Versions

8.00.7600.16385 (win7_rtm.090713-1255)	50.00%
8.00.7600.16385 (win7_rtm.090713-1255)	50.00%

(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

• ienrcore.exe (by Microsoft)
• wu-ie10-windows7-x86.exe (by Microsoft)
• ie4uinit.exe (by Microsoft)
• iesetup.exe (by Microsoft)
• hmmapi.dll (by Microsoft)
• dbgsvc.exe (Debug Diagnostic Tool by Microsoft Corporation)
• fhautoplay.dll (by Microsoft)
• buildnotification.exe (by Microsoft)
• ehexthost.exe (Media Center Extensibility Host by Microsoft)
• onenoteim.exe (Microsoft OneNote by Microsoft Corporation)
• powershell.exe (Windows PowerShell by Microsoft)
• ipoverusbsvc.exe (Microsoft Windows Operating System by Microsoft Corporation)
• iedvtool.dll (Internet Explorer by Microsoft)
• korime.exe (Microsoft IME by Microsoft)
• chtime.exe (Microsoft IME by Microsoft)
• emet_gui.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• emet_agent.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• filemanager.exe (OneDrive by Microsoft Corporation)
• mstore.exe (Microsoft Clip Organizer by Microsoft Corporation)
• chsime.exe (Microsoft IME by Microsoft)
• scardsvr.dll (Smart Card Resource Management Server by Microsoft)
• gpsvc.dll (Group Policy Client by Microsoft)
• certprop.dll (Microsoft Smartcard Certificate Propagation Service by Microsoft)
• integratedoffice.exe (Microsoft Office by Microsoft Corporation)
• actioncenter.dll (Action Center by Microsoft)
• f12tools.dll (Internet Explorer by Microsoft)
• ndsm.exe (by Microsoft)

advpack.dll

Windows Internet Explorer by Microsoft

Overview

What is advpack.dll?

Programs installed in

Behaviors

• 'wextract_cleanup0' → "rundll32.exe" C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Windows\TEMP\IXP000.TMP\"
• 'LHTTSGED' → RunDll32 advpack.dll,LaunchINFSection C:\Windows\INF\LHTTSGED.inf, RemoveCabinet

All file variations of advpack.dll