w32.exe

Program on Windows 6 known copies with hashes

Is it the real w32.exe?

file version info and known copies

Installed inC:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\
C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\pip\_vendor\distlib\
C:\program files\GIMP 2\lib\python2.7\site-packages\distlib\

Signed byStichting Blender Foundation

6 known copies

Version not recorded · C:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\w32.exe · signed by Stichting Blender Foundation

28904b8bd7a9bbb2acd1a8798355bb217b7cab8195009142304383fe764139cc

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\pip\_vendor\distlib\w32.exe · signed by Stichting Blender Foundation

41c9f35e66be129a0c7996718b95fa69896335e7d7da880a5c3e3e33f7b4fe45

Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\distlib\w32.exe · not signed

576f2e6e8bb8dfd4a1472b3a8587ea22180a9593ccd6a42978124aea328cf813

Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\pip\_vendor\distlib\w32.exe · not signed

73c4067df90bb2b5773b7d25ad1a2a71054464dabe6229c584245dde334284cf

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\w32.exe · signed by Stichting Blender Foundation

9358fac3c0aa5d7d85b5633aa54185234ade172f1b4918ed1678c1929921565c

Version not recorded · C:\Program Files\Python38\Lib\site-packages\pip\_vendor\distlib\w32.exe · not signed

949b6765d794c53656c9afc45b90d9a2cfcae6bb30444086b29225f19242217b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.