KerbClientShared.dll

  • File Path: C:\Windows\SysWOW64\KerbClientShared.dll
  • Description: Kerberos Client Shared Functionality

Hashes

Type Hash
MD5 22FD99432EC0BC9B1990F66E965F838C
SHA1 D4848FFA945A85B15CCE41E10CBA63F2B8BFCDD9
SHA256 9C97A6DFCDDB4F7976F5E75B2086C87ABF5C834446E1FFC3D961BF1E1D3DD492
SHA384 002C67B2F561968E8849F30CC276EB8CCEBD06A515BA4CFBE0CE91060F26BA7643DC1ECDFC1D62F0127EFB531B547C3D
SHA512 488C8A7832B4F45120873ADF53D9498B143338789A03F953BC86C2CF20E2751505E8B697DD10BF101CC70B1AF026C84FC2446E2183FFC34B01FA7A57151E1F7B
SSDEEP 3072:TcFIiEkdo7ba0z5ngyvCPPQBhUwSXX9kpKF4/R6t4zALt:oFIJk4bczwSHMK2BIt
IMP 0638E05A8F2DB4D0878B4389D3527AF1
PESHA1 9CF33BD81527999061AE626A70360426D6998D28
PE256 77580FE76100BCFB68F510EE06F34AB657C31F2D7CD70D3282A2A52EA771745A

DLL Exports:

Function Name Ordinal Type
KerbClientUnpackKdcReplyBody 26 Exported Function
KerbClientUnpackAsn1BufferVoid 25 Exported Function
KerbClientVerifyChecksum 28 Exported Function
KerbClientUpdateSharedConfiguration 27 Exported Function
KerbClientTransformStoredCred 24 Exported Function
KerbClientParseKeyListReplyPaData 21 Exported Function
KerbClientPackAsn1Buffer 20 Exported Function
KerbClientSharedInit 23 Exported Function
KerbClientSharedCleanup 22 Exported Function
KerbClientVerifyEncryptedChallengePaData 29 Exported Function
KerbDHGetSharedSecretFromCapiKeyBuffer 36 Exported Function
KerbDHGetLittleEndianPublicKey 35 Exported Function
KerbPackKdcReplyWithEncryptedSessionKey 38 Exported Function
KerbKdcReplyContainsTgt 37 Exported Function
KerbDHGetLegacyDHParameters 34 Exported Function
KerbClientVerifyFastArmoredKerbError 31 Exported Function
KerbClientVerifyFastArmoredKdcReply 30 Exported Function
KerbDHCreateBCryptKey 33 Exported Function
KerbClientVerifyFastArmoredTgsReply 32 Exported Function
KerbClientBuildFastChallenge 7 Exported Function
KerbClientBuildFastArmoredKdcRequest 6 Exported Function
KerbClientBuildStrengthenedReplyKey 9 Exported Function
KerbClientBuildKeyList 8 Exported Function
KerbClientBuildExplicitArmorKey 5 Exported Function
KerbClientAllocateStoredCred 2 Exported Function
KerbClientAlloc 1 Exported Function
KerbClientBuildEncryptedAuthData 4 Exported Function
KerbClientBuildAsReqAuthenticator 3 Exported Function
KerbClientBuildTicketArmorKey 10 Exported Function
KerbClientFreeStoredCred 17 Exported Function
KerbClientFree 16 Exported Function
KerbClientPackApReply 19 Exported Function
KerbClientFreeSupplementalCredentials 18 Exported Function
KerbClientDuplicateStoredCred 15 Exported Function
KerbClientDecryptApReply 12 Exported Function
KerbClientComputeTgsChecksum 11 Exported Function
KerbClientDeriveFastChallengeKey 14 Exported Function
KerbClientDecryptPacCredentials 13 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: KerbClientSHared.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/9c97a6dfcddb4f7976f5e75b2086c87abf5c834446e1ffc3d961bf1e1d3dd492/detection/

MIT License. Copyright (c) 2020 Strontic.