The Application 12562 exe (Application Approval) Approval Soft File Malware Analysis
Gridinsoft Logo
File Icon

The Application_12562.exe (Application Approval) File Analysis

Updated 29 days ago
Checked by Malware Check
Application_12562.exe

Technical Analysis

File Name Application_12562.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
393216:Jg78BLzP27zsS+ln0cwbTM7sDiGSjZGVYc0TWMs3+JqCEZbEkgoN/ZLvvPaRd:Tp2WWdbMsQjZG+nts3AJkgoN/lvvPaz
Scanner Version 1.0.224.174
Database Version 2025-09-13 02:00:48 UTC
⚠

Suspicious File Detected

Detected by 15 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
22%
Detection Rate
27,394,896
File Size (bytes)
15/68
Engines Detected
2025-09-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2e1ff2c699da092e29e4cac1888b92f9
SHA1
eb70c8aa7e8079cc51058dc5ee6c6820e147a5de
SHA256
7c5333f4e1d012cb660c13414b87e9edd5e6a44bdb7e95e4a52fa41613aa907f
SHA512
23c5947aaca9ced6b1f71dea51225e5e658dd3eefe6a99957074fb5805db725feef112c6d6efb5296b55b1a64078dda8bbd1180c0860339ac06fd7658cd23397
ImpHash
2f39d7265c66e36247d957de059f0631

Security Engines with Detections (15 of 68)

Bkav
W32.AIDetectMalware Malicious
CTX
exe.trojan.adload Malicious
Skyhigh
Artemis Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Kaspersky
Trojan-Downloader.Win32.Adload.umxf Malicious
Alibaba
AdWare:Win32/AdLoad.ee2e9693 Malicious
McAfeeD
ti!7C5333F4E1D0 Malicious
Trapmine
malicious.moderate.ml.score Malicious
Kingsoft
Win32.Trojan-Downloader.Adload.umxf Malicious
VBA32
TrojanDownloader.Adload Malicious
Tencent
Win32.Trojan-Downloader.Adload.Ztjl Malicious
TrellixENS
Artemis!2E1FF2C699DA Malicious
MaxSecure
Trojan.Malware.418620866.susgen Malicious
Fortinet
W32/PossibleThreat Malicious
DeepInstinct
MALICIOUS Malicious
53 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: e70ab6434b901bf0d86cad4f2e381b4b
Fuzzy: c0aeeb48c2783a270a993faae44e6ec1
dHash: 00b28eabababa600
Image Base 0x00400000
Entry Point 0x0079e02e
Compilation Time 2025-08-26 14:02:47
Checksum 0x01a26161 (Actual: 0x01a26161)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, bcrypt
Exports 1 functions
Resources 25 Resources
Sections 5 Sections

Version Information

▼
CompanyName Approval Soft
FileDescription Application Approval
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
LegalCopyright Copyright 2014-2025 Approval Soft
ProductName Application Approval
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 4,011,654 bytes 4,012,032 bytes 5.76 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 172E0DF2ECADABC1E742B97629217480
.rdata 0x003d5000 146,478 bytes 146,944 bytes 5.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 194CD44D5E99FA4E2224824F1DED5AB4
.data 0x003f9000 47,176 bytes 11,776 bytes 4.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BD280290AFBA57CEE1B9776A5A3A8DA5
.rsrc 0x00405000 9,472 bytes 9,728 bytes 3.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FE321212505351E69689A06703DAA387
.reloc 0x00408000 61,812 bytes 61,952 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CEF82E5435384796874ADD56DA987DDE
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (8,042 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 1,040 bytes
12.9%
RT_DIALOG 4 2,048 bytes
25.5%
RT_STRING 16 2,766 bytes
34.4%
RT_GROUP_ICON 1 34 bytes
0.4%
RT_VERSION 1 652 bytes
8.1%
RT_MANIFEST 1 1,502 bytes
18.7%

Certificate Chain Analysis

▼
Certificate Information
Product Application Approval
Description Application Approval
File Version 1.0.0.0
Copyright Copyright 2014-2025 Approval Soft
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
HILLSTAR NETWORKS, INC. #2 Chain
Validity Period: 2024-10-01 21:21:14 → 2025-10-02 21:21:14
Signature Algorithm: sha256RSA
Serial Number: 01 F1 DC C6 70 7D 83 57 EA 73 B1 54
Globalsign TSA for CodeSign1 - R6 #3 Chain
Validity Period: 2025-04-11 14:47:39 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 00 0B 20 05 B3 94 07 62 DB 3E 36 79 94 9B A9
GlobalSign Timestamping CA - SHA384 - G4 #4 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #5 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
15 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware