Lucene search

K
mskbMicrosoftKB3198510
HistoryNov 08, 2016 - 8:00 a.m.

MS16-137: Description of the security update for Windows authentication methods: November 8, 2016

2016-11-0808:00:00
Microsoft
support.microsoft.com
28

7.8 High

AI Score

Confidence

High

0.908 High

EPSS

Percentile

98.9%

MS16-137: Description of the security update for Windows authentication methods: November 8, 2016

Summary

This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to authenticate to the targeted domain-joined system by using valid user credentials. An attacker who successfully exploited this vulnerability could elevate their permissions from unprivileged user account to administrator. The attacker could then create accounts, install programs, or view, change, or delete data. The attacker could then try to elevate privilege locally by executing a specially crafted application that could manipulate NTLM password change requests.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-137.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you require before you install this update. For more information, see Add language packs to Windows.

Known issues in this security update

User-initiated and programmatic password changes to domain user accounts may fail if the same user account is logged on to more than one computer at the same time and is used to make password changes to the same user account from two or more computers. Such password changes fail only if NTLM is used.

Specifically, the following errors are returned:

Hexadecimal Decimal Error ID Error description
0xc0000388 1073740920 STATUS_DOWNGRADE_DETECTED The system detected a possible attempt to compromise security. Please make sure that you can contact the server that authenticated you.
0x4f1 1265 ERROR_DOWNGRADE_DETECTED The system detected a possible attempt to compromise security. Please make sure that you can contact the server that authenticated you.

Example scenario

  1. A domain user logs on to computer A and computer B.
  2. The user changes their domain password from computer A without logging off computer B.
  3. The domain user tries to change their password from computer B.
    In this scenario, the password change attempt from computer B may fail with the following error message:

The system detected a possible attempt to compromise security. Please make sure that you can contact the server that authenticated you.

If the password change is performed programmatically, you may receive either an ERROR_DOWNGRADE_DETECTED or a STATUS_DOWNGRADE_DETECTED error status. This behavior occurs when the NTLM authentication package is used for the password change for domain accounts if Kerberos fails to find a domain controller and then falls back to NTLM. In this scenario, NTLM fallback was disabled by MS16-101 and was re-enabled by MS16-137-related updates.

Calling NTLM directly also causes password changes to fail in this scenario. To resolve all domain password change issues, make sure that Kerberos is functional, and also make sure that Kerberos is used for password changes to domain accounts. For more information, see the “Known issue 1” section in KB 3167679.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.

Note For Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

More Information

__

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB3198510-ia64.msu EA36EA5822944918E9C4C456CAD5CA9E8D3CC62C 98D8D328E49BEEC6818F459429AD8977F278E44EE799038CAAF5EBC5F2EA6109
Windows6.0-KB3198510-x64.msu BBB5BA6DB6EF138C633614FB6C9B7ED5C5662287 2C1A9B41D95ACAB92AAE8B33D5346B58AB0937EE5EC626DA3F1E14E0535141BD
Windows6.0-KB3198510-x86.msu E4DB0F0831CA873DDDDA03AE761FEC4550F5D2BA 1D9E5D1AD53F06BB2A21401D5D48982F3BCDC429B59E67B735A59E643980E580

