CmdID / Files

IHDS.dll

Microsoft IME file version info

Library on Windows 2 known copies with hashes

Is it the real IHDS.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\system32\InputMethod\SHARED\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft IME

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\InputMethod\SHARED\IHDS.DLL · signed by Microsoft Windows

617c1fb13c47ee88cd4973bf2110ee87f70ff817600adf2acf2e2bca471300f8

Version not recorded · C:\Windows\system32\IHDS.dll · signed by Microsoft Windows

e6b1a5ebf1428f5a8f45870bcbb9fa20a83c190d31b53d29bedecfa584da7413

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.