CmdID

CmdID / Files

IMCCPHR.exe

IMCCPHR.exe file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real IMCCPHR.exe?

file version info and known copies
Installed inC:\Windows\system32\IME\SHARED\
C:\Windows\SysWOW64\IME\SHARED\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionIMCCPHR.exe

12 known copies

15.0.9600.17415 · C:\windows\system32\IME\SHARED\IMCCPHR.exe · not signed

2bc74b148d8e273e6e7b9efb97d0e3f997efbf156edd69d73314986f3a097f8b

15.0.9600.17415 · C:\windows\SysWOW64\IME\SHARED\IMCCPHR.exe · not signed

3fdd342d11e9f1e845d766ea2ff70e465afcf8ea45700f5eb696450b3b1a3900

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

784682d5b4837222c24a294d0ba47857b2a06a6da18fd0b99219b33ed4a226d3

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

e0f346692ae5ec6baa668b88c1279ed950ee1b53b49e14fee030a739e84a7a85

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

227a008863401d4c6d070a361cc036240add4adaa9f715d11575a8a99a92aa2e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

903e4fa43525d57646f55d9b3b91730f9b3a0527a7044e0340e6a2582ec19fdd

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

4565d02d44927124b4299abfae729afcb1d7b5cc963eaa75d51823dddcf8ec60

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

88e53a2c5701e460e762bc1a2dfa650d8219e5f9e9798991de8236c723f86faf

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\SysWOW64\IME\shared\IMCCPHR.exe · signed by Microsoft Windows

0af80b99555749b2a43ef6480826f99b03f64a4b5073aa9c13a7056c163fcb0e

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\IME\shared\IMCCPHR.exe · signed by Microsoft Windows

7ce685c16cb96d26816b64b4a91247756a67e17a4e82dc4f1c39f62efdf45ccc

10.0.14393.2457 (rs1_release_inmarket.180822-1743) · C:\Windows\system32\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

ea691ffd35216a4d37eef4efee030ae36b90aca41595ca3d908b232246d950c8

10.0.14393.2457 (rs1_release_inmarket.180822-1743) · C:\Windows\SysWOW64\IME\SHARED\IMCCPHR.exe · signed by Microsoft Windows

f1583329d50c857bbe57f20c0b99bd31ba2a49c5622668f40999420dfebcea62

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.