decode_supplementalCredentials: struct decode_supplementalCredentials in: struct decode_supplementalCredentials blob: struct supplementalCredentialsBlob unknown1 : 0x00000000 (0) __ndr_size : 0x00000310 (784) unknown2 : 0x00000000 (0) sub: struct supplementalCredentialsSubBlob prefix : ' P' num_packages : 0x0003 (3) packages: ARRAY(3) packages: struct supplementalCredentialsPackage name_len : 0x0010 (16) data_len : 0x0048 (72) unknown1 : 0x0002 (2) name : 'Packages' data : '4b00650072006200650072006f007300000043004c004500410052005400450058005400' packages: struct supplementalCredentialsPackage name_len : 0x0020 (32) data_len : 0x01d4 (468) unknown1 : 0x0001 (1) name : 'Primary:Kerberos' data : '0300000002000200420042008800000000000000000000000300000008000000ca00000000000000000000000100000008000000d200000000000000000000000300000008000000da00000000000000000000000100000008000000e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000570032004b002d004d0049005800450044002e0056004d004e004500540039002e0056004d002e004200410053004500750073006500720070006c00610069006e0051016bc8e6768ae551016bc8e6768ae56dceef5bcd0ed6a46dceef5bcd0ed6a4' packages: struct supplementalCredentialsPackage name_len : 0x0022 (34) data_len : 0x002c (44) unknown1 : 0x0001 (1) name : 'Primary:CLEARTEXT' data : '54006500730074005000770064003200300030003700' unknown3 : 0x00 (0) pull returned NT_STATUS_OK dump OK