Debugging tool included with Windows Debugging Tools
adplus.exe -c config-adplus.xml
Dump process memory using adplus config file (see Resources section for a sample file).
Run commands under a trusted Microsoft signed binary
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\adplus.exe, C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\adplus.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/6199a703221a98ae6ad343c79c558da375203e4e/rules/windows/process_creation/proc_creation_win_lolbin_adplus.yml, IOC: As a Windows SDK binary, execution on a system may be suspicious
mr.d0x (@mrd0x), Nasreddine Bencherchali (@nas_bench)