CmdID

CmdID / Files

InputPersonalization.exe

Input Personalization Server file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real InputPersonalization.exe?

file version info and known copies
Installed inC:\Program Files\Common Files\microsoft shared\ink\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionInput Personalization Server

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe · signed by Microsoft Windows

4667758a94cbdba6fbd13d3b3d6bd6a5281d224fc0569976ab0d22c18c623996

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe · signed by Microsoft Windows

add4d8bbc19ee38b5bb9390b03d7588042946e91b94ff98a6e6a1b9f7cb0d436

10.0.17763.1 (WinBuild.160101.0800) · C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe · signed by Microsoft Windows

249103e334745d187c729b73fed842e76d138333668d06747a8d170840e7013d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.