dsamain.exe
Active Directory Lightweight Directory Services file version info
Program on Windows 1 known copy with hashes
Is it the real dsamain.exe?
Installed in
C:\Windows\system32\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionActive Directory Lightweight Directory Services
1 known copy
10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dsamain.exe · signed by Microsoft Windows
e676c24874c8aa1225cfab35ea78bc79eab8a9d9b4d283559f21722ce8b1e9dbFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.