CmdID

CmdID / Files

ChtIME.exe

Microsoft IME file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ChtIME.exe?

file version info and known copies
Installed inC:\Windows\system32\InputMethod\CHT\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft IME

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

af55557a6f45c75e4b62f581ce569fcd94aea109d092804d817edd512710267b

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

915e208e33c2518a9b9ce26011def37941169e3ebbea08a5cfb928a49d8efe68

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

65f15353e9bc6ebcaed4b24a1451b609bab5d53dfa83fa3e9d3205adb61074bf

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

746036511e5173ea8b80643e03af444294b6e5b038d94ce3ecb2eb58701a27b4

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

e06a143a8a83337a3c76bcca15f15594da2ceeacec0aafbd3e8c74c90532e120

10.0.14393.2608 (rs1_release.181024-1742) · C:\Windows\system32\InputMethod\CHT\ChtIME.exe · signed by Microsoft Windows

20ad9577404979778249428042c895ccaf9bea40a7ba0aa48ea36c238e67873e

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\InputMethod\CHT\ChtIME.exe · not signed

0903b5932938a6ff8dfd64f02b1fb0f37a1cd58a04a960b962f59558695f21b7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.