HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/aadWamExtension.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!D

p3@ �@8.rdata�@@.rsrcP B@@,#�[
T88,#�[$��8.rdata8x.rdata$zzzdbg @.rsrc$01@!J.rsrc$02 �U+
@^�ȏ�����|�\`v߹ܾ�,#�[0�0�H�`�x���������� 8!���!>�0"�:��\��MUI������T��-�h2"�š�Q?��y��:.C����MUIzh-TWAadWamExtensionPA�	
�00�PP(eplpX����������<	9�I��K�K�O�R�(\���$����h'����\8�����8��L:�Є:<Telemetry trigger events

Error

Analytic

Function

 Operational

Warning

Critical

,AadCloudAPPlugin

 aadcredprov

nj
�

���Y

\Pbk

/���

f�JT

nj
�

@AadCloudAPPlugin Operation

DCredentialProvider Operation

HAadTokenBrokerPlugin Operation

0AadAdalrt Operation

0AadAadtb Operation

4BrowserCore Operation

8WamExtension Operation

 AuthHelper

HMicrosoft-Windows-AAD/Analytic

LMicrosoft-Windows-AAD/Operational

LAadCloudAPPlugin Initialize Start

dAadCloudAPPlugin Initialize Stop.%nStatus: %1

PAadCloudAPPlugin Uninitialize Start

XAadCloudAPPlugin ValidateUserInfo Start

pAadCloudAPPlugin ValidateUserInfo Stop.%nStatus: %1

HAadCloudAPPlugin GetToken Start

`AadCloudAPPlugin GetToken Stop.%nStatus: %1

HAadCloudAPPlugin GetKeys Start

`AadCloudAPPlugin GetKeys Stop.%nStatus: %1

PAadCloudAPPlugin GetUnlockKey Start

hAadCloudAPPlugin GetUnlockKey Stop.%nStatus: %1

XAadCloudAPPlugin PersistSSOTokens Start

pAadCloudAPPlugin PersistSSOTokens Stop.%nStatus: %1

�AadCloudAPPlugin Realm discovery response: %1.%nRequest status: %2

hAadCloudAPPlugin device is cloud domain joined

\AadCloudAPPlugin device is domain joined

hAadCloudAPPlugin GetToken Correlation ID: %1.%n

hAadCloudAPPlugin GetKeys Correlation ID: %1.%n

TAadCloudAPPlugin loaded as surrogate

XAadCloudAPPlugin MEX request status: %1

,Endpoint Uri: %1

0NGC UserID Key: %1

$HTTP ��Bl�rKa: %1

`HTTP ��Bl�rKa: %10�e�l: %2 �zޞ URI: %3 �v�Nܕo�X�%R�x: %4

XCredential type: %1 Correlation ID: %2

�AadCloudAPPlugin managed logon flow for federated NGC user.