__

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.Windows Vista and Windows Server 2008 file informationNotes: The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported ia64-based versionsFile name File version File size Date Time Platform
Advapi32.dll.mui 6.0.6002.19598 373,760 06-Feb-2016 03:25 Not applicable
Advapi32.dll.mui 6.0.6002.19598 255,488 06-Feb-2016 01:48 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,536 06-Feb-2016 03:04 Not applicable
Advapi32.dll.mui 6.0.6002.19598 352,768 06-Feb-2016 04:03 Not applicable
Advapi32.dll.mui 6.0.6002.19598 349,696 06-Feb-2016 03:43 Not applicable
Advapi32.dll.mui 6.0.6002.19598 346,624 06-Feb-2016 04:20 Not applicable
Advapi32.dll.mui 6.0.6002.19598 338,944 06-Feb-2016 03:21 Not applicable
Advapi32.dll.mui 6.0.6002.24025 373,760 08-Oct-2016 16:38 Not applicable
Advapi32.dll.mui 6.0.6002.24025 255,488 08-Oct-2016 15:20 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,536 08-Oct-2016 16:29 Not applicable
Advapi32.dll.mui 6.0.6002.24025 352,768 08-Oct-2016 16:30 Not applicable
Advapi32.dll.mui 6.0.6002.24025 349,696 08-Oct-2016 16:39 Not applicable
Advapi32.dll.mui 6.0.6002.24025 346,624 08-Oct-2016 16:32 Not applicable
Advapi32.dll.mui 6.0.6002.24025 338,944 08-Oct-2016 16:36 Not applicable
Advapi32.dll 6.0.6002.19598 1,964,544 06-Feb-2016 01:39 IA-64
Advapi32.dll 6.0.6002.24025 1,963,520 08-Oct-2016 15:11 IA-64
Bcrypt.dll 6.0.6002.19677 583,680 10-Aug-2016 13:07 IA-64
Bcrypt.dll 6.0.6002.24004 584,192 10-Aug-2016 13:07 IA-64
Lsasrv.dll.mui 6.0.6002.24025 59,904 08-Oct-2016 16:33 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:35 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 49,664 08-Oct-2016 15:15 Not applicable
Lsass.exe.mui 6.0.6002.24025 8,192 08-Oct-2016 15:17 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 59,392 08-Oct-2016 16:23 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:25 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 30,208 08-Oct-2016 16:21 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:22 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 29,696 08-Oct-2016 16:35 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:37 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 20,992 08-Oct-2016 16:26 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:28 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 21,504 08-Oct-2016 16:31 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:33 Not applicable
Ksecdd.sys 6.0.6002.19655 1,030,376 11-May-2016 13:10 IA-64
Lsasrv.dll 6.0.6002.19701 3,260,928 08-Oct-2016 15:46 IA-64
Lsasrv.mof Not applicable 13,780 03-Apr-2009 21:34 Not applicable
Lsass.exe 6.0.6002.18541 17,920 16-Nov-2011 14:10 IA-64
Secur32.dll 6.0.6002.19623 202,752 18-Mar-2016 16:34 IA-64
Ksecdd.sys 6.0.6002.23970 1,030,888 11-May-2016 13:08 IA-64
Lsasrv.dll 6.0.6002.24025 3,265,536 08-Oct-2016 15:12 IA-64
Lsasrv.mof Not applicable 13,780 07-Mar-2016 23:37 Not applicable
Lsass.exe 6.0.6002.24025 17,920 08-Oct-2016 14:28 IA-64
Secur32.dll 6.0.6002.24025 202,752 08-Oct-2016 15:13 IA-64
Ncrypt.dll 6.0.6002.19678 524,800 10-Aug-2016 16:08 IA-64
Ncrypt.dll 6.0.6002.24025 524,800 08-Oct-2016 15:12 IA-64
Rpcrt4.dll 6.0.6002.19598 3,298,816 06-Feb-2016 01:41 IA-64
Rpcrt4.dll 6.0.6002.24025 3,289,088 08-Oct-2016 15:13 IA-64
Wdigest.dll 6.0.6002.19659 482,816 14-May-2016 15:31 IA-64
Wdigest.dll 6.0.6002.24025 483,328 08-Oct-2016 15:13 IA-64
Msv1_0.dll 6.0.6002.19701 572,416 08-Oct-2016 15:46 IA-64
Msv1_0.dll 6.0.6002.24025 571,904 08-Oct-2016 15:12 IA-64
Schannel.dll 6.0.6002.19678 819,200 10-Aug-2016 16:09 IA-64
Schannel.dll 6.0.6002.24025 821,248 08-Oct-2016 15:13 IA-64
Mrxsmb10.sys 6.0.6002.19431 669,184 27-Jun-2015 14:19 IA-64
Mrxsmb10.sys 6.0.6002.24025 670,208 08-Oct-2016 14:18 IA-64
Mrxsmb20.sys 6.0.6002.19431 270,336 27-Jun-2015 14:19 IA-64
Mrxsmb20.sys 6.0.6002.24025 272,384 08-Oct-2016 14:18 IA-64
Mrxsmb.sys 6.0.6002.19279 323,072 09-Jan-2015 00:12 IA-64
Mrxsmb.sys 6.0.6002.24025 325,632 08-Oct-2016 14:18 IA-64
Bcrypt.dll 6.0.6002.19677 275,968 10-Aug-2016 13:14 x86
Bcrypt.dll 6.0.6002.24004 275,968 08-Oct-2016 13:13 x86
