IMJPUEX.EXE

  • File Path: C:\WINDOWS\SysWOW64\IME\IMEJP\IMJPUEX.EXE
  • Description: Microsoft IME

Screenshot

IMJPUEX.EXE

Hashes

Type Hash
MD5 CE4AB827586D17F1A29C0F1068CCEC90
SHA1 6252D80BB558FDC3D6A01F5B2DD5676724C39635
SHA256 ACA6A26B37E9FFBFBE145A3167A3AAACB9E9D4C5509356F61AB4EBE0E4AEA57F
SHA384 3D6FDE9441D113C9BEAB530959779D43239B7D9D629099F06465361E338B3453CBBE1E426CCE5B5283D48F7F35B96B73
SHA512 345783FE306D0F136447CFAFE20A7135E8AC1D045B06B7423FF4A92F799D8B11C857B2782CDD1387BCAE83B89AAD5ED60E4A99813CF009AC70FA308C0966A550
SSDEEP 3072:4U+ZhOTpoNnqyJUwQ/0OsssLYH67IkK2NLPcr:4UwATMqmUw/OssXmIk
IMP AF5AA85C1372E54FAF2955B545C18DAE
PESHA1 CB00F7E71E5C5D3C8FB308D36CFF39F35CCB4BE7
PE256 84945386F51A551A74FCF1F1D35ED4F9197471A2C0935C7B8DA336319BD198F3

Runtime Data

Window Title:

Advanced Settings for Microsoft IME

Open Handles:

Path Type
(R-D) C:\Windows\Fonts\StaticCache.dat File
(R-D) C:\Windows\System32\en-US\MFC42u.dll.mui File
(R-D) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454\comctl32.dll.mui File
(RW-) C:\Windows File
(RW-) C:\Windows\SysWOW64 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.22000.1_en-us_b335b4dbed333454 File
(RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22000.120_none_e541a94fcce8ed6d File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects_IMJP_15UD_FileMapping{b4f0aa5b-77d3-486f-b999-53049e87159e}_M_S-1-5-21-1128764013-3361508229-3049782613-1001 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\2\Windows\Theme1077709572 Section
\Windows\Theme3461253685 Section

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\IME\IMEJP\IMJPUEX.EXE

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: imjpuex.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: Language Neutral
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/aca6a26b37e9ffbfbe145a3167a3aaacb9e9d4c5509356f61ab4ebe0e4aea57f/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\IME\IMEJP\IMJPSET.EXE 41
C:\WINDOWS\system32\IME\IMEJP\IMJPSET.EXE 36
C:\windows\system32\IME\IMEJP\IMJPSET.EXE 46
C:\Windows\system32\IME\IMEJP\IMJPSET.EXE 38
C:\Windows\system32\IME\IMEJP\IMJPSET.EXE 32
C:\WINDOWS\system32\IME\IMEJP\IMJPSET.EXE 38
C:\Windows\system32\IME\IMEJP\IMJPUEX.EXE 44
C:\Windows\system32\IME\IMEJP\IMJPUEX.EXE 49
C:\Windows\system32\IME\IMEJP\IMJPUEX.EXE 44
C:\WINDOWS\system32\IME\IMEJP\IMJPUEX.EXE 50
C:\WINDOWS\system32\IME\IMEJP\IMJPUEX.EXE 46
C:\WINDOWS\SysWOW64\IME\IMEJP\IMJPSET.EXE 41
C:\Windows\SysWOW64\IME\IMEJP\IMJPSET.EXE 40
C:\WINDOWS\SysWOW64\IME\IMEJP\IMJPSET.EXE 41
C:\windows\SysWOW64\IME\IMEJP\IMJPSET.EXE 43
C:\Windows\SysWOW64\IME\IMEJP\IMJPSET.EXE 44
C:\Windows\SysWOW64\IME\IMEJP\IMJPSET.EXE 41
C:\Windows\SysWOW64\IME\IMEJP\IMJPUEX.EXE 52
C:\WINDOWS\SysWOW64\IME\IMEJP\IMJPUEX.EXE 41
C:\Windows\SysWOW64\IME\IMEJP\IMJPUEX.EXE 33

MIT License. Copyright (c) 2020-2021 Strontic.