PAadCloudAPPlugin RefreshToken Start

hAadCloudAPPlugin RefreshToken Stop.%nStatus: %1

pAadCloudAPPlugin RefreshToken Correlation ID: %1.%n

pAadCloudAPPlugin encrypted OAuth response received

DNumber of groups received: %1

4Validation needed: %1

TAadCloudAPPlugin GenericCallPkg Start

lAadCloudAPPlugin GenericCallPkg Stop.%nStatus: %1

dOAuth �V�a/���: %1%n/����c�: %2%nCorrelationID: %3%n

Xёp�/���: %1%n/����c�: %2%nCorrelationID: %3%n

`�S�Ow��vёp�/���: %1%n/����c�: %2%nCorrelationID: %3%n

DHTTP �P8�/���0�rKa: %1 �v�Nܕo�X�%R�x: %2

8{veQ1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

D�S�_O(u���W1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

@�S�_��I�ёp�1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

@WSTrust �V�a/���: %1%n/����c�: %2

$݈n*g�ReQ��z�}�W: %1

lNGC nonce �V�a/���: %1%n/����c�: %2%nCorrelationID: %3%n

0NGC W�I�hyI�*g�[�0/���: %1

DOAuth ��Bl͑f�0�v�Nܕo�X�%R�x: %1 ͑f�: %2

0NGC |T�S %1 �P�V/���: %2

@͑�etet
kVg1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

D͑�etet
kVgO(u� SID 
N�v&{0�v�Nܕo�X�%R�x: %1

4͑�etet
kVg�]N�g0�v�Nܕo�X�%R�x: %1

$/���: %1 %2%n%3

(Code: %1 %2%n%3

4!q�l��[ OAuth �V�a0/���: %1

DAAD ��z AP Y�cz_|T�S %1 �P�V/���: %2

8݈n;��Q API |T�S %1 �P�V/���: %2

L�c6e0R�v�[hQ'`�D}xe�v�p %10CorrelationID: %2

X�S�_Omi STS OAuth nj
�1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

POmi STS ͑�etet
kVg1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

HOmi STS {veQ1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

�Enterprise STS OAuth Info response: %1.%nRequest status: %2

DOmi STS ͑�etet
kVg�]N�g0�v�Nܕo�X�%R�x: %1

lEnterprise STS RefreshToken Correlation ID: %1.%n

8͑�etet
kVg;NԚ
N�v&{0�v�Nܕo�X�%R�x: %1

H^�o��vO(u��v AadCloudAPPlugin zfgaaS{veQ0

<݈n�]�ReQ DRS�FOOmi STS �]\P(u: %1

tAadCloudAPPlugin loaded as surrogate, no key recovery

dAadCloudAPPlugin device is Enterprise joined

�AadCloudAPPlugin device P2P certificate update thread started

�AadCloudAPPlugin device P2P certificate update thread stopped

PAadCloudAPPlugin Uninitialize Stop

�AadCloudAPPlugin DeviceP2PCertificateUpdate Correlation ID: %1.%n

L�f�e P2P ݈n�aI�1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

�AadCloudAPPlugin GetCertificateFromCred Correlation ID: %1.%n

L�f�e P2P O(u��aI�1YWe0�rKa: %1 �v�Nܕo�X�%R�x: %2

hAAD Cloud AP plugin call %1 returned error: %2

xAadCloudAPPlugin RenewCertificate Correlation ID: %1.%n

dAadCloudAPPlugin AcceptPeerCertificate Start

|AadCloudAPPlugin AcceptPeerCertificate Stop.%nStatus: %1

XAadCloudAPPlugin RenewCertificate Start

pAadCloudAPPlugin RenewCertificate Stop.%nStatus: %1

dAadCloudAPPlugin GetCertificateFromCred Start

|AadCloudAPPlugin GetCertificateFromCred Stop.%nStatus: %1

<�S�_
kVgO(u�
T1z
N�v&{0�v�Nܕo�X�%R�x: %1

xGeneric Call Packate call type: %1. Correlation ID: %2

�Realm discovery for: %2 authority: %3 fallback domain hint: %4 useUpn: %1 

pAAD Cloud AP plugin token needs refresh reason: %1

xToken is not refreshed. token time: %1 update time: %2

\AadCloudAPPlugin AssembleOpaqueData Start

tAadCloudAPPlugin AssembleOpaqueData Stop.%nStatus: %1

dAadCloudAPPlugin DisassembleOpaqueData Start

|AadCloudAPPlugin DisassembleOpaqueData Stop.%nStatus: %1

LAadCloudAPPlugin P2P ݈n�aI��f�e/���: %1

