Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.5.0.077 66.67%
2.5.0.071 33.33%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, SetServiceStatus, ControlService, DeleteService, ChangeServiceConfig2W, ChangeServiceConfigW, CreateServiceW, RegDeleteValueW, CloseServiceHandle, QueryServiceConfigW, QueryServiceStatus, OpenServiceW, OpenSCManagerW, LsaClose, LsaFreeMemory, LsaQueryInformationPolicy, LsaOpenPolicy, LookupAccountSidW, GetTokenInformation, DuplicateTokenEx, CreateProcessAsUserW, ConvertSidToStringSidW, LookupAccountNameW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegQueryValueExW, RegCloseKey
kernel32.dll
GetCurrentDirectoryA, GetEnvironmentVariableA, GetCurrentProcessId, SetErrorMode, SetUnhandledExceptionFilter, GetCurrentThread, ExitThread, MultiByteToWideChar, FindResourceW, SizeofResource, LockResource, LoadResource, FindResourceExW, WideCharToMultiByte, GetVersionExA, LocalAlloc, OpenProcess, Sleep, lstrlenA, GetTickCount, GetSystemTimeAsFileTime, QueryPerformanceCounter, ExitProcess, HeapSize, HeapReAlloc, HeapDestroy, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, LoadLibraryA, ConnectNamedPipe, WriteFileEx, InterlockedCompareExchange, GetProcessHeap, HeapFree, GetModuleFileNameA, ResumeThread, FormatMessageW, WaitForMultipleObjects, FreeLibraryAndExitThread, GetLastError, LocalFree, lstrcmpiW, lstrcpynW, lstrcatW, lstrlenW, WaitForSingleObject, SetEvent, CreateEventW, CloseHandle, GetVersion, GetModuleFileNameW, GetComputerNameW, GetProcAddress, FreeLibrary, EnterCriticalSection, LeaveCriticalSection, CreateFileW, SetNamedPipeHandleState, TransactNamedPipe, InitializeCriticalSection, DeleteCriticalSection, DuplicateHandle, GetCurrentProcess, GetModuleHandleW, FlushInstructionCache, SetLastError, GetCurrentThreadId, LoadLibraryW, CreateNamedPipeW, HeapAlloc, DisconnectNamedPipe, ReadFileEx, GetOverlappedResult, WaitForMultipleObjectsEx, DisableThreadLibraryCalls, OutputDebugStringA, GetModuleHandleA, GetFileAttributesW, LocalReAlloc, UnmapViewOfFile, FlushViewOfFile, MapViewOfFile, CreateFileMappingW, GetSystemInfo
msvcr70.dll
DllMain
ole32.dll
CoInitializeEx, CoUninitialize, CoCreateGuid, StringFromGUID2, CoGetObject, CoTaskMemFree, CoCreateInstance, CoInitialize
shlwapi.dll
SHGetValueW, PathFindFileNameW, PathRemoveExtensionW, PathStripPathW, wnsprintfW, SHDeleteKeyW, StrTrimW, PathAppendW, PathCombineW, StrRChrIW, StrStrIW
user32.dll
GetUserObjectInformationW, GetSystemMetrics, MsgWaitForMultipleObjectsEx, DispatchMessageW, TranslateMessage, IsDialogMessageW, EnumThreadWindows, CloseDesktop, PostMessageW, SetThreadDesktop, OpenDesktopW, FindWindowW, PeekMessageW, RegisterClassExW, GetClassInfoExW, wsprintfW, UnregisterClassA, CallWindowProcW, CreateWindowExW, GetWindowLongW, SetWindowLongW, DestroyWindow, DefWindowProcW, LoadCursorW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
winmm.dll
timeGetTime
Export table
DllRegisterServer
DllUnregisterServer
InitializeChangeNotify
NPGetCaps
NPLogonNotify
NPPasswordChangeNotify
OnDisconnect
OnLock
OnLogoff
OnLogon
OnPostShell
OnReconnect
OnShutdown
OnStartScreenSaver
OnStartShell
OnStartup
OnStopScreenSaver
OnUnlock
PasswordChangeNotify
PasswordFilter
ProcessPasswordChange
ServiceMain

ASWlnPkg.dll

Cognizance Identity Manager by Cognizance

Remove ASWlnPkg.dll
Version:   2.5.0.071
MD5:   e4bc0cb0a57423bd11d8fe06366224e4
SHA1:   4993a21b1d6dd8a757f5aca8f000efdaa73af7ca
SHA256:   38d0a66da0a1dc374093706d1abde6490abd9827acf734327f515953a57e2262

Overview

aswlnpkg.dll is loaded as dynamic link library that runs in the context of a process.

DetailsDetails

File name:aswlnpkg.dll
Publisher:Cognizance Corporation
Product name:Cognizance Identity Manager
Description:Winlogon notification handler
Typical file path:C:\Program Files\hewlett-packard\iam\bin\aswlnpkg.dll
File version:2.5.0.071
Product version:2.1
Size:72 KB (73,728 bytes)
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'ASBroker'
  • Shared name is 'ASBroker'
  • Shared name is 'ASBroker'
Startup files notify
  • OneCard

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 66.67%
Windows Vista Home Basic 33.33%

Distribution by countryDistribution by country

Portugal installs about 33.33% of Cognizance Identity Manager.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE