adplusmanager.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\adplusmanager.exe
  • Description:

Hashes

Type Hash
MD5 2C5B77BC052B279CBD3098544D4E1C9E
SHA1 C9A4B5B94C61D446378683E3E15656E4A27117BF
SHA256 9B47AE6D148F9EA309FAB5005DB8BD1FBC0B2440875621ABA5A6CC17492996B6
SHA384 92B985B245BE765A101082058E0229484EE2AFC83157D183A62B2E0DF0C715E3C2D673F55EF06B87BB65EABFA4AF07BE
SHA512 15943F9A73102603411A4F0BC8428CFCEEF6B77C9BBAD193C97C7831EDD58018E581FDF1E13F20DEC041CEC831230D45384B0F98CA82C3F1261F35C995825511
SSDEEP 768:KZsFKlZ8Kc41WjT4TNegAuDk+6KGbG/+B+OzUaGNUXpu:2luaWgpRDkfbr+68OXp
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 5F3EBCFD5ED553BD1C9F7E2349B5BE64CC4CD793
PE256 04AE348D60C9BF5E060AD89389B3FF17BD96A6631CED4060ED01B376C65B4C00

Runtime Data

Child Processes:

Fondue.exe

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\adplusmanager.exe
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\KERNEL32.dll
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: AdplusManager.exe
  • Product Name: Microsoft (R) Windows (R) Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1
  • Product Version: 10.0.19041.1
  • Language: Language Neutral
  • Legal Copyright: Copyright (c) Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/9b47ae6d148f9ea309fab5005db8bd1fbc0b2440875621aba5a6cc17492996b6/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\adplusmanager.exe 88
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\adplusmanager.exe 88
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\adplusmanager.exe 90

MIT License. Copyright (c) 2020-2021 Strontic.