proquota.exe

  • File Path: C:\Windows\SysWOW64\proquota.exe
  • Description: ProQuota

Hashes

Type Hash
MD5 A7A8990035457CE44E9565363A872784
SHA1 9D81F2CF0DF7A9D3DA137954D33DC4A7BDE32966
SHA256 5E73FE417A3655A5E730B28748F1B5389F038F7896A17022E53EB2A14C064E96
SHA384 C8F07A48DAE87E215291E054D4815EA6F32D4585D353B33F2D60B8D99FBF27B339A2CB02A4C21604928D3AB86C667FAB
SHA512 E7C1309D75F8FE63C7A7FFCCAE5702DFE0739FE9E727B66BAEE15982F026B2D888FE59890892517795528BFDFF198E2235DD1D11E600C3D6706DF210139A45F2
SSDEEP 384:9hS6Pzjqa0uyfceLqIQdoMJVOXejbBSuxulJX1zgdu1cZjUWfuWse2Dnr:CqvqJUIqFVUuxupkdu1e8ear

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: proquota.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\Windows\system32\proquota.exe 27

Possible Misuse

The following table contains possible examples of proquota.exe being misused. While proquota.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
sigma proc_creation_win_logon_scripts_userinitmprlogonscript_proc.yml - '\proquota.exe' DRL 1.0

MIT License. Copyright (c) 2020-2021 Strontic.