Lsasrv.mof Not applicable 13,780 08-Mar-2016 00:42 Not applicable
Secur32.dll 6.0.6002.19701 77,312 08-Oct-2016 15:52 x86
Lsasrv.mof Not applicable 13,780 07-Mar-2016 23:37 Not applicable
Secur32.dll 6.0.6002.24025 77,312 08-Oct-2016 15:18 x86
Rpcrt4.dll 6.0.6002.19598 679,424 06-Feb-2016 02:12 x86
Rpcrt4.dll 6.0.6002.24025 678,912 08-Oct-2016 15:18 x86
Wdigest.dll 6.0.6002.19659 175,616 14-May-2016 15:41 x86
Wdigest.dll 6.0.6002.24025 175,616 08-Oct-2016 15:18 x86
Msv1_0.dll 6.0.6002.19701 219,136 08-Oct-2016 15:51 x86
Msv1_0.dll 6.0.6002.24025 219,136 08-Oct-2016 15:17 x86
Schannel.dll 6.0.6002.19678 284,160 10-Aug-2016 15:44 x86
Schannel.dll 6.0.6002.24025 284,672 08-Oct-2016 15:18 x86
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:17 Not applicable
Advapi32.dll.mui 6.0.6002.19598 266,240 06-Feb-2016 02:20 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 02:57 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 03:28 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 04:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 356,352 06-Feb-2016 03:48 Not applicable
Advapi32.dll.mui 6.0.6002.19598 348,160 06-Feb-2016 04:33 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 266,240 08-Oct-2016 15:29 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:19 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 356,352 08-Oct-2016 16:26 Not applicable
Advapi32.dll.mui 6.0.6002.24025 348,160 08-Oct-2016 16:20 Not applicable
Advapi32.dll 6.0.6002.19598 802,304 06-Feb-2016 02:11 x86
Advapi32.dll 6.0.6002.24025 802,816 08-Oct-2016 15:15 x86
Ncrypt.dll 6.0.6002.19678 206,336 10-Aug-2016 15:43 x86
Ncrypt.dll 6.0.6002.24025 205,312 08-Oct-2016 15:17 x86
For all supported x64-based versionsFile name File version File size Date Time Platform
Advapi32.dll.mui 6.0.6002.19598 371,200 06-Feb-2016 04:25 Not applicable
Advapi32.dll.mui 6.0.6002.19598 379,392 06-Feb-2016 04:39 Not applicable
Advapi32.dll.mui 6.0.6002.19598 376,832 06-Feb-2016 04:22 Not applicable
Advapi32.dll.mui 6.0.6002.19598 373,760 06-Feb-2016 04:43 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 04:44 Not applicable
Advapi32.dll.mui 6.0.6002.19598 255,488 06-Feb-2016 02:09 Not applicable
Advapi32.dll.mui 6.0.6002.19598 381,952 06-Feb-2016 04:02 Not applicable
Advapi32.dll.mui 6.0.6002.19598 375,808 06-Feb-2016 03:20 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,536 06-Feb-2016 03:12 Not applicable
Advapi32.dll.mui 6.0.6002.19598 366,080 06-Feb-2016 03:13 Not applicable
Advapi32.dll.mui 6.0.6002.19598 383,488 06-Feb-2016 05:05 Not applicable
Advapi32.dll.mui 6.0.6002.19598 380,928 06-Feb-2016 03:03 Not applicable
Advapi32.dll.mui 6.0.6002.19598 352,768 06-Feb-2016 03:55 Not applicable
Advapi32.dll.mui 6.0.6002.19598 349,696 06-Feb-2016 05:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 374,272 06-Feb-2016 03:03 Not applicable
Advapi32.dll.mui 6.0.6002.19598 380,416 06-Feb-2016 04:29 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,536 06-Feb-2016 03:07 Not applicable
Advapi32.dll.mui 6.0.6002.19598 379,392 06-Feb-2016 04:33 Not applicable
Advapi32.dll.mui 6.0.6002.19598 379,904 06-Feb-2016 04:41 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,536 06-Feb-2016 03:18 Not applicable
Advapi32.dll.mui 6.0.6002.19598 375,296 06-Feb-2016 03:14 Not applicable
Advapi32.dll.mui 6.0.6002.19598 375,296 06-Feb-2016 04:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 346,624 06-Feb-2016 03:37 Not applicable
Advapi32.dll.mui 6.0.6002.19598 338,944 06-Feb-2016 04:19 Not applicable
Advapi32.dll.mui 6.0.6002.24025 371,200 08-Oct-2016 16:35 Not applicable
Advapi32.dll.mui 6.0.6002.24025 379,392 08-Oct-2016 16:39 Not applicable
Advapi32.dll.mui 6.0.6002.24025 376,832 08-Oct-2016 16:45 Not applicable
Advapi32.dll.mui 6.0.6002.24025 373,760 08-Oct-2016 16:40 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:35 Not applicable
Advapi32.dll.mui 6.0.6002.24025 255,488 08-Oct-2016 15:47 Not applicable
Advapi32.dll.mui 6.0.6002.24025 381,952 08-Oct-2016 16:42 Not applicable
Advapi32.dll.mui 6.0.6002.24025 375,808 08-Oct-2016 16:44 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,536 08-Oct-2016 16:36 Not applicable
