aadauthhelper.dll

  • File Path: C:\Windows\SysWOW64\aadauthhelper.dll
  • Description: Microsoft AAD Auth Helper

Hashes

Type Hash
MD5 CDBCE311FCCEAB0CA601875946D15DAE
SHA1 FA62A3E5FCDDFBB9FD9743E509A7CEDD09DE6950
SHA256 934A77F04BDD045DDE08309F04095A7FEB274ABB8CEA67139EC929EBD499F157
SHA384 F952D0CAB3D97A870366C4C4D100907D93D475398FEE2F3ECE9E95F3631C9F67A1E482AD3C48D362F2F6ADD6A752D297
SHA512 5443AD7C30FB8810BBEE6ACFE544EA7E900424F5B322FE22AD0E9AE8F0B876874C7BA8991B3950A34B86212A8680344F88DA97D993AD82488015A11FE0CFEC5B
SSDEEP 6144:j+AFAjMecsHnlNj8idG/BwRlMJ1GlOsO3+N9xuTDVhllRhalnKB1OqkitdTAaV8L:iAFyMevNjeVu38tH
IMP 6C5E440F644F9B80723193A73775410E
PESHA1 7CF3DF4720086A3C1859CC868003ACE2508711A7
PE256 81A281E81400B024973490DBF0BA58BA31EE200B8CA396A3C74F076B74909824

DLL Exports:

Function Name Ordinal Type
GetSerializedAuthBuffer 7 Exported Function
GetFidoAuthenticationSessionStatus 6 Exported Function
StartChangingFidoPin 8 Exported Function
StartSigningFidoClientData 10 Exported Function
StartFidoAuthenticationSession 9 Exported Function
CreateAuthBuffer 2 Exported Function
CloseFidoAuthenticationSession 1 Exported Function
CreateResourceAccountAuthBuffer 3 Exported Function
CreateTokenAuthBufferEx 5 Exported Function
CreateTokenAuthBuffer 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AadAuthHelper.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/934a77f04bdd045dde08309f04095a7feb274abb8cea67139ec929ebd499f157/detection/

MIT License. Copyright (c) 2020-2021 Strontic.