imecfmui.exe

  • File Path: C:\WINDOWS\SysWOW64\IME\SHARED\imecfmui.exe
  • Description: Microsoft IME

Hashes

Type Hash
MD5 4F0BCD58BCCF7D81C0933CF905791191
SHA1 EEB664FDFE499D702A74BD9579AF4EF4C00C74D7
SHA256 CA41C3B463DF63C969393669AC18BFB02C3807DB4AE7E12E129823344274458C
SHA384 DC6EF5FC5CEB73BEBF716186E92E929388C62FE1B4047A2D04CF9ECE1D072C882E75F5853E53305928841843C9C856A7
SHA512 08DE108CFC9C1ED234F02D2714CA0CF1349DAF477DE211A1D184C5AAA5B46930BCC32C27E967DEB675F82FEE5D689A2724411E00363ABE1D9F4C6CB6A5D5D203
SSDEEP 6144:HyKclmUp558ayIPaOxF0pKogoU00pJv4pUC3n9FRiZgBk8SK1A:H3clmUP58ayWRoZUzp5SJrS
IMP 19E5967A3F0CE6ED20C4E7077A6ACD78
PESHA1 CE49B27980BD1EB89D31E50205CF336A0E3AEE89
PE256 F5F370C0B5C2673C7B97653B35D4C211693568C49E22FAE3AA85068E63F25AD4

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\IME\SHARED\imecfmui.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: imecfmui.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: Language Neutral
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/ca41c3b463df63c969393669ac18bfb02c3807db4ae7e12e129823344274458c/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\IME\shared\imecfmui.exe 27
C:\Windows\system32\IME\SHARED\imecfmui.exe 29
C:\WINDOWS\system32\IME\SHARED\imecfmui.exe 30
C:\Windows\system32\IME\SHARED\imecfmui.exe 32
C:\WINDOWS\system32\IME\SHARED\imecfmui.exe 35
C:\Windows\SysWOW64\IME\SHARED\imecfmui.exe 38
C:\WINDOWS\SysWOW64\IME\SHARED\imecfmui.exe 30
C:\Windows\SysWOW64\IME\shared\imecfmui.exe 30
C:\Windows\SysWOW64\IME\SHARED\imecfmui.exe 44

MIT License. Copyright (c) 2020-2021 Strontic.