.exe
  • Description: ProQuota

Hashes

Type Hash
MD5 468CE68311D458C654353CECEA899976
SHA1 DFCCDC7D6939411E22C379DE4DFA4CF45EF928FC
SHA256 C3F52B893578A49C36AF3C0C15A2A5ED4E44F1F8669136712F607EBB28ACF268
SHA384 CBCED9B5E9D1E31807919B16F586849A93C5342AB8F8801A80914A212072D6B77EDBE0F670AA17210AAD687229456EA7
SHA512 09025D8F4EFED78B97E7C87BBDF6400EFFE2F5FFA835952CC0E46AD915BDADC58BCE749F709D9A6FDE2F04234E2E9E97AB5888A6A40DCF7B1E90B1D05D29450E
SSDEEP 768:N3v8VZTw3RTqK0Orqa4UFoZiNBHJniPOvWom5/T0oseh/Tt6Wk:pvH3RTqv9a4UWUJ6Ouomt0oV/TtPk

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: proquota.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

Possible Misuse

The following table contains possible examples of proquota.exe being misused. While proquota.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_logon_scripts_userinitmprlogonscript_proc.yml - '\proquota.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.