home

ppmouse.exe

PPMouse

exec228

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0c-94-docsviewer.googleusercontent.com.
Publisher:
exec228

Product:
PPMouse

Description:
converter mouse>ppjoystick

Version:
0.6.0.0

MD5:
e5217ea8fdd860f3177ee2528b12675b

SHA-1:
c8590d4a3b4aece09f945ad12c79a89276994287

SHA-256:
3f49055de045415d12db1dad527e3dfd54f4afe68b7c7571c7086342adc7724a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/29/2024 6:47:13 PM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0601
7.2.235

File size:
1.1 MB (1,148,928 bytes)

Product version:
0.5

Copyright:
© exec228

Original file name:
PPMouse

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
12/26/2008 12:18:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
24576:dO4iX/CI57vWNrDhrHTply0Qyq+JutNV/zUp/x1Jb1ERLtTn:dO4iPDAHpoVYp/x1Jb1ERLt

Entry address:
0x14B0

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, C0, 4D, 00, A1, 8B, C0, 4D, 00, C1, E0, 02, A3, 8F, C0, 4D, 00, 52, 6A, 00, E8, 81, 94, 0D, 00, 8B, D0, E8, 16, B3, 0C, 00, 5A, E8, 38, B2, 0C, 00, E8, 4B, B3, 0C, 00, 6A, 00, E8, 68, C4, 0C, 00, 59, 68, 34, C0, 4D, 00, 6A, 00, E8, 5B, 94, 0D, 00, A3, 93, C0, 4D, 00, 6A, 00, E9, C3, 4C, 0D, 00, E9, 9A, C4, 0C, 00, 33, C0, A0, 7D, C0, 4D, 00, C3, A1, 93, C0, 4D, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, E4, 00, 00, 00, 0B, C9...
 
[+]

Code size:
876 KB (897,024 bytes)

The file ppmouse.exe has been seen being distributed by the following URL.

https://doc-0c-94-docsviewer.googleusercontent.com/viewer/securedownload/9ffkq6fqrmp141vvrqbsqf8gdl2447s4/eb6mfsrjkk187hbmso8c8qm5ss88p54i/1396788300000/ZXhwbG9yZXI=/.../MEI0SlczbHROZ1M5MmEwNTRTM2d5TkZaUmFrOUxVWFEwTWxwek5WbEdkdw==?a=dl&filename=PPMouse.zip&sec=AHSqidZbad5k88j4eH-K8y6Qrb3-cfq6Qmn1k-s_9soSghyfyF_ClQ57Pp1SdUECx5Z21f7V5_gd&rel=zip;z1;PPMouse.exe

Scan ppmouse.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.