home

ppjoy.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from forums.pcsx2.net and multiple other hosts.
MD5:
38fc3e3bec894503568cdfd67eaf3ebe

SHA-1:
0a093a66e0b529635173b1630107c1c01c806cea

SHA-256:
09d0e9774334751ac7263c7cdd6b45a874be40467bd2c8147714b83be13be509

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:18:36 PM UTC  (today)

File size:
1.8 MB (1,855,695 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\ppjoy.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:ex4CzMkWwTtbMfFVsFmOswdvHUSVovm6mZHcFMA3Fg5l:NkWwTS9Osuv0SVovm78pS

Entry point:
50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, 56, 90, 57, 31, 0D, B4, FC, BD, B1, 04, 00, 00, 24, 09, 00, 00, 10, 00, 00, 00, 44, 6F, 63, 73, 2F, 43, 6F, 6E, 74, 61, 63, 74, 2E, 68, 74, 6D, 8D, 55, DB, 72, DB, 36, 10, 7D, F7, 8C, FE, 61, A3, 4E, 67, DA, A9, 45, 3A, 49, AF, 0E, A5, 54, 91, E5, 54, A9, 15, AB, 96, DC, D4, 8F, 20, B9, 14, 11, 81, 00, 0B, 80, 52, D5, 4E, FB, ED, DD, 05, 29, C7, 8A, DB, 99, BC, 48, C4, 62, B1, B7, 73, 70, 90, 3C, B9, B8, 9E, AC, EE, 16, 53, F8, 69, 35, BF, 82, C5, ED, AB, AB, D9, 04...
 
[+]

The file ppjoy.exe has been seen being distributed by the following 4 URLs.

http://forums.pcsx2.net/attachment.php?aid=16514

http://download1682.mediafire.com/zdigrd9n20wg/.../PPJoySetup-by-mandos.zip

http://download1636.mediafire.com/2h3rr2ak3upg/.../PPJoySetup-by-mandos.zip

http://cdn.simtel.net/pub/simtel/00/07/51/.../PPJoySetup.zip

Scan ppjoy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.