klist.exe

  • File Path: C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\klist.exe
  • Description: OpenJDK Platform binary

Hashes

Type Hash
MD5 558FAD6023A99926C599A2EC768DEF45
SHA1 7DDA77574718B27EADC9BBCE77F29A4871EE2F68
SHA256 D28195EF33C3EF6DFA04EABA05864951899484BBC0C635819BA6A3CA5B8CD25F
SHA384 B1F65CBE5D0DFE26C108C973225602ED19EB1855A6ACD978857CE57679DC23427CA1E23C5EBB709CC4C1D0A768BF22AC
SHA512 70C7FC0DA74B4C3C5262881B8D9E7DF7B84DFD6951222E9A1F5D885CB638DA32EE90F1E2BC988DAF1960C31EC36511628D753B2A31361013DBDE636B20271F92
SSDEEP 192:O4TgL1l+gp8NPWjyMCitoNGeExFnYe+PjPV9j7mMaDWpHQZoDS:dTEl+NN+jyRi4GeEvnYPLV9+MaDGVS
IMP 4CE08A7677042CDA6B3152B9229A7EF4
PESHA1 6FE99E6C1A34AE9F2F71AFC082856A255AF52226
PE256 6A337514E2ACAAD181813FCF27FC060843A987619B31AF09F97896960E544384

Runtime Data

Usage (stdout):


Usage: klist [[-c] [-f] [-e] [-a [-n]]] [-k [-t] [-K]] [name]
   name	 name of credentials cache or  keytab with the prefix. File-based cache or keytab's prefix is FILE:.
   -c specifies that credential cache is to be listed
   -k specifies that key tab is to be listed
   options for credentials caches:
	-f 	 shows credentials flags
	-e 	 shows the encryption type
	-a 	 shows addresses
	  -n 	   do not reverse-resolve addresses
   options for keytabs:
	-t 	 shows keytab entry timestamps
	-K 	 shows keytab entry key value
	-e 	 shows keytab entry key type

Usage: java sun.security.krb5.tools.Klist -help for help.

Loaded Modules:

Path
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\klist.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 0F8CE162B26B70AE59D17A0B2A93AB3A
  • Thumbprint: 0180ED75D6615415E4D6C6C217613B4134F5745E
  • Issuer: CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
  • Subject: CN=London Jamocha Community CIC, O=London Jamocha Community CIC, L=London, C=GB

File Metadata

  • Original Filename: klist.exe
  • Product Name: OpenJDK Platform 8
  • Company Name: AdoptOpenJDK
  • File Version: 8.0.2650.1
  • Product Version: 8.0.2650.1
  • Language: Language Neutral
  • Legal Copyright: Copyright 2020
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/68
  • VirusTotal Link: https://www.virustotal.com/gui/file/d28195ef33c3ef6dfa04eaba05864951899484bbc0c635819ba6a3ca5b8cd25f/detection/

File Similarity (ssdeep match)

