¿Para qué sirve la dll aadtb.dll?

AAD Token Broker Helper Library

Dependencias de la dll aadtb.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\aadtb.dll

File Type: DLL

  Image has the following dependencies:

    cryptngc.dll
    certenroll.dll
    dsreg.dll
    OLEAUT32.dll
    CRYPT32.dll
    ncrypt.dll
    ntdll.dll
    GDI32.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-eventing-provider-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-winrt-string-l1-1-0.dll
    api-ms-win-core-winrt-error-l1-1-0.dll
    api-ms-win-core-com-l1-1-0.dll
    api-ms-win-security-cryptoapi-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-eventing-classicprovider-l1-1-0.dll
    api-ms-win-core-util-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-security-base-l1-1-0.dll
    api-ms-win-security-sddl-l1-1-0.dll
    api-ms-win-shcore-stream-winrt-l1-1-0.dll
    RPCRT4.dll
    api-ms-win-core-com-midlproxystub-l1-1-0.dll
    api-ms-win-core-string-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-registry-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-threadpool-l1-2-0.dll
    SspiCli.dll
    api-ms-win-core-registry-l1-1-1.dll
    wincorlib.DLL
    msvcrt.dll
    api-ms-win-shcore-taskpool-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-memory-l1-1-0.dll
    api-ms-win-core-delayload-l1-1-1.dll
    api-ms-win-core-delayload-l1-1-0.dll
    api-ms-win-security-capability-l1-1-0.dll

  Image has the following delay load dependencies:

    ext-ms-win-pinenrollment-enrollment-l1-1-0.dll

  Summary

       16000 .data
        1000 .didat
        1000 .orpc
        A000 .pdata
       5D000 .rdata
        3000 .reloc
       17000 .rsrc
       C7000 .text

Funciones que tiene la dll aadtb.dll


1    0 0000E9C0 AADTBAcquireToken
2    1 0000ED70 AADTBAcquireTokenEx
3    2 0000F0E0 AADTBFreeString
4    3 0000F150 AADTBFreeStruct
5    4 000235E0 DllCanUnloadNow
6    5 00023390 DllGetActivationFactory
7    6 00023490 DllGetClassObject

Información avanzada sobre funciones que tiene la dll aadtb.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\aadtb.dll

File Type: DLL

  Section contains the following exports for AADTB.dll

    00000000 characteristics
    3D74649E time date stamp
        0.00 version
           1 ordinal base
           7 number of functions
           7 number of names

    ordinal hint RVA      name

          1    0 0000E9C0 AADTBAcquireToken
          2    1 0000ED70 AADTBAcquireTokenEx
          3    2 0000F0E0 AADTBFreeString
          4    3 0000F150 AADTBFreeStruct
          5    4 000235E0 DllCanUnloadNow
          6    5 00023390 DllGetActivationFactory
          7    6 00023490 DllGetClassObject

  Summary

       16000 .data
        1000 .didat
        1000 .orpc
        A000 .pdata
       5D000 .rdata
        3000 .reloc
       17000 .rsrc
       C7000 .text

Integridad de la dll aadtb.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          8C481670BCB9F7D6A843DBF5E9EF951077BCA79C04A5179C0BB0BB9603C28447       C:\Windows\System32\aadtb.dll                


Detalles sobre el fichero dll aadtb.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\aadtb.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : aadtb.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\aadtb.dll
                    InternalName:     aadtb.dll
                    OriginalFilename: aadtb.dll
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  AAD Token Broker Helper Library
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : aadtb
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-security-aadtb_31bf3856ad364e35_10.0.19041.1_none_86f944dcbf1a4526\aa
                    dtb.dll}
LinkType          : HardLink
Name              : aadtb.dll
Length            : 1413632
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\aadtb.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:08:21
CreationTimeUtc   : 07/12/2019 9:08:21
LastAccessTime    : 03/12/2020 8:17:41
LastAccessTimeUtc : 03/12/2020 7:17:41
LastWriteTime     : 07/12/2019 10:08:21
LastWriteTimeUtc  : 07/12/2019 9:08:21
Attributes        : Archive



Procesos que utilizan la dll aadtb.dll