CmdID

CmdID / Files

IMSCPROP.exe

Microsoft Pinyin IME 2012 file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real IMSCPROP.exe?

file version info and known copies
Installed inC:\windows\system32\IME\IMESC\
C:\windows\SysWOW64\IME\IMESC\
ProductMicrosoft Pinyin IME 2012, Microsoft Corporation
DescriptionMicrosoft Pinyin IME 2012

2 known copies

15.0.9600.18514 · C:\windows\system32\IME\IMESC\IMSCPROP.exe · not signed

22754abb6725274e04410a98621713c4ddbc4def743940d46ab680bd032763ae

15.0.9600.18514 · C:\windows\SysWOW64\IME\IMESC\IMSCPROP.exe · not signed

c6f9843a59b1b0d2775b39b7a70ed92f513bbcf0c0209e3f9da75faf0ae73a90

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.