KerbClientShared.dll

File Path: C:\Windows\system32\KerbClientShared.dll
Description: Kerberos Client Shared Functionality

Hashes

Type	Hash
MD5	`D0FE582B5B6D9917A7FC2FCEA54885D8`
SHA1	`6D279DFF88B13048B5AFFD9C21447D069FF1E0E2`
SHA256	`598ED7BCD68B1A375FA7D34E7A8F37FAE05D85AD9B803047243AA9FFE30514CC`
SHA384	`D2E7AA4BA79CBD5E4B736AACFB7714DA66EA6D3C37F5362C00321648C23429CD64195BD58C2DA0DE4B76AEB26A8813A7`
SHA512	`44EDE2F69208C9355EF937F707F4941B3A73E96EDD97747A02BC7B8A3AD2282E25B19B55666FA5430990A46D0B5AF170AA5CB19CE34903F9BD731015344A1D57`
SSDEEP	`3072:svoO66ppj+scThFDsG9rTS23/jLbgngWAzIPF4bh8K:sQuHj+scThPnS23/jLbgnxPy`
IMP	`F46B01F34A12BD6B1095BEDE9B008337`
PESHA1	`796BD005113BED48BC85FC9E61C7D3A9EF89F1BF`
PE256	`52D4FDB8AFC6511D1185440CE2E1ECC21A51E7AE4C0D2947805ACE8EEB287EFF`

DLL Exports:

Function Name	Ordinal	Type
`KerbClientUnpackKdcReplyBody`	26	Exported Function
`KerbClientUnpackAsn1BufferVoid`	25	Exported Function
`KerbClientVerifyChecksum`	28	Exported Function
`KerbClientUpdateSharedConfiguration`	27	Exported Function
`KerbClientTransformStoredCred`	24	Exported Function
`KerbClientParseKeyListReplyPaData`	21	Exported Function
`KerbClientPackAsn1Buffer`	20	Exported Function
`KerbClientSharedInit`	23	Exported Function
`KerbClientSharedCleanup`	22	Exported Function
`KerbClientVerifyEncryptedChallengePaData`	29	Exported Function
`KerbDHGetSharedSecretFromCapiKeyBuffer`	36	Exported Function
`KerbDHGetLittleEndianPublicKey`	35	Exported Function
`KerbPackKdcReplyWithEncryptedSessionKey`	38	Exported Function
`KerbKdcReplyContainsTgt`	37	Exported Function
`KerbDHGetLegacyDHParameters`	34	Exported Function
`KerbClientVerifyFastArmoredKerbError`	31	Exported Function
`KerbClientVerifyFastArmoredKdcReply`	30	Exported Function
`KerbDHCreateBCryptKey`	33	Exported Function
`KerbClientVerifyFastArmoredTgsReply`	32	Exported Function
`KerbClientBuildFastChallenge`	7	Exported Function
`KerbClientBuildFastArmoredKdcRequest`	6	Exported Function
`KerbClientBuildStrengthenedReplyKey`	9	Exported Function
`KerbClientBuildKeyList`	8	Exported Function
`KerbClientBuildExplicitArmorKey`	5	Exported Function
`KerbClientAllocateStoredCred`	2	Exported Function
`KerbClientAlloc`	1	Exported Function
`KerbClientBuildEncryptedAuthData`	4	Exported Function
`KerbClientBuildAsReqAuthenticator`	3	Exported Function
`KerbClientBuildTicketArmorKey`	10	Exported Function
`KerbClientFreeStoredCred`	17	Exported Function
`KerbClientFree`	16	Exported Function
`KerbClientPackApReply`	19	Exported Function
`KerbClientFreeSupplementalCredentials`	18	Exported Function
`KerbClientDuplicateStoredCred`	15	Exported Function
`KerbClientDecryptApReply`	12	Exported Function
`KerbClientComputeTgsChecksum`	11	Exported Function
`KerbClientDeriveFastChallengeKey`	14	Exported Function
`KerbClientDecryptPacCredentials`	13	Exported Function

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: KerbClientSHared.dll
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.488 (WinBuild.160101.0800)
Product Version: 10.0.19041.488
Language: English (United States)
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/67
VirusTotal Link: https://www.virustotal.com/gui/file/598ed7bcd68b1a375fa7d34e7a8f37fae05d85ad9b803047243aa9ffe30514cc/detection/