joy.cpl

  • File Path: C:\Windows\SysWOW64\joy.cpl
  • Description: Game Controllers Control Panel Applet

Hashes

Type Hash
MD5 86C0AC16C5E4272FC00A536C06674B49
SHA1 FBA211A314010B01A8DB5B096CEEE7DF8CE30551
SHA256 5A414C638AF9B961BD870BC96ECAC72DBBD953E39A38C3BE85AB6C9EA53BDCE8
SHA384 6BB7C00B9EB73FB1EF456993C12A154463866625C49D8E2D7AE8AC7CB73ECA4C4674CECA1E5CF7BEEE8A480F893135DE
SHA512 467D93F74A38D3A3390C3FB7C991C7092E81A89823E3BE5866CB9E820CE45C46F03D049B90C831AB24368EB07AD42B623C058E1B9102C031BCBCA432042DEA67
SSDEEP 1536:qx61XuD10R/EohCOpbStupTsRn2PjTrxVDdT:r1uD10R/JEO5StupTs12PHr3
IMP 93C94BEFB57520D89659325022EC5363
PESHA1 95FFC80D98620C6164EAEBD316BD0C192B06FD64
PE256 ED7BA1DCF837839B776DB82E054424161A2E8C69B21FC50960B0A21CC032A838

Runtime Data

Child Processes:

rundll32.exe

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\rundll32.exe.mui File
(RW-) C:\Users\user File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme3205582532 Section
\Windows\Theme3800351183 Section

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\imagehlp.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\SYSTEM32\rundll32.exe
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: JOY.CPL.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/5a414c638af9b961bd870bc96ecac72dbbd953e39a38c3be85ab6c9ea53bdce8/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\joy.cpl 63

MIT License. Copyright (c) 2020-2021 Strontic.