cflapi.dll
- File Path:
C:\Windows\system32\cflapi.dll
- Description: CXH from LogonUI API
Hashes
Type |
Hash |
MD5 |
7E55AD20A527B6E408956F85FE19394E |
SHA1 |
A094883D6B9F7F8734C4CE4CB0C40928F72BDEB1 |
SHA256 |
EB9252549F44826CB1B9F8B6B0607054702A6B6CEDA85B44FC8CD6A0A4D9D136 |
SHA384 |
365C56F68EA951CF78231BCD80351AB98770D4DB28563965E6F075290570DCECA01FC7F27E5856DBA9512353EB664114 |
SHA512 |
4E8D9A3AE4C31C26E6160F91A972ACDCF2798A717227A5FE97F21E10FB67F8E40A02CA5A8CEA5EAC81D40AE9F80FB885A1E0939E65CC985DEBABA8FE98D73FD0 |
SSDEEP |
3072:W/3R+OOdFevqKPZwaFcL+zmuka7Od1XgpO6/e1NSf2:W/3R+f8cL+aa7OXXh6/e1N |
IMP |
213DFDDD6AC00A0FC75FD6BFA8728936 |
PESHA1 |
2BE6BC85496C7CA1F0ED09ECD05C7E3F1FD0BB86 |
PE256 |
DEDCE3CA566212B84A6ACC5928E485A20704F2EEE8467FCCD96276AAFB01FAEE |
DLL Exports:
Function Name |
Ordinal |
Type |
CflSetScenarioData |
9 |
Exported Function |
CflSerializeSessionContext |
8 |
Exported Function |
CflSecureFreeBuffer |
7 |
Exported Function |
CflSetupTransitionToUserAccount |
12 |
Exported Function |
CflSetupTempUserAccount |
11 |
Exported Function |
CflSetupAuthEnvironment |
10 |
Exported Function |
CflDeserializeSessionContext |
3 |
Exported Function |
CflClearTempUserAccount |
2 |
Exported Function |
CflClearScenarioData |
1 |
Exported Function |
CflGetTransitionScenarioData |
6 |
Exported Function |
CflGetScenarioData |
5 |
Exported Function |
CflFreeBuffer |
4 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
330000026551AE1BBD005CBFBD000000000265
- Thumbprint:
E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: cflapi.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/68
- VirusTotal Link: https://www.virustotal.com/gui/file/eb9252549f44826cb1b9f8b6b0607054702a6b6ceda85b44fc8cd6a0a4d9d136/detection/
MIT License. Copyright (c) 2020-2021 Strontic.