Advapi32.dll.mui 6.0.6002.24025 366,080 08-Oct-2016 16:50 Not applicable
Advapi32.dll.mui 6.0.6002.24025 383,488 08-Oct-2016 16:42 Not applicable
Advapi32.dll.mui 6.0.6002.24025 380,928 08-Oct-2016 16:43 Not applicable
Advapi32.dll.mui 6.0.6002.24025 352,768 08-Oct-2016 16:45 Not applicable
Advapi32.dll.mui 6.0.6002.24025 349,696 08-Oct-2016 16:49 Not applicable
Advapi32.dll.mui 6.0.6002.24025 374,272 08-Oct-2016 16:48 Not applicable
Advapi32.dll.mui 6.0.6002.24025 380,416 08-Oct-2016 16:42 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,536 08-Oct-2016 16:44 Not applicable
Advapi32.dll.mui 6.0.6002.24025 379,392 08-Oct-2016 16:38 Not applicable
Advapi32.dll.mui 6.0.6002.24025 379,904 08-Oct-2016 16:38 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,536 08-Oct-2016 16:38 Not applicable
Advapi32.dll.mui 6.0.6002.24025 375,296 08-Oct-2016 16:40 Not applicable
Advapi32.dll.mui 6.0.6002.24025 375,296 08-Oct-2016 16:41 Not applicable
Advapi32.dll.mui 6.0.6002.24025 346,624 08-Oct-2016 16:42 Not applicable
Advapi32.dll.mui 6.0.6002.24025 338,944 08-Oct-2016 16:42 Not applicable
Advapi32.dll 6.0.6002.19598 1,067,008 06-Feb-2016 01:59 x64
Advapi32.dll 6.0.6002.24025 1,067,520 08-Oct-2016 15:38 x64
Bcrypt.dll 6.0.6002.19677 306,688 10-Aug-2016 13:07 x64
Bcrypt.dll 6.0.6002.24004 306,688 10-Aug-2016 13:08 x64
Lsasrv.dll.mui 6.0.6002.24025 44,544 08-Oct-2016 16:23 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:24 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 50,688 08-Oct-2016 16:24 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:26 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 52,224 08-Oct-2016 16:32 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:34 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 59,904 08-Oct-2016 16:25 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:27 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 60,928 08-Oct-2016 16:23 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:24 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 49,664 08-Oct-2016 15:39 Not applicable
Lsass.exe.mui 6.0.6002.24025 8,192 08-Oct-2016 15:40 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 55,808 08-Oct-2016 16:27 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:28 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 51,200 08-Oct-2016 16:31 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:33 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 59,392 08-Oct-2016 16:23 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:25 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 41,984 08-Oct-2016 16:38 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:39 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 55,808 08-Oct-2016 16:26 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:28 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 57,856 08-Oct-2016 16:25 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:26 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 30,208 08-Oct-2016 16:31 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:33 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 29,696 08-Oct-2016 16:37 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:38 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 50,688 08-Oct-2016 16:32 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:35 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 56,320 08-Oct-2016 16:25 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:27 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 54,784 08-Oct-2016 16:27 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:29 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 53,760 08-Oct-2016 16:24 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:27 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 56,320 08-Oct-2016 16:24 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:27 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 53,760 08-Oct-2016 16:25 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:27 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 51,712 08-Oct-2016 16:27 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:29 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 50,176 08-Oct-2016 16:28 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:29 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 20,992 08-Oct-2016 16:32 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:33 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 21,504 08-Oct-2016 16:31 Not applicable
