ApproveChildRequest.exe

  • File Path: C:\Windows\system32\ApproveChildRequest.exe
  • Description: Grant more screen time

Hashes

Type Hash
MD5 8A9273F02903EAFF641334180E9FA312
SHA1 A7D26D1F054A69C0372FFA6CA819484644CC2D37
SHA256 DE18AAD7759E1DAF3FC2174A8D2F822A13523315098A7AC090BA676D810D31C3
SHA384 D4D2D9F57346E66930F9538ABC8AB838CB37ADE29196FE97559381E37EEF58158C0F941BC0C2EA219063CE23686A55AA
SHA512 89B2EFD22655E8303C6AAC330817A86E82DECD39ED684921696246B41B98A0C1A4B932BC66F04E18A37095F2FD97E4BD378369DB55D25E4DCD0D4ABB8B71911F
SSDEEP 6144:PzmiXVgC+3A4ZmbmTNTGhYa2nfRGKdDPDvV:PDF9+GbmpTGfcnjDt
IMP A1EF015E6580FDD3894D4BD64C389105
PESHA1 40BE3C9963935F5182A6A20650135DDB54B456D8
PE256 48C316582BFEF66B474D20CB61C419C76C4CE98D933506FA4FD37946847FDE09

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\system32\ApproveChildRequest.exe
C:\Windows\System32\combase.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ole32.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ApproveChildRequest.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1052 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1052
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/de18aad7759e1daf3fc2174a8d2f822a13523315098a7ac090ba676d810d31c3/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\ApproveChildRequest.exe 47
C:\WINDOWS\system32\ApproveChildRequest.exe 44
C:\Windows\system32\ApproveChildRequest.exe 58
C:\WINDOWS\system32\ApproveChildRequest.exe 49

MIT License. Copyright (c) 2020-2021 Strontic.