userenv.dll

  • File Path: C:\Windows\SysWOW64\userenv.dll
  • Description: Userenv

Hashes

Type Hash
MD5 A2CF500196F24D0E96E87B1496578253
SHA1 00EB143DFFD906C37F91C30F0D5672326650911D
SHA256 AF7AB9C5819489F89FA29784F1D08AE9DE3281F0828C6ECDEB4C23C5ECA6C605
SHA384 61783B5749235D6B6AB636FD7031B920E61FDE379C3BAD024F495CBF09EAA6EA0CE244B20B48AB95D4020AE9E05013F1
SHA512 02C4BAB6505C37A6D83DFB5DE9F100130C2C2692622384D7B124C7843941C7E09304B7E12C6370E80EEAA2A30FCDE146D42102958CEC8728B983C710D9936E3F
SSDEEP 3072:9c9hUtQWTNrycY0xHCCd7BLc97i4K4h1ckLTxxoV:y9hUtQWZryaiCdCli4K4hiqIV
IMP 1DBFB02FF9A10372804138454FB3762B
PESHA1 94D007DBE2ED26068BB6133F8DD81849EBE97B8C
PE256 0859A57EF3831A726CC14C543068B55A037A8597709690081B7902258A243028

DLL Exports:

Function Name Ordinal Type
HasPolicyForegroundProcessingCompleted 149 Exported Function
GetUserProfileDirectoryW 148 Exported Function
GetUserProfileDirectoryA 147 Exported Function
LeaveCriticalPolicySection 150 Exported Function
LoadUserProfileW 153 Exported Function
LoadUserProfileA 152 Exported Function
LoadProfileExtender 151 Exported Function
GetNextFgPolicyRefreshInfo 142 Exported Function
GetGPOListW 141 Exported Function
GetGPOListA 140 Exported Function
GetPreviousFgPolicyRefreshInfo 143 Exported Function
GetProfileType 144 Exported Function
GetProfilesDirectoryW 146 Exported Function
GetProfilesDirectoryA 145 Exported Function
ProcessGroupPolicyCompleted 154 Exported Function
UnloadProfileExtender 163 Exported Function
RsopSetPolicySettingStatus 162 Exported Function
RsopResetPolicySettingStatus 161 Exported Function
UnloadUserProfile 164 Exported Function
WaitForUserPolicyForegroundProcessing 167 Exported Function
WaitForMachinePolicyForegroundProcessing 166 Exported Function
UnregisterGPNotification 165 Exported Function
RefreshPolicyEx 157 Exported Function
RefreshPolicy 156 Exported Function
ProcessGroupPolicyCompletedEx 155 Exported Function
RegisterGPNotification 158 Exported Function
RsopLoggingEnabled 105 Exported Function
RsopFileAccessCheck 160 Exported Function
RsopAccessCheckByType 159 Exported Function
GetDefaultUserProfileDirectoryW 138 Exported Function
DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName 115 Exported Function
DeriveAppContainerSidFromAppContainerName 114 Exported Function
DeleteProfileW 113 Exported Function
DestroyEnvironmentBlock 116 Exported Function
DllRegisterServer 119 Exported Function
DllGetClassObject 118 Exported Function
DllCanUnloadNow 117 Exported Function
CreateAppContainerProfile 108 Exported Function
AreThereVisibleShutdownScripts 107 Exported Function
AreThereVisibleLogoffScripts 106 Exported Function
CreateEnvironmentBlock 109 Exported Function
DeleteProfileA 112 Exported Function
DeleteAppContainerProfile 111 Exported Function
CreateProfile 110 Exported Function
DllUnregisterServer 120 Exported Function
GetAppContainerFolderPath 131 Exported Function
GetAllUsersProfileDirectoryW 130 Exported Function
GetAllUsersProfileDirectoryA 129 Exported Function
GetAppContainerRegistryLocation 132 Exported Function
GetDefaultUserProfileDirectoryA 136 Exported Function
GetAppliedGPOListW 134 Exported Function
GetAppliedGPOListA 133 Exported Function
ExpandEnvironmentStringsForUserW 124 Exported Function
ExpandEnvironmentStringsForUserA 123 Exported Function
EnterCriticalPolicySection 121 Exported Function
ForceSyncFgPolicy 125 Exported Function
GenerateGPNotification 128 Exported Function
FreeGPOListW 127 Exported Function
FreeGPOListA 126 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: userenv.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/af7ab9c5819489f89fa29784f1d08ae9de3281f0828c6ecdeb4c23c5eca6c605/detection/

MIT License. Copyright (c) 2020-2021 Strontic.