Lsass.exe.mui 6.0.6002.24025 10,752 08-Oct-2016 16:32 Not applicable
Ksecdd.sys 6.0.6002.19655 516,328 11-May-2016 13:10 x64
Lsasrv.dll 6.0.6002.19701 1,689,600 08-Oct-2016 16:07 x64
Lsasrv.mof Not applicable 13,780 03-Apr-2009 21:33 Not applicable
Lsass.exe 6.0.6002.18541 11,264 16-Nov-2011 14:34 x64
Secur32.dll 6.0.6002.19623 94,720 18-Mar-2016 18:15 x64
Ksecdd.sys 6.0.6002.23970 517,352 11-May-2016 13:08 x64
Lsasrv.dll 6.0.6002.24025 1,693,184 08-Oct-2016 15:38 x64
Lsasrv.mof Not applicable 13,780 07-Mar-2016 23:37 Not applicable
Lsass.exe 6.0.6002.24025 11,264 08-Oct-2016 14:49 x64
Secur32.dll 6.0.6002.24025 94,720 08-Oct-2016 15:39 x64
Ncrypt.dll 6.0.6002.19678 258,048 10-Aug-2016 16:12 x64
Ncrypt.dll 6.0.6002.24025 258,048 08-Oct-2016 15:39 x64
Rpcrt4.dll 6.0.6002.19598 1,304,576 06-Feb-2016 02:01 x64
Rpcrt4.dll 6.0.6002.24025 1,308,160 08-Oct-2016 15:39 x64
Wdigest.dll 6.0.6002.19659 205,824 14-May-2016 15:54 x64
Wdigest.dll 6.0.6002.24025 205,824 08-Oct-2016 15:40 x64
Msv1_0.dll 6.0.6002.19701 270,336 08-Oct-2016 16:08 x64
Msv1_0.dll 6.0.6002.24025 270,336 08-Oct-2016 15:39 x64
Schannel.dll 6.0.6002.19678 353,280 10-Aug-2016 16:12 x64
Schannel.dll 6.0.6002.24025 354,304 08-Oct-2016 15:39 x64
Mrxsmb10.sys 6.0.6002.19431 278,016 27-Jun-2015 14:30 x64
Mrxsmb10.sys 6.0.6002.24025 278,528 08-Oct-2016 14:40 x64
Mrxsmb20.sys 6.0.6002.19431 109,056 27-Jun-2015 14:30 x64
Mrxsmb20.sys 6.0.6002.24025 110,080 08-Oct-2016 14:40 x64
Mrxsmb.sys 6.0.6002.19279 136,192 09-Jan-2015 00:28 x64
Mrxsmb.sys 6.0.6002.24025 137,216 08-Oct-2016 14:39 x64
Bcrypt.dll 6.0.6002.19677 275,968 10-Aug-2016 13:14 x86
Bcrypt.dll 6.0.6002.24004 275,968 08-Oct-2016 13:13 x86
Lsasrv.mof Not applicable 13,780 08-Mar-2016 00:42 Not applicable
Secur32.dll 6.0.6002.19701 77,312 08-Oct-2016 15:52 x86
Lsasrv.mof Not applicable 13,780 07-Mar-2016 23:37 Not applicable
Secur32.dll 6.0.6002.24025 77,312 08-Oct-2016 15:18 x86
Rpcrt4.dll 6.0.6002.19598 679,424 06-Feb-2016 02:12 x86
Rpcrt4.dll 6.0.6002.24025 678,912 08-Oct-2016 15:18 x86
Wdigest.dll 6.0.6002.19659 175,616 14-May-2016 15:41 x86
Wdigest.dll 6.0.6002.24025 175,616 08-Oct-2016 15:18 x86
Msv1_0.dll 6.0.6002.19701 219,136 08-Oct-2016 15:51 x86
Msv1_0.dll 6.0.6002.24025 219,136 08-Oct-2016 15:17 x86
Schannel.dll 6.0.6002.19678 284,160 10-Aug-2016 15:44 x86
Schannel.dll 6.0.6002.24025 284,672 08-Oct-2016 15:18 x86
Advapi32.dll.mui 6.0.6002.19598 380,928 06-Feb-2016 02:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:12 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:17 Not applicable
Advapi32.dll.mui 6.0.6002.19598 401,408 06-Feb-2016 04:09 Not applicable
Advapi32.dll.mui 6.0.6002.19598 266,240 06-Feb-2016 02:20 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:09 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:03 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 02:57 Not applicable
Advapi32.dll.mui 6.0.6002.19598 376,832 06-Feb-2016 04:06 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:59 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 03:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 03:28 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 04:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 02:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 03:06 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:04 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:14 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:37 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 04:58 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 03:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 03:11 Not applicable
