adplusext.dll

Adplus Extension file version info

Library on Windows 4 known copies with hashes

Is it the real adplusext.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionAdplus Extension

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\adplusext.dll · signed by Microsoft Corporation

0141275db48803463cda257ca846119297abcee0a2c8a38dc82352730b5988a8

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\adplusext.dll · signed by Microsoft Windows Kits Publisher

1fc3e4b084dbf6062caef967111a913c57a68f719262d70baaebfbb7e70b79b2

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\adplusext.dll · signed by Microsoft Corporation

28c113c8e551ce893e0c1e50b0364e4f6d701e02a83a8c87e13261878eac45e5

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\adplusext.dll · signed by Microsoft Windows Kits Publisher

2b2cd84ea6e2278cbdc0983560ba052136b1f1e2668c0f230de50aa8d6557475

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.