Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.AAD.BrokerPlugin.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Microsoft.AAD.BrokerPlugin.exe
Resource
win10v2004-20231023-en
Target
Microsoft.AAD.BrokerPlugin.exe
Size
229KB
MD5
aebafc0b531ca931277e69048971ecb2
SHA1
09b8f5d2e4a7cefd1862744860f69f401d2f7f32
SHA256
7ade172856bdfdd09056fce43f8b62fce46437473ed54d85fdeb1a10530405a0
SHA512
84c7ba33abc8aad4459c2a71872b7b4402bba078545839912b69429c77895eb00a4e562839a287cfcebb07426dd062c47ea7f0e2a9593234f49d472dce82dc7f
SSDEEP
3072:VQH1zjkPvl5cr+QE6EgBJ9XZXL2WsEKbDBujZrr4262HtVNqW:VazEvrjQE6RBn5L3u3BaWjA2W
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DeleteCriticalSection
Sleep
RoReportUnhandledError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
?UninitializeData@Details@Platform@@YGXH@Z
?InitializeData@Details@Platform@@YGJH@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
?GetCmdArguments@Details@Platform@@YGPAPA_WPAH@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
??0ChangedStateException@Platform@@Q$AAA@XZ
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
??0OutOfBoundsException@Platform@@Q$AAA@XZ
??0FailureException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@XZ
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
??0NotImplementedException@Platform@@Q$AAA@XZ
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
??0Delegate@Platform@@Q$AAA@XZ
??0DisconnectedException@Platform@@Q$AAA@XZ
?__abi_translateCurrentException@@YGJ_N@Z
??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?Free@Heap@Details@Platform@@SAXPAX@Z
??0Object@Platform@@Q$AAA@XZ
?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z
??3@YAXPAX@Z
memmove
_purecall
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
wcsrchr
free
??0exception@@QAE@ABV0@@Z
memset
wcslen
_lock
_unlock
__dllonexit
_onexit
_XcptFilter
_amsg_exit
malloc
_initterm
__p__commode
__getmainargs
__set_app_type
exit
_exit
_cexit
__p__fmode
_ismbblead
__setusermatherr
_acmdln
_except_handler4_common
__CxxFrameHandler3
?terminate@@YAXXZ
_controlfp
_callnewh
??0exception@@QAE@ABQBDH@Z
_CxxThrowException
memcpy
??1type_info@@UAE@XZ
RtlGetDeviceFamilyInfoEnum
SetRestrictedErrorInfo
RoOriginateError
RoFailFastWithErrorContext
WindowsCreateStringReference
WindowsCreateString
WindowsDuplicateString
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsConcatString
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
DllCanUnloadNow
DllGetActivationFactory
VSDesignerDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