Advapi32.dll.mui 6.0.6002.19598 356,352 06-Feb-2016 03:48 Not applicable
Advapi32.dll.mui 6.0.6002.19598 348,160 06-Feb-2016 04:33 Not applicable
Advapi32.dll.mui 6.0.6002.24025 380,928 08-Oct-2016 16:15 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 401,408 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 266,240 08-Oct-2016 15:29 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 376,832 08-Oct-2016 16:13 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:19 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:21 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:30 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:31 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:31 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 356,352 08-Oct-2016 16:26 Not applicable
Advapi32.dll.mui 6.0.6002.24025 348,160 08-Oct-2016 16:20 Not applicable
Advapi32.dll 6.0.6002.19598 802,304 06-Feb-2016 02:11 x86
Advapi32.dll 6.0.6002.24025 802,816 08-Oct-2016 15:15 x86
Ncrypt.dll 6.0.6002.19678 206,336 10-Aug-2016 15:43 x86
Ncrypt.dll 6.0.6002.24025 205,312 08-Oct-2016 15:17 x86
For all supported x86-based versionsFile name File version File size Date Time Platform
Advapi32.dll.mui 6.0.6002.19598 380,928 06-Feb-2016 02:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:12 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:17 Not applicable
Advapi32.dll.mui 6.0.6002.19598 401,408 06-Feb-2016 04:09 Not applicable
Advapi32.dll.mui 6.0.6002.19598 266,240 06-Feb-2016 02:20 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:09 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 04:03 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 02:57 Not applicable
Advapi32.dll.mui 6.0.6002.19598 376,832 06-Feb-2016 04:06 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:59 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 03:00 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 03:28 Not applicable
Advapi32.dll.mui 6.0.6002.19598 360,448 06-Feb-2016 04:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 02:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 03:06 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 03:04 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:14 Not applicable
Advapi32.dll.mui 6.0.6002.19598 389,120 06-Feb-2016 04:37 Not applicable
Advapi32.dll.mui 6.0.6002.19598 393,216 06-Feb-2016 04:58 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 03:53 Not applicable
Advapi32.dll.mui 6.0.6002.19598 385,024 06-Feb-2016 03:11 Not applicable
Advapi32.dll.mui 6.0.6002.19598 356,352 06-Feb-2016 03:48 Not applicable
Advapi32.dll.mui 6.0.6002.19598 348,160 06-Feb-2016 04:33 Not applicable
Advapi32.dll.mui 6.0.6002.24025 380,928 08-Oct-2016 16:15 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 401,408 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 266,240 08-Oct-2016 15:29 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 376,832 08-Oct-2016 16:13 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:16 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:19 Not applicable
Advapi32.dll.mui 6.0.6002.24025 360,448 08-Oct-2016 16:24 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:21 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:22 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:30 Not applicable
Advapi32.dll.mui 6.0.6002.24025 389,120 08-Oct-2016 16:31 Not applicable
Advapi32.dll.mui 6.0.6002.24025 393,216 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:31 Not applicable
Advapi32.dll.mui 6.0.6002.24025 385,024 08-Oct-2016 16:23 Not applicable
Advapi32.dll.mui 6.0.6002.24025 356,352 08-Oct-2016 16:26 Not applicable
Advapi32.dll.mui 6.0.6002.24025 348,160 08-Oct-2016 16:20 Not applicable
Advapi32.dll 6.0.6002.19598 802,304 06-Feb-2016 02:11 x86
Advapi32.dll 6.0.6002.24025 802,816 08-Oct-2016 15:15 x86
Bcrypt.dll 6.0.6002.19677 274,944 10-Aug-2016 13:13 x86
Bcrypt.dll 6.0.6002.24004 274,944 08-Oct-2016 13:13 x86