File Score
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\appletviewer.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\clhsdb.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\extcheck.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\hsdb.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\idlj.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jar.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jarsigner.exe 50
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javac.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javadoc.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javah.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javap.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\java-rmi.exe 50
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jcmd.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jconsole.exe 52
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jdb.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jdeps.exe 50
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jfr.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jhat.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jinfo.exe 43
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jjs.exe 41
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jmap.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jps.exe 43
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jrunscript.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jsadebugd.exe 43
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstack.exe 41
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstat.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstatd.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\keytool.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\kinit.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\klist.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\ktab.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\native2ascii.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\orbd.exe 41
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\pack200.exe 41
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\policytool.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmic.exe 50
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmid.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmiregistry.exe 43
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\schemagen.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\serialver.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\servertool.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\tnameserv.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\wsgen.exe 49
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\wsimport.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\xjc.exe 43
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\java-rmi.exe 50
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\jjs.exe 40
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\keytool.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\kinit.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\klist.exe 47
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\ktab.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\orbd.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\pack200.exe 41
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\policytool.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\rmid.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\rmiregistry.exe 44
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\servertool.exe 46
C:\program files (x86)\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\tnameserv.exe 47
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\java-rmi.exe 50
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\jjs.exe 41
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\keytool.exe 44
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\kinit.exe 49
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\klist.exe 47
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\ktab.exe 46
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\orbd.exe 41
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\pack200.exe 41
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\policytool.exe 46
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\rmid.exe 43
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\rmiregistry.exe 44
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\servertool.exe 44
C:\program files (x86)\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\tnameserv.exe 46
C:\Program Files (x86)\GRETECH\GomPlayer\KillGom.exe 25
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jaotc.exe 49
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jar.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jarsigner.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\javac.exe 41
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\javadoc.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\javap.exe 44
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jcmd.exe 49
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jconsole.exe 43
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jdb.exe 49
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jdeprscan.exe 52
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jdeps.exe 46
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jfr.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jhsdb.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jimage.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jinfo.exe 43
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jjs.exe 32
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jlink.exe 43
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jmap.exe 44
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jmod.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jps.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jrunscript.exe 41
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jshell.exe 44
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jstack.exe 41
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jstat.exe 46
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\jstatd.exe 49
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\keytool.exe 46
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\kinit.exe 49
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\klist.exe 54
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\ktab.exe 44
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\pack200.exe 44
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\rmic.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\rmid.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\rmiregistry.exe 47
C:\program files\AdoptOpenJDK\jdk-11.0.8.10-hotspot\bin\serialver.exe 46
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\appletviewer.exe 61
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\clhsdb.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\extcheck.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\hsdb.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\idlj.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jar.exe 68
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jarsigner.exe 74
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javac.exe 63
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javadoc.exe 60
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javah.exe 61
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\javap.exe 54
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\java-rmi.exe 60
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jcmd.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jconsole.exe 50
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jdb.exe 55
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jdeps.exe 60
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jfr.exe 68
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jhat.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jinfo.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jjs.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jmap.exe 57
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jps.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jrunscript.exe 68
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jsadebugd.exe 57
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstack.exe 57
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstat.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\jstatd.exe 65
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\keytool.exe 66
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\kinit.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\klist.exe 94
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\ktab.exe 77
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\native2ascii.exe 66
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\orbd.exe 60
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\pack200.exe 77
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\policytool.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmic.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmid.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\rmiregistry.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\schemagen.exe 74
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\serialver.exe 72
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\servertool.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\tnameserv.exe 61
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\wsgen.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\wsimport.exe 74
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\bin\xjc.exe 77
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\java-rmi.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\jjs.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\keytool.exe 58
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\kinit.exe 82
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\ktab.exe 66
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\orbd.exe 61
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\pack200.exe 75
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\policytool.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\rmid.exe 69
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\rmiregistry.exe 71
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\servertool.exe 72
C:\Program Files\AdoptOpenJDK\jdk-8.0.265.01-hotspot\jre\bin\tnameserv.exe 61
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\jaotc.exe 49
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\jfr.exe 47
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\jjs.exe 35
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\jrunscript.exe 41
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\keytool.exe 44
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\kinit.exe 50
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\klist.exe 50
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\ktab.exe 44
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\pack200.exe 44
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\rmid.exe 47
C:\program files\AdoptOpenJDK\jre-11.0.8.10-hotspot\bin\rmiregistry.exe 46
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\java-rmi.exe 60
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\jjs.exe 69
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\keytool.exe 66
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\kinit.exe 80
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\klist.exe 96
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\ktab.exe 68
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\orbd.exe 58
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\pack200.exe 75
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\policytool.exe 61
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\rmid.exe 69
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\rmiregistry.exe 58
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\servertool.exe 72
C:\Program Files\AdoptOpenJDK\jre-8.0.265.01-hotspot\bin\tnameserv.exe 61

Possible Misuse

The following table contains possible examples of klist.exe being misused. While klist.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
atomic-red-team T1558.001.md klist purge MIT License. © 2018 Red Canary
atomic-red-team T1558.001.md klist MIT License. © 2018 Red Canary
atomic-red-team T1558.003.md klist purge MIT License. © 2018 Red Canary

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


klist

Displays a list of currently cached Kerberos tickets.

[!IMPORTANT] You must be at least a Domain Admin, or equivalent, to run all the parameters of this command.

Syntax

klist [-lh <logonID.highpart>] [-li <logonID.lowpart>] tickets | tgt | purge | sessions | kcd_cache | get | add_bind | query_bind | purge_bind

Parameters

Parameter Description
-lh Denotes the high part of the user’s locally unique identifier (LUID), expressed in hexadecimal. If neither –lh nor –li are present, the command defaults to the LUID of the user who is currently signed in.
-li Denotes the low part of the user’s locally unique identifier (LUID), expressed in hexadecimal. If neither –lh nor –li are present, the command defaults to the LUID of the user who is currently signed in.
tickets Lists the currently cached ticket-granting-tickets (TGTs), and service tickets of the specified logon session. This is the default option.
tgt Displays the initial Kerberos TGT.
purge Allows you to delete all the tickets of the specified logon session.
sessions Displays a list of logon sessions on this computer.
kcd_cache Displays the Kerberos constrained delegation cache information.
get Allows you to request a ticket to the target computer specified by the service principal name (SPN).
add_bind Allows you to specify a preferred domain controller for Kerberos authentication.
query_bind Displays a list of cached preferred domain controllers for each domain that Kerberos has contacted.
purge_bind Removes the cached preferred domain controllers for the domains specified.
kdcoptions Displays the Key Distribution Center (KDC) options specified in RFC 4120.
/? Displays Help for this command.
Remarks
  • If no parameters are provided, klist retrieves all the tickets for the currently logged on user.

