w64.exe

Program on Windows 6 known copies with hashes

Is it the real w64.exe?

file version info and known copies

Installed inC:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\
C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\pip\_vendor\distlib\
C:\program files\GIMP 2\lib\python2.7\site-packages\distlib\

Signed byStichting Blender Foundation

6 known copies

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\pip\_vendor\distlib\w64.exe · signed by Stichting Blender Foundation

20253ca3cd2fd82953eeae9e0c2b869b740da18468997b6e60a545d5b36be063

Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\distlib\w64.exe · not signed

4a9e0b329e80c74b3f3ceeacc332cdcbe5ed6ce3d23c641647ba5fb63162a2f1

Version not recorded · C:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\w64.exe · signed by Stichting Blender Foundation

4dc48ca6c8774ee89c4ae6fd03b15a57b9bb0ba1a0bf132f6f7afcbbe6db50c6

Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\pip\_vendor\distlib\w64.exe · not signed

6c5509686990bb50739f1491fd809a381459675001ed4a292e8e8e906da88da8

Version not recorded · C:\Program Files\Python38\Lib\site-packages\pip\_vendor\distlib\w64.exe · not signed

d1a473a0dd813bd3565b810dcb8ff8bc7907478a994c564d55200925894e0d32

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\pip\_vendor\distlib\w64.exe · signed by Stichting Blender Foundation

e03910ab74225ad872eec2b4e566d4e93d8b58442f04943b514000ac4dd603aa

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.