KerbClientShared.dll

  • File Path: C:\Windows\system32\KerbClientShared.dll
  • Description: Kerberos Client Shared Functionality

Hashes

Type Hash
MD5 D0FE582B5B6D9917A7FC2FCEA54885D8
SHA1 6D279DFF88B13048B5AFFD9C21447D069FF1E0E2
SHA256 598ED7BCD68B1A375FA7D34E7A8F37FAE05D85AD9B803047243AA9FFE30514CC
SHA384 D2E7AA4BA79CBD5E4B736AACFB7714DA66EA6D3C37F5362C00321648C23429CD64195BD58C2DA0DE4B76AEB26A8813A7
SHA512 44EDE2F69208C9355EF937F707F4941B3A73E96EDD97747A02BC7B8A3AD2282E25B19B55666FA5430990A46D0B5AF170AA5CB19CE34903F9BD731015344A1D57
SSDEEP 3072:svoO66ppj+scThFDsG9rTS23/jLbgngWAzIPF4bh8K:sQuHj+scThPnS23/jLbgnxPy
IMP F46B01F34A12BD6B1095BEDE9B008337
PESHA1 796BD005113BED48BC85FC9E61C7D3A9EF89F1BF
PE256 52D4FDB8AFC6511D1185440CE2E1ECC21A51E7AE4C0D2947805ACE8EEB287EFF

DLL Exports:

Function Name Ordinal Type
KerbClientUnpackKdcReplyBody 26 Exported Function
KerbClientUnpackAsn1BufferVoid 25 Exported Function
KerbClientVerifyChecksum 28 Exported Function
KerbClientUpdateSharedConfiguration 27 Exported Function
KerbClientTransformStoredCred 24 Exported Function
KerbClientParseKeyListReplyPaData 21 Exported Function
KerbClientPackAsn1Buffer 20 Exported Function
KerbClientSharedInit 23 Exported Function
KerbClientSharedCleanup 22 Exported Function
KerbClientVerifyEncryptedChallengePaData 29 Exported Function
KerbDHGetSharedSecretFromCapiKeyBuffer 36 Exported Function
KerbDHGetLittleEndianPublicKey 35 Exported Function
KerbPackKdcReplyWithEncryptedSessionKey 38 Exported Function
KerbKdcReplyContainsTgt 37 Exported Function
KerbDHGetLegacyDHParameters 34 Exported Function
KerbClientVerifyFastArmoredKerbError 31 Exported Function
KerbClientVerifyFastArmoredKdcReply 30 Exported Function
KerbDHCreateBCryptKey 33 Exported Function
KerbClientVerifyFastArmoredTgsReply 32 Exported Function
KerbClientBuildFastChallenge 7 Exported Function
KerbClientBuildFastArmoredKdcRequest 6 Exported Function
KerbClientBuildStrengthenedReplyKey 9 Exported Function
KerbClientBuildKeyList 8 Exported Function
KerbClientBuildExplicitArmorKey 5 Exported Function
KerbClientAllocateStoredCred 2 Exported Function
KerbClientAlloc 1 Exported Function
KerbClientBuildEncryptedAuthData 4 Exported Function
KerbClientBuildAsReqAuthenticator 3 Exported Function
KerbClientBuildTicketArmorKey 10 Exported Function
KerbClientFreeStoredCred 17 Exported Function
KerbClientFree 16 Exported Function
KerbClientPackApReply 19 Exported Function
KerbClientFreeSupplementalCredentials 18 Exported Function
KerbClientDuplicateStoredCred 15 Exported Function
KerbClientDecryptApReply 12 Exported Function
KerbClientComputeTgsChecksum 11 Exported Function
KerbClientDeriveFastChallengeKey 14 Exported Function
KerbClientDecryptPacCredentials 13 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: KerbClientSHared.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/67
  • VirusTotal Link: https://www.virustotal.com/gui/file/598ed7bcd68b1a375fa7d34e7a8f37fae05d85ad9b803047243aa9ffe30514cc/detection/

MIT License. Copyright (c) 2020 Strontic.