CmdID

CmdID / Files

ChsIME.exe

Microsoft IME file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ChsIME.exe?

file version info and known copies
Installed inC:\Windows\system32\InputMethod\CHS\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft IME

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

9e2db7abeb8a5cad42107a36b37e105073bca6c4b6727d2214c89b8e36623dc0

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

191a0b374491a028c7a4f6dda41093cb657b656a49e8e05c1392d5877e87329d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

07840ee337279e5c39480ff76605a9617e47d28a0b364c940bddbda2ad08a79f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

013c58ba96f0cc3a020a7497e3233db14fcb33d29a6e6dea3fc6a9503a050d21

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

a725999f72a036c2e84db47feb70f091246e71ac9aacb7b887f82ee3af04d7b6

10.0.14393.2608 (rs1_release.181024-1742) · C:\Windows\system32\InputMethod\CHS\ChsIME.exe · signed by Microsoft Windows

1cb95bf33fd2235ea468fe21b8afaae8c048e9a648377cb17182eab69ebc7098

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\InputMethod\CHS\ChsIME.exe · not signed

cbb1f476f531b8b4c6d4376ef3a634618966d9e3bf1821c70daf1b6d24e21b43

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.