ADALPREVIOUS.DLL

ADAL.Native file version info

Library on Windows 2 known copies with hashes

Is it the real ADALPREVIOUS.DLL?

file version info and known copies

Original nameadal.dll in the file’s header: a renamed copy still carries it

Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\

Signed byMicrosoft Corporation

ProductMicrosoft ADAL, Microsoft

DescriptionADAL.Native

2 known copies

2.3.0.1501 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ADALPREVIOUS.DLL · signed by Microsoft Corporation

6aab087872164448c432759960c399894f1ebf4ad0735a7303b642169de23295

2.3.0.1501 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\ADALPREVIOUS.DLL · signed by Microsoft Corporation

f749ceb391065184ed698b7dd270567af46e1b2a12862fabaa9569fbd56fa6de

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.