CmdID

CmdID / Files

TextInputHost.exe

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TextInputHost.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\
C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation

4 known copies

2001.22012.0.3920 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe · signed by Microsoft Windows

43b8f0576a5d521886c489386e2030f71c981175e2d775f3513d5cb5a856ba1e

2001.22012.0.551 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe · signed by Microsoft Windows

399dfaa74cf9c50426a780137c6a06ba78d85e5d12cc9c8d89ff2352a0be46d4

2001.22012.0.31 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe · signed by Microsoft Windows

c480752fba0e9daf476b548248a47a2c6bf14f3de8045945fbee9f9e92a7b41a

421.21100.95.0 · C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe · signed by Microsoft Windows

f7687eeafe4edb0577faef5659bcecf5cb8344bb0b16de0026820d5fa872545d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.