gmsaclient.dll
- File Path:
C:\Windows\SysWOW64\gmsaclient.dll
- Description: “gmsaclient.DYNLINK”
Hashes
| Type |
Hash |
| MD5 |
0B58C54C873539C8003206F4B9C6569F |
| SHA1 |
FC692EE94D8E03F9A51DAFA99AF156038EEC130A |
| SHA256 |
77CB8E2704BE5058B2851595F4AADF7B751AB55337BA6D38726E5D8BB0E2D5A9 |
| SHA384 |
E03C793D92C41E28B1917D3BCD86A309550DF8DA0E8034217D42CFFE4F440F882863CA7B7A53E24010B8DD96C160F266 |
| SHA512 |
1EC098B9288B93D3CEB2DA8B969AF57F8D6CA3A6268004D4AEC5668B90DD71D283D86C22C9C17983FF0875C4EB7667A6A67A4B535A5828B8E594355C7CFD2FCF |
| SSDEEP |
768:m35z+BTaIk0D7cOLnlE5Siln0Y938/jdF5vQ:m35z+B+ADAinlEcC6/jdFN |
| IMP |
D01D2C56D21DEFCCA9A30532FC31EF0A |
| PESHA1 |
185A621AEA65DB30D17338153C8451011F5553F3 |
| PE256 |
676F8EBD2D7C36C54029ABC83A8D2ED5355C3D151C400AFDACCE216658DB6C9E |
DLL Exports:
| Function Name |
Ordinal |
Type |
GMSAGetPassword |
5 |
Exported Function |
GMSAInit |
6 |
Exported Function |
GMSARefreshPasswords |
7 |
Exported Function |
GMSADelete |
4 |
Exported Function |
GMSAAdd |
1 |
Exported Function |
GMSACheckIfExistsInAD |
2 |
Exported Function |
GMSACleanup |
3 |
Exported Function |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: “gmsaclient.DYNLINK”
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/70
- VirusTotal Link: https://www.virustotal.com/gui/file/77cb8e2704be5058b2851595f4aadf7b751ab55337ba6d38726e5d8bb0e2d5a9/detection/
MIT License. Copyright (c) 2020-2021 Strontic.