IMCCPHR.exe

  • File Path: C:\Windows\system32\IME\SHARED\IMCCPHR.exe
  • Description: IMCCPHR.exe

Screenshot

IMCCPHR.exe

Hashes

Type Hash
MD5 6E76A76F787ECD24673694BB33371A79
SHA1 57A31ED7CFCE584B0EFDE2517D9C674262B1836F
SHA256 903E4FA43525D57646F55D9B3B91730F9B3A0527A7044E0340E6A2582EC19FDD
SHA384 1C65466D129CC2C1A7429E6C2CA955EB32C181345B42F0BBA0F362D1FB1D9FD1487D619115CBEE3A4E952FE22666C130
SHA512 4A1BECFD0F98118C77C897FD20AA8DBF0B084316308BAB13B83E3CAAE3F0F63234DF6AE15D0B68FC95E6E4F42B3DDD6D5412CEB2F7F0CDC6F2F6BFF9800CB593
SSDEEP 6144:yp6wO0Ny9Nfq1fEhgCWR5ioOXsOlx8uSXmCPwP6k+kc8DZ5n:a6EyDmAghRO2uSXmH6k+kcuv
IMP 64F06DCAEA7C73CD8AE821E090F5F5B5
PESHA1 8488228546A3FEB873D902C6D1E905D3DF8D2CE2
PE256 9FC505FABEAEEF7B9CE073CC7D21BC3B17FE9547EE27F51851A0B15FE4724C0B

Runtime Data

Window Title:

User-defined Phrase Tool for Microsoft Pinyin IME

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\SystemResources\imageres.dll.mun File
(RW-) C:\Users\user File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_ca04af081b815d21 File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\Windows\Theme1175649999 Section
\Windows\Theme601709542 Section

Loaded Modules:

Path
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\system32\IME\SHARED\IMCCPHR.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: IMCCPHR.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/903e4fa43525d57646f55d9b3b91730f9b3a0527a7044e0340e6a2582ec19fdd/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\IME\SHARED\IMCCPHR.exe 54
C:\windows\system32\IME\SHARED\IMCCPHR.exe 52
C:\WINDOWS\system32\IME\SHARED\IMCCPHR.exe 55
C:\WINDOWS\system32\IME\SHARED\IMCCPHR.exe 60
C:\Windows\system32\IME\shared\IMCCPHR.exe 57
C:\WINDOWS\SysWOW64\IME\SHARED\IMCCPHR.exe 52
C:\windows\SysWOW64\IME\SHARED\IMCCPHR.exe 60
C:\Windows\SysWOW64\IME\shared\IMCCPHR.exe 52
C:\Windows\SysWOW64\IME\SHARED\IMCCPHR.exe 61
C:\WINDOWS\SysWOW64\IME\SHARED\IMCCPHR.exe 57
C:\Windows\SysWOW64\IME\SHARED\IMCCPHR.exe 57

MIT License. Copyright (c) 2020-2021 Strontic.