DAadCloudAPPlugin ݈n�aI�ёp�/���: %1

HAadCloudAPPlugin ݈n�aI�
Ni�(u�e{veQ: %1

hPassword expiration claims. Seconds: %1 URI: %2

`O(u�]\O���kёp�{veQ1YWe0ck(WO(u݈nW�I�͑f�0�rKa: %1 �v�Nܕo�X�%R�x: %2

xPassword expiration fields. Status: %1 Date: %2 URI: %3

`AadCloudAPPlugin PostLogonProcessing Start

xAadCloudAPPlugin PostLogonProcessing Stop.%nStatus: %1

LAadCloudAPPlugin S2U {veQ1YWe0�rKa: %1

DBrowserCore operation started

dBrowserCore operation completed successfully

@BrowserCore \Omi�[b�FO|vu/���: %1

LBrowserCore gQ�\Omi %2 �[b�FO|vu/���: %1

lAadCloudAPPlugin LookupSIDFromIdentityName Start

�AadCloudAPPlugin LookupSIDFromIdentityName Stop.%nStatus: %1

lAadCloudAPPlugin LookupIdentityFromSIDName Start

�AadCloudAPPlugin LookupIdentityFromSIDName Stop.%nStatus: %1

�AadCloudAPPlugin LookupSIDFromIdentity Identity: %1 Correlation ID: %2.%n

�AadCloudAPPlugin LookupIdentityFromSID SID: %1 Correlation ID: %2.%n

PAadCloudAPPlugin �[�x�]N�g��[�x���f URI: %1

D�[eQ RunRecovery {v�<P1YWe0%n�rKa: %1

HOmi{veQ0�[�x�]N�g0%n�rKa: %1 �v�Nܕo�X�%R�x: %2

dWamExtension process token operation started

�WamExtension process token operation completed successfully

LWamExtension U�t�^
kVg\Omi�[b�FO|vu/���: %1

�WamExtension device authentication call status: %1 Correlation ID: %2

tGet device token. Resource: %1 ClientID: %2 Scope: %3

TStartFidoAuthenticationSession start

lStartFidoAuthenticationSession stop.%nStatus: %1

TCloseFidoAuthenticationSession start

lCloseFidoAuthenticationSession stop.%nStatus: %1

0GetClientData start

HGetClientData stop.%nStatus: %1

<SignClientDataFido start

TSignClientDataFido stop.%nStatus: %1

(ChangePin start

@ChangePin stop.%nStatus: %1

DGetSerializedAuthBuffer start

\GetSerializedAuthBuffer stop.%nStatus: %1

<AuthHelper |T�S %1 �P�V/���: %2

�AadCloudAPPlugin Resource infomation: %1.%nRequest status: %2

�AadCloudAPPlugin RBAC authorization code response: %1.%nRequest status: %2

dAadCloudAPPlugin User access control role: %1

xAadCloudAPPlugin using resource id from the Idtoken: %1

PRBAC Status: %1 Correlation ID: %2

LFailed to create the resource id

$݈n-��[�p RBAC �c
k

�Not sending the client certificate as it is optional on the server

,Doing RBAC logon

�Skipping Rbac Logon because AadCloudAPPlugin is loaded as surrogate

(gQ��r tgt /���: %1

PAdded user to admins security group

XRemoved user from admins security group

(*g	�eQ�[hQ'`�D}0/����%1

(*g�f�e�[hQ'`�D}0/����%1

DUser sid: %1%nGroup sids:%n%2

`�]b�R0W�[eQ RunRecovery {v�<P (%1)0 %ngQ�[�%2%n�S�V�%3

$��z tgt /���: %1

<Response content type: %1

<AD TGT: %1 Cloud TGT: %2

DP2P �aI��f�e/���0�rKa: %1 �v�Nܕo�X�%R�x: %2

lCredbuffer correlation ID: %1 Correlation ID: %2

`CA cert hash (keyID): %1 Correlation ID: %2

DCA �aI��f�e/���0�rKa: %1 �v�Nܕo�X�%R�x: %2

8PRT �]\O���kёp��_����c0%n�S�V� %1

<Feature is not supported.

�4VS_VERSION_INFO��
�aJ
�aJ?StringFileInfo�040404B0LCompanyNameMicrosoft CorporationJFileDescriptionAAD WAM �^8O!jD} DLLn'FileVersion10.0.19041.3996 (WinBuild.160101.0800)LInternalNameAAD WAM extension DLL�.LegalCopyright� Microsoft Corporation. All rights reserved.XOriginalFilenameAadWamExtension.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.3996DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX