KdsCli.dll

  • File Path: C:\Windows\system32\KdsCli.dll
  • Description: Microsoft Key Distribution Service Provider

Hashes

Type Hash
MD5 8631E7293109706A8EA526CB30972475
SHA1 FACB397121BDFD3312D4E2C93AEA558E0D62016A
SHA256 8CD6253B881A81B7515B1CA24081D155818608B8EA602403C5B23612DBB813E1
SHA384 BF0ED690E5F463C611F52C3FE857F5BD4DF07F8EB63DEAB794241E4AA9D96426CE9A059AAD25681B2D685E3639D9D323
SHA512 FDDD54A01D39A15DDEBD966223891305DFA5812D293E0627D8876C9EB17681EFDBCB54FAD9EAF192A54C2B7F8676B68E9AEC840D145EAC12ABE4CBD2CD5EA34C
SSDEEP 1536:mlhfV/3REB7Bw0+3BU7m2gzUcE0bMA3vBAvXq4Snuf98StJbFFrFOQwV6:mHfB3qnw0jRMlE0bMApA/q4Snuf98St7
IMP 2EFC17811CD8FF0304CC17CC598AAD1D
PESHA1 31DD83CB3D362B4C60449719ADC1F243286E53E8
PE256 2304925FB643A38D07C5D1394066C6F4ECAC300ECEE7186C9410436CC3206BBB

DLL Exports:

Function Name Ordinal Type
GetSIDKeyFileName 32 Exported Function
GetSIDKeyCacheFolder 31 Exported Function
GetServerConfig 33 Exported Function
KdsGetEpochLength 36 Exported Function
KdsCreateClientBinding 35 Exported Function
GetUserSidStr 34 Exported Function
GetKey 27 Exported Function
GetKDSSrvConfigPath 25 Exported Function
GetKdsKeyCycleDuration 26 Exported Function
GetRootKey 30 Exported Function
GetMRKPath 29 Exported Function
GetLdapBinding 28 Exported Function
TestServerConfig 45 Exported Function
SIDKeyUnprotect 43 Exported Function
SIDKeyProvFree 42 Exported Function
WriteSIDKeyInCache 48 Exported Function
ValidateSrvConfig 47 Exported Function
UnlockRpcCache 46 Exported Function
KdsGetKeyStartTime 39 Exported Function
KdsGetGmsaPasswordBasedOnTimestamp 38 Exported Function
KdsGetGmsaPasswordBasedOnKeyId 37 Exported Function
SIDKeyProvAlloc 41 Exported Function
SIDKeyProtect 40 Exported Function
SetServerConfig 44 Exported Function
GenerateDerivedKey 9 Exported Function
FreeServerConfig 8 Exported Function
FreeRootKeyMetaDataList 7 Exported Function
GenerateSecretAgreementPrivateKey 13 Exported Function
GenerateKDFContext 11 Exported Function
GenerateEphemeralKeyPair 10 Exported Function
FindAndReadSIDKeyInCache 3 Exported Function
DeleteAllCachedKeys 2 Exported Function
CreateRootKey 1 Exported Function
FreeRootKeyConfig 6 Exported Function
FreeRootKey 5 Exported Function
FindKeyForOfflineUsage 4 Exported Function
GetDCInfo 21 Exported Function
GetCurrentTimeInULL 20 Exported Function
GetCurrentL0ID 19 Exported Function
GetIntervalStartTime 24 Exported Function
GetFullDCName 23 Exported Function
GetDefaultServerConfig 22 Exported Function
GetAllRootKeysMetaData 15 Exported Function
GetAllRootKeys 14 Exported Function
GenerateSIDPublicKeyBlob 12 Exported Function
GetCurrentIntervalID 18 Exported Function
GetCachedMachineDomainInfo 17 Exported Function
GetAndLockCachedRPCBinding 16 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: KdsCli.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/8cd6253b881a81b7515b1ca24081d155818608b8ea602403c5b23612dbb813e1/detection/

MIT License. Copyright (c) 2020 Strontic.