CmdID

CmdID / Files

adplusmanager.exe

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real adplusmanager.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

4 known copies

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\adplusmanager.exe · signed by Microsoft Windows Kits Publisher

0587ddc1b050f16fd0eb91353e933076cd2fc285a6e1b389a0a9422006346a21

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\adplusmanager.exe · signed by Microsoft Corporation

41b4abb46d95a5d85f64d99e4d86b9785eea0144f905b133795d227354871717

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\adplusmanager.exe · signed by Microsoft Windows Kits Publisher

99dcdcd4bc0a47f376af6956785236b199a23182876d5b0256251e539b6ecf55

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\adplusmanager.exe · signed by Microsoft Corporation

9b47ae6d148f9ea309fab5005db8bd1fbc0b2440875621aba5a6cc17492996b6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.