IMEPADSV.EXE
- File Path:
C:\Windows\SysWOW64\IME\SHARED\IMEPADSV.EXE
- Description: Microsoft IME
Hashes
| Type |
Hash |
| MD5 |
278C897A5A394ED31F2F170FFF4C42E3 |
| SHA1 |
0ED3B0763FF7675477E64EE316285E0EBA4BFC69 |
| SHA256 |
1D19BA091648C5C999DBA1BF17C080A51BAE8405B6AFCD904A7DFACBE89731BB |
| SHA384 |
98674873F6712E6416E393F61FC71F5BA89CA08060D62F1B33FE2853D005E0FE35372CE2A6BEA54C7A0E45A7E04C9392 |
| SHA512 |
73ED28CC9315C22E950DEB2F8BC3C5081589A25AE6FB83DD859C9024A7CF603EFB647D16EFD839BCB8F5160D2FF1A4FB18C66279EB7ABDC8D29228A93E5DF9F2 |
| SSDEEP |
6144:OlP4ypiESi8IM7NF5cMGaDGxIsD5ZjbbUz:OlP4+iri8xpF5c+8fK |
| IMP |
86107913CB24B2D655CBD8BD76D3D77A |
| PESHA1 |
48CB15BB14692157EE5F68BC872B27F052DD5472 |
| PE256 |
D2C6D1548EB13F98FF117F61CF85F530CC34795D55BB5908640C02C440B81A47 |
Runtime Data
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\IME\SHARED\IMEPADSV.EXE |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: Microsoft IME
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.1 (WinBuild.160101.0800)
- Product Version: 10.0.19041.1
- Language: Language Neutral
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/1d19ba091648c5c999dba1bf17c080a51bae8405b6afcd904a7dfacbe89731bb/detection
MIT License. Copyright (c) 2020-2021 Strontic.