gmsaclient.dll

  • File Path: C:\Windows\SysWOW64\gmsaclient.dll
  • Description: “gmsaclient.DYNLINK”

Hashes

Type Hash
MD5 0B58C54C873539C8003206F4B9C6569F
SHA1 FC692EE94D8E03F9A51DAFA99AF156038EEC130A
SHA256 77CB8E2704BE5058B2851595F4AADF7B751AB55337BA6D38726E5D8BB0E2D5A9
SHA384 E03C793D92C41E28B1917D3BCD86A309550DF8DA0E8034217D42CFFE4F440F882863CA7B7A53E24010B8DD96C160F266
SHA512 1EC098B9288B93D3CEB2DA8B969AF57F8D6CA3A6268004D4AEC5668B90DD71D283D86C22C9C17983FF0875C4EB7667A6A67A4B535A5828B8E594355C7CFD2FCF
SSDEEP 768:m35z+BTaIk0D7cOLnlE5Siln0Y938/jdF5vQ:m35z+B+ADAinlEcC6/jdFN
IMP D01D2C56D21DEFCCA9A30532FC31EF0A
PESHA1 185A621AEA65DB30D17338153C8451011F5553F3
PE256 676F8EBD2D7C36C54029ABC83A8D2ED5355C3D151C400AFDACCE216658DB6C9E

DLL Exports:

Function Name Ordinal Type
GMSAGetPassword 5 Exported Function
GMSAInit 6 Exported Function
GMSARefreshPasswords 7 Exported Function
GMSADelete 4 Exported Function
GMSAAdd 1 Exported Function
GMSACheckIfExistsInAD 2 Exported Function
GMSACleanup 3 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: “gmsaclient.DYNLINK”
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/70
  • VirusTotal Link: https://www.virustotal.com/gui/file/77cb8e2704be5058b2851595f4aadf7b751ab55337ba6d38726e5d8bb0e2d5a9/detection/

MIT License. Copyright (c) 2020-2021 Strontic.