KdsCli.dll

File Path: C:\Windows\system32\KdsCli.dll
Description: Microsoft Key Distribution Service Provider

Hashes

Type	Hash
MD5	`8631E7293109706A8EA526CB30972475`
SHA1	`FACB397121BDFD3312D4E2C93AEA558E0D62016A`
SHA256	`8CD6253B881A81B7515B1CA24081D155818608B8EA602403C5B23612DBB813E1`
SHA384	`BF0ED690E5F463C611F52C3FE857F5BD4DF07F8EB63DEAB794241E4AA9D96426CE9A059AAD25681B2D685E3639D9D323`
SHA512	`FDDD54A01D39A15DDEBD966223891305DFA5812D293E0627D8876C9EB17681EFDBCB54FAD9EAF192A54C2B7F8676B68E9AEC840D145EAC12ABE4CBD2CD5EA34C`
SSDEEP	`1536:mlhfV/3REB7Bw0+3BU7m2gzUcE0bMA3vBAvXq4Snuf98StJbFFrFOQwV6:mHfB3qnw0jRMlE0bMApA/q4Snuf98St7`
IMP	`2EFC17811CD8FF0304CC17CC598AAD1D`
PESHA1	`31DD83CB3D362B4C60449719ADC1F243286E53E8`
PE256	`2304925FB643A38D07C5D1394066C6F4ECAC300ECEE7186C9410436CC3206BBB`

DLL Exports:

Function Name	Ordinal	Type
`GetSIDKeyFileName`	32	Exported Function
`GetSIDKeyCacheFolder`	31	Exported Function
`GetServerConfig`	33	Exported Function
`KdsGetEpochLength`	36	Exported Function
`KdsCreateClientBinding`	35	Exported Function
`GetUserSidStr`	34	Exported Function
`GetKey`	27	Exported Function
`GetKDSSrvConfigPath`	25	Exported Function
`GetKdsKeyCycleDuration`	26	Exported Function
`GetRootKey`	30	Exported Function
`GetMRKPath`	29	Exported Function
`GetLdapBinding`	28	Exported Function
`TestServerConfig`	45	Exported Function
`SIDKeyUnprotect`	43	Exported Function
`SIDKeyProvFree`	42	Exported Function
`WriteSIDKeyInCache`	48	Exported Function
`ValidateSrvConfig`	47	Exported Function
`UnlockRpcCache`	46	Exported Function
`KdsGetKeyStartTime`	39	Exported Function
`KdsGetGmsaPasswordBasedOnTimestamp`	38	Exported Function
`KdsGetGmsaPasswordBasedOnKeyId`	37	Exported Function
`SIDKeyProvAlloc`	41	Exported Function
`SIDKeyProtect`	40	Exported Function
`SetServerConfig`	44	Exported Function
`GenerateDerivedKey`	9	Exported Function
`FreeServerConfig`	8	Exported Function
`FreeRootKeyMetaDataList`	7	Exported Function
`GenerateSecretAgreementPrivateKey`	13	Exported Function
`GenerateKDFContext`	11	Exported Function
`GenerateEphemeralKeyPair`	10	Exported Function
`FindAndReadSIDKeyInCache`	3	Exported Function
`DeleteAllCachedKeys`	2	Exported Function
`CreateRootKey`	1	Exported Function
`FreeRootKeyConfig`	6	Exported Function
`FreeRootKey`	5	Exported Function
`FindKeyForOfflineUsage`	4	Exported Function
`GetDCInfo`	21	Exported Function
`GetCurrentTimeInULL`	20	Exported Function
`GetCurrentL0ID`	19	Exported Function
`GetIntervalStartTime`	24	Exported Function
`GetFullDCName`	23	Exported Function
`GetDefaultServerConfig`	22	Exported Function
`GetAllRootKeysMetaData`	15	Exported Function
`GetAllRootKeys`	14	Exported Function
`GenerateSIDPublicKeyBlob`	12	Exported Function
`GetCurrentIntervalID`	18	Exported Function
`GetCachedMachineDomainInfo`	17	Exported Function
`GetAndLockCachedRPCBinding`	16	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: KdsCli.dll.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/67
VirusTotal Link: https://www.virustotal.com/gui/file/8cd6253b881a81b7515b1ca24081d155818608b8ea602403c5b23612dbb813e1/detection/