  • The parameters display the following information:

    • tickets - Lists the currently cached tickets of services that you have authenticated to since logon. Displays the following attributes of all cached tickets:

      • LogonID: The LUID.

      • Client: The concatenation of the client name and the domain name of the client.

      • Server: The concatenation of the service name and the domain name of the service.

      • KerbTicket Encryption Type: The encryption type that is used to encrypt the Kerberos ticket.

      • Ticket Flags: The Kerberos ticket flags.

      • Start Time: The time from which the ticket is valid.

      • End Time: The time the ticket becomes no longer valid. When a ticket is past this time, it can no longer be used to authenticate to a service or be used for renewal.

      • Renew Time: The time that a new initial authentication is required.

      • Session Key Type: The encryption algorithm that is used for the session key.

    • tgt - Lists the initial Kerberos TGT and the following attributes of the currently cached ticket:

      • LogonID: Identified in hexadecimal.

      • ServiceName: krbtgt

      • TargetName <SPN>: krbtgt

      • DomainName: Name of the domain that issues the TGT.

      • TargetDomainName: Domain that the TGT is issued to.

      • AltTargetDomainName: Domain that the TGT is issued to.

      • Ticket Flags: Address and target actions and type.

      • Session Key: Key length and encryption algorithm.

      • StartTime: Local computer time that the ticket was requested.

      • EndTime: Time the ticket becomes no longer valid. When a ticket is past this time, it can no longer be used to authenticate to a service.

      • RenewUntil: Deadline for ticket renewal.

      • TimeSkew: Time difference with the Key Distribution Center (KDC).

      • EncodedTicket: Encoded ticket.

    • purge - Allows you to delete a specific ticket. Purging tickets destroys all tickets that you have cached, so use this attribute with caution. It might stop you from being able to authenticate to resources. If this happens, you’ll have to log off and log on again.

      • LogonID: Identified in hexadecimal.
    • sessions - Allows you to list and display the information for all logon sessions on this computer.

      • LogonID: If specified, displays the logon session only by the given value. If not specified, displays all the logon sessions on this computer.
    • kcd_cache - Allows you to display the Kerberos constrained delegation cache information.

      • LogonID: If specified, displays the cache information for the logon session by the given value. If not specified, displays the cache information for the current user’s logon session.
    • get - Allows you to request a ticket to the target that is specified by the SPN.

      • LogonID: If specified, requests a ticket by using the logon session by the given value. If not specified, requests a ticket by using the current user’s logon session.

      • kdcoptions: Requests a ticket with the given KDC options

    • add_bind - Allows you to specify a preferred domain controller for Kerberos authentication.

    • query_bind - Allows you to display cached, preferred domain controllers for the domains.

    • purge_bind - Allows you to remove cached, preferred domain controllers for the domains.

    • kdcoptions - For the current list of options and their explanations, see RFC 4120.

Examples

To query the Kerberos ticket cache to determine if any tickets are missing, if the target server or account is in error, or if the encryption type is not supported due to an Event ID 27 error, type:

klist
klist –li 0x3e7

To learn about the specifics of each ticket-granting-ticket that is cached on the computer for a logon session, type:

klist tgt

To purge the Kerberos ticket cache, log off, and then log back on, type:

klist purge
klist purge –li 0x3e7

To diagnose a logon session and to locate a logonID for a user or a service, type:

klist sessions

To diagnose Kerberos constrained delegation failure, and to find the last error that was encountered, type:

klist kcd_cache

To diagnose if a user or a service can get a ticket to a server, or to request a ticket for a specific SPN, type:

klist get host/%computername%

To diagnose replication issues across domain controllers, you typically need the client computer to target a specific domain controller. To target the client computer to the specific domain controller, type:

klist add_bind CONTOSO KDC.CONTOSO.COM
klist add_bind CONTOSO.COM KDC.CONTOSO.COM

To query which domain controllers were recently contacted by this computer, type:

klist query_bind

To rediscover domain controllers, or to flush the cache before creating new domain controller bindings with klist add_bind, type:

klist purge_bind

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.