joy.cpl
- File Path:
C:\Windows\SysWOW64\joy.cpl
- Description: Game Controllers Control Panel Applet
Hashes
Type |
Hash |
MD5 |
86C0AC16C5E4272FC00A536C06674B49 |
SHA1 |
FBA211A314010B01A8DB5B096CEEE7DF8CE30551 |
SHA256 |
5A414C638AF9B961BD870BC96ECAC72DBBD953E39A38C3BE85AB6C9EA53BDCE8 |
SHA384 |
6BB7C00B9EB73FB1EF456993C12A154463866625C49D8E2D7AE8AC7CB73ECA4C4674CECA1E5CF7BEEE8A480F893135DE |
SHA512 |
467D93F74A38D3A3390C3FB7C991C7092E81A89823E3BE5866CB9E820CE45C46F03D049B90C831AB24368EB07AD42B623C058E1B9102C031BCBCA432042DEA67 |
SSDEEP |
1536:qx61XuD10R/EohCOpbStupTsRn2PjTrxVDdT:r1uD10R/JEO5StupTs12PHr3 |
IMP |
93C94BEFB57520D89659325022EC5363 |
PESHA1 |
95FFC80D98620C6164EAEBD316BD0C192B06FD64 |
PE256 |
ED7BA1DCF837839B776DB82E054424161A2E8C69B21FC50960B0A21CC032A838 |
Runtime Data
Child Processes:
rundll32.exe
Open Handles:
Path |
Type |
(R-D) C:\Windows\System32\en-US\rundll32.exe.mui |
File |
(RW-) C:\Users\user |
File |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db |
Section |
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 |
Section |
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
\Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
\Sessions\1\Windows\Theme3205582532 |
Section |
\Windows\Theme3800351183 |
Section |
Loaded Modules:
Path |
C:\Windows\System32\combase.dll |
C:\Windows\System32\imagehlp.dll |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\System32\msvcrt.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\RPCRT4.dll |
C:\Windows\SYSTEM32\rundll32.exe |
C:\Windows\System32\shcore.dll |
C:\Windows\System32\ucrtbase.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: JOY.CPL.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/5a414c638af9b961bd870bc96ecac72dbbd953e39a38c3be85ab6c9ea53bdce8/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.