proquota.exe

  • File Path: C:\Windows\system32\proquota.exe
  • Description: ProQuota

Hashes

Type Hash
MD5 802CD1CDD76235BEEFA5406F0A5773A6
SHA1 BB5A300EC34389E52385E1BBDC24A142F197DFBE
SHA256 FFCC77959A2BB841D3B51B66535008964F0A28674DC0B449A510A5D9A7B70A27
SHA384 F8FC3A4A08AFEBE93E70F6758EA407B798788B06D54F07EED02D1E1A07F5E1CAF6A233A7E94837C421BC737F44E2B8A0
SHA512 4CC28CDA6878FC288460638FE5E858D3837AB6B2B385CA97A0D0B6B7A22C9294789A008376F731298552664DFC2F31DCA8BD67B7273A0C19A9B762BB0B0508B5
SSDEEP 384:VoYmzGe47482PWACGisc9ywU+eiF+PBYf/+hZJ1I6S2f10UglLUGcg8ZjUWfuW:eYJ7yWA6bU+eiFwYOdhrwLUGb+

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: proquota.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\SysWOW64\proquota.exe 27

Possible Misuse

The following table contains possible examples of proquota.exe being misused. While proquota.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_logon_scripts_userinitmprlogonscript_proc.yml - '\proquota.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.