AddInProcess32.exe

  • File Path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
  • Description: AddInProcess.exe
  • Comments: Flavor=Retail

Hashes

Type Hash
MD5 9827FF3CDF4B83F9C86354606736CA9C
SHA1 E73D73F42BB2A310F03EB1BCBB22BE2B8EB7C723
SHA256 C1CF3DC8FA1C7FC00F88E07AD539979B3706CA8D69223CFFD1D58BC8F521F63A
SHA384 81B8625E1C02C147E5EA1A27964397180374C2D123DD0D1F466338DAF291B27FA48A8B5305FEE50AF49D8A889191EDF4
SHA512 8261828D55F3B5134C0AEB98311C04E20C5395D4347251746F3BE0FB854F36CC7E118713CD00C9867537E6E47D5E71F2B2384FC00C67F0AE1B285B8310321579
SSDEEP 384:ac3JOvwWj8Gpw0A67dOpRipKJ9Yl6dnPU3SERztmbqCJstdMardz/JikPZ+TsPZX:a4JU8g17dG6Iq8XMnVYqW2Xmh829ukc
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 97EFB5E1E7D1982B1732753AE653B8E1240676CE
PE256 35340519A74013FE0F3667CA391D0846942E31F58FFEEE7546238E71962F1D70

Runtime Data

Loaded Modules:

Path
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 330000023241FB59996DCC4DFF000000000232
  • Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AddInProcess32.exe
  • Product Name: Microsoft .NET Framework
  • Company Name: Microsoft Corporation
  • File Version: 4.8.4084.0 built by: NET48REL1
  • Product Version: 4.8.4084.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/c1cf3dc8fa1c7fc00f88e07ad539979b3706ca8d69223cffd1d58bc8f521f63a/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\StoreAdm.exe 63
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\System.Web.ApplicationServices.dll 46
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\System.Web.DynamicData.Design.dll 65
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe 71
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe 71
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe 93
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe 65
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe 66
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe 68
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe 66
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe 71
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe 71
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInProcess32.exe 93
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess32.exe 100
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_regbrowsers.exe 63
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regbrowsers.exe 65
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe 66
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe 65

MIT License. Copyright (c) 2020-2021 Strontic.