kfwlogon.dll

  • File Path: C:\Program Files (x86)\Cisco Systems\Cisco Jabber\kfwlogon.dll
  • Description: Kerberos Network Provider - MIT Kerberos for Windows

Hashes

Type Hash
MD5 16DFFE948B1AB2DCB930AA4050F7B31E
SHA1 6919162BEF271997025C753C7AB56A486261FE6F
SHA256 B514DAA47FB0FF821A9B5356903E48E160C56E1580EA6E76211C3A5159A18BB4
SHA384 7016062A9C72F0F7F81DC81059CA4F104ED66CC48FC9DA31C9CB3773659FFD7BC800713B456EC54BEB88AFAB81C7EBEE
SHA512 5DA9E541844493EDD888CE2DC7A0E4439BBE99364C7C8FA167D669DC9E68D199180570036CE164CDEE1C8FCD05C152E94E1258DE6343036C600C7752E4BA8255
SSDEEP 384:0oNZfF7yLYFZfckKFyUq4Sf1gEZATydMsGr5q1Qm31CpzdnI/GUDay6MK6jkD:ZtfPfcklUquNTE31Cdm/GIKgkD
IMP B023C2C345B6C1B0EF06F02EE1CB5573
PESHA1 D0B49957477B634556DB787C2ADAE9B5E48F9B78
PE256 7F7DAE966B7957F1A77D520C3D18AEA04A17EF914828CEE02BDF881DF89E929B

DLL Exports:

Function Name Ordinal Type
NPGetCaps 4 Exported Function
NPLogonNotify 5 Exported Function
NPPasswordChangeNotify 6 Exported Function
DllEntryPoint 1 Exported Function
KFW_Logon_Event 2 Exported Function
LogonEventHandlerA 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 59C5C9F46EA82C4C743981566B64BD6C
  • Thumbprint: 475DAEE5A6CC149389EFDE176DEA526C627D203A
  • Issuer: CN=Symantec Class 3 SHA256 Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US
  • Subject: CN=Cisco Systems Inc., O=Cisco Systems Inc., L=San Jose, S=California, C=US

File Metadata

  • Original Filename: kfwlogon.dll
  • Product Name: kfwlogon.dll
  • Company Name: Massachusetts Institute of Technology.
  • File Version: 4.1-prerelease
  • Product Version: 4.1-prerelease
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 1997-2016 by the Massachusetts Institute of Technology
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/b514daa47fb0ff821a9b5356903e48e160c56e1580ea6e76211c3a5159a18bb4/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Cisco Systems\Cisco Jabber\x64\ProcessDump.exe 30

MIT License. Copyright (c) 2020-2021 Strontic.