Lsasrv.dll.mui 6.0.6002.24025 53,248 08-Oct-2016 16:02 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:11 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:13 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:09 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:10 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 69,632 08-Oct-2016 16:12 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:13 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 69,632 08-Oct-2016 16:11 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,776 08-Oct-2016 16:12 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 57,344 08-Oct-2016 15:20 Not applicable
Lsass.exe.mui 6.0.6002.24025 8,704 08-Oct-2016 15:21 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:01 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:02 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 69,632 08-Oct-2016 16:01 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 53,248 08-Oct-2016 16:00 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:02 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:02 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:01 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:02 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 40,960 08-Oct-2016 16:06 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:08 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 40,960 08-Oct-2016 16:13 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:15 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:08 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:10 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:08 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:10 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:08 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:10 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:12 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:14 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 65,536 08-Oct-2016 16:15 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:17 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:01 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,776 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:14 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:16 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 61,440 08-Oct-2016 16:02 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:03 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 28,672 08-Oct-2016 16:11 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:13 Not applicable
Lsasrv.dll.mui 6.0.6002.24025 32,768 08-Oct-2016 16:08 Not applicable
Lsass.exe.mui 6.0.6002.24025 11,264 08-Oct-2016 16:10 Not applicable
Ksecdd.sys 6.0.6002.19655 440,552 11-May-2016 13:09 x86
Lsasrv.dll 6.0.6002.19701 1,259,008 08-Oct-2016 15:50 x86
Lsasrv.mof Not applicable 13,780 03-Apr-2009 21:30 Not applicable
Lsass.exe 6.0.6002.18541 9,728 16-Nov-2011 14:12 x86
Secur32.dll 6.0.6002.19623 72,704 18-Mar-2016 17:10 x86
Ksecdd.sys 6.0.6002.23970 440,552 11-May-2016 13:07 x86
Lsasrv.dll 6.0.6002.24025 1,262,592 08-Oct-2016 15:17 x86
Lsasrv.mof Not applicable 13,780 07-Mar-2016 23:37 Not applicable
Lsass.exe 6.0.6002.24025 9,728 08-Oct-2016 14:24 x86
Secur32.dll 6.0.6002.24025 72,704 08-Oct-2016 15:18 x86
Ncrypt.dll 6.0.6002.19678 206,336 10-Aug-2016 15:43 x86
Ncrypt.dll 6.0.6002.24025 205,312 08-Oct-2016 15:17 x86
Rpcrt4.dll 6.0.6002.19598 783,872 06-Feb-2016 02:12 x86
Rpcrt4.dll 6.0.6002.24025 783,872 08-Oct-2016 15:18 x86
Wdigest.dll 6.0.6002.19659 175,616 14-May-2016 15:41 x86
Wdigest.dll 6.0.6002.24025 175,616 08-Oct-2016 15:18 x86
Msv1_0.dll 6.0.6002.19701 219,136 08-Oct-2016 15:51 x86
Msv1_0.dll 6.0.6002.24025 219,136 08-Oct-2016 15:17 x86
Schannel.dll 6.0.6002.19678 284,160 10-Aug-2016 15:44 x86
Schannel.dll 6.0.6002.24025 284,672 08-Oct-2016 15:18 x86
Mrxsmb10.sys 6.0.6002.19431 217,088 27-Jun-2015 14:21 x86
Mrxsmb10.sys 6.0.6002.24025 217,088 08-Oct-2016 14:18 x86
Mrxsmb20.sys 6.0.6002.19431 81,408 27-Jun-2015 14:21 x86
Mrxsmb20.sys 6.0.6002.24025 82,432 08-Oct-2016 14:17 x86
Mrxsmb.sys 6.0.6002.19279 107,008 09-Jan-2015 00:17 x86
Mrxsmb.sys 6.0.6002.24025 107,520 08-Oct-2016 14:17 x86

7.8 High

AI Score

Confidence

High

0.908 High

EPSS

Percentile

98.9%