aadWamExtension.dll
AAD WAM extension DLL file version info
Library on Windows 2 known copies with hashes
Is it the real aadWamExtension.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAAD WAM extension DLL
2 known copies
10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\SysWOW64\aadWamExtension.dll · signed by Microsoft Windows
b7f43d55619266570fb12c43786af456686d5e6d05d96dfde47fcc29f70e927c10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\aadWamExtension.dll · signed by Microsoft Windows
bc548777353ab5ef312f2a0b512a5a838810ec4fa9edbea68d6475a972e5d061From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.