IMEPADSV.EXE
- File Path:
C:\WINDOWS\SysWOW64\IME\SHARED\IMEPADSV.EXE
- Description: Microsoft IME
Hashes
| Type |
Hash |
| MD5 |
D73FE29A4466C356477F5912174FBD7D |
| SHA1 |
F9466BA4143C09146F8C2E97CCD28657B4EF487B |
| SHA256 |
B23DF76BC96F51044E0E598FECACCCF815CB8A4837D702B2B28271592142A582 |
| SHA384 |
082574608BC3AA7412514AB3DCF21568D07E0A654860C712ED75FD4B657D49135CF996399E75F951A1BE58A985BA8ED4 |
| SHA512 |
BB2BD7EE443C4C0F9C753E328903ABCF9BD408919575E32BD255C406BEF4840608C30968C0FAB9AC249B661D2ED8393B98F2576E0C2A7675A9CBA824BB7C3000 |
| SSDEEP |
6144:mX9UWn8UK/ms30KQXKZL6+fClCVabbUz:A9UW8UgHTQX26ARAK |
| IMP |
348209A954B2DA09DA95D9D83DD01A30 |
| PESHA1 |
B896CB543BCBC2FA294A6E72ED46FE0F2C4AAB0C |
| PE256 |
B1FC580E4A8651EA5DD8D8C60DB8157AE2000E99E9BE0B8DBCAD861F52D78789 |
Runtime Data
Loaded Modules:
| Path |
| C:\WINDOWS\SYSTEM32\ntdll.dll |
| C:\WINDOWS\System32\wow64.dll |
| C:\WINDOWS\System32\wow64base.dll |
| C:\WINDOWS\System32\wow64con.dll |
| C:\WINDOWS\System32\wow64cpu.dll |
| C:\WINDOWS\System32\wow64win.dll |
| C:\WINDOWS\SysWOW64\IME\SHARED\IMEPADSV.EXE |
Signature
- Status: Signature verified.
- Serial:
33000002ED2C45E4C145CF48440000000002ED
- Thumbprint:
312860D2047EB81F8F58C29FF19ECDB4C634CF6A
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: Microsoft IME
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.22000.1 (WinBuild.160101.0800)
- Product Version: 10.0.22000.1
- Language: Language Neutral
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/73
- VirusTotal Link: https://www.virustotal.com/gui/file/b23df76bc96f51044e0e598fecacccf815cb8a4837d702b2b28271592142a582/detection
MIT License. Copyright (c) 2020-2021 Strontic.