cflapi.dll

  • File Path: C:\Windows\system32\cflapi.dll
  • Description: CXH from LogonUI API

Hashes

Type Hash
MD5 7E55AD20A527B6E408956F85FE19394E
SHA1 A094883D6B9F7F8734C4CE4CB0C40928F72BDEB1
SHA256 EB9252549F44826CB1B9F8B6B0607054702A6B6CEDA85B44FC8CD6A0A4D9D136
SHA384 365C56F68EA951CF78231BCD80351AB98770D4DB28563965E6F075290570DCECA01FC7F27E5856DBA9512353EB664114
SHA512 4E8D9A3AE4C31C26E6160F91A972ACDCF2798A717227A5FE97F21E10FB67F8E40A02CA5A8CEA5EAC81D40AE9F80FB885A1E0939E65CC985DEBABA8FE98D73FD0
SSDEEP 3072:W/3R+OOdFevqKPZwaFcL+zmuka7Od1XgpO6/e1NSf2:W/3R+f8cL+aa7OXXh6/e1N
IMP 213DFDDD6AC00A0FC75FD6BFA8728936
PESHA1 2BE6BC85496C7CA1F0ED09ECD05C7E3F1FD0BB86
PE256 DEDCE3CA566212B84A6ACC5928E485A20704F2EEE8467FCCD96276AAFB01FAEE

DLL Exports:

Function Name Ordinal Type
CflSetScenarioData 9 Exported Function
CflSerializeSessionContext 8 Exported Function
CflSecureFreeBuffer 7 Exported Function
CflSetupTransitionToUserAccount 12 Exported Function
CflSetupTempUserAccount 11 Exported Function
CflSetupAuthEnvironment 10 Exported Function
CflDeserializeSessionContext 3 Exported Function
CflClearTempUserAccount 2 Exported Function
CflClearScenarioData 1 Exported Function
CflGetTransitionScenarioData 6 Exported Function
CflGetScenarioData 5 Exported Function
CflFreeBuffer 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: cflapi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/eb9252549f44826cb1b9f8b6b0607054702a6b6ceda85b44fc8cd6a0a4d9d136/detection/

MIT License. Copyright (c) 2020-2021 Strontic.