home

IMAGEX.EXE

Windows Imaging Utility

Microsoft Corporation

This is installed with multiple programs including Microsoft Office Labs Ribbon Hero and Windows Deployment Tools. The file has been seen being downloaded from cappleblog.co.kr.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
Windows Imaging Utility

Version:
6.2.9200.16384 (win8_rtm.120725-1247)

MD5:
38d0a10d84da346f3e7542c1a0770265

SHA-1:
7c36a7e1a31c2b4270605e3ba548f8a43539718f

SHA-256:
14562a2522bd0611482fe41af23836c4f5e697afb1886943eaf9e47737a0229f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:39:35 AM UTC  (today)

File size:
697 KB (713,728 bytes)

Product version:
6.2.9200.16384

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
IMAGEX.EXE

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\windows kits\8.0\assessment and deployment kit\deployment tools\amd64\dism\imagex.exe

File PE Metadata
Compilation timestamp:
7/25/2012 6:00:51 PM

OS version:
6.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.10

CTPH (ssdeep):
12288:wZpORFV+rfjl0sQPGCRwP958SC6KmoVkACNZkmm+mgrJecHPp3W1w:mp2FV+fejGCCP9586uqleCs1

Entry address:
0x77FD4

Entry point:
48, 83, EC, 28, E8, E7, 04, 00, 00, 48, 83, C4, 28, E9, 3A, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, F9, 30, 02, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, 44, 06, 00, 00, CC, CC, CC, CC, CC, CC, FF, 25, 5C, BE, 02, 00, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 38, 48, 8B, 44, 24, 60, 48, 89, 44, 24, 20, E8, 0D, 00, 00, 00, 48, 83, C4, 38, C3, CC, CC, CC, CC, CC, CC, CC, CC...
 
[+]

Entropy:
6.3572

Code size:
615 KB (629,760 bytes)

The file IMAGEX.EXE has been discovered within the following programs.

Microsoft Office Labs Ribbon Hero  by Microsoft Corporation
8% remove it
Windows Deployment Tools  by Microsoft Corporation
Publisher's description - “Microsoft Deployment Toolkit (MDT) 2012 Update 1 is the newest version of MDT, a Solution Accelerator for operating system and application deployment.”
www.microsoft.com/en-us/download/details.aspx?id=25175
9% remove it
 
Powered by Should I Remove It?

The file IMAGEX.EXE has been seen being distributed by the following URL.

http://cappleblog.co.kr/.../cfile5.uf@140CA43F50D8095105A993.exe

Scan IMAGEX.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.