CmdID

CmdID / Files

IcsEntitlementHost.exe

ICS Entitlement Host file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real IcsEntitlementHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionICS Entitlement Host

6 known copies

10.0.22000.41 (WinBuild.160101.0800) · C:\WINDOWS\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

24b148703179260d5284669de74022a9c33ab99e652d451e0ae121d6ee1ef306

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

e7619637635a78f1f16a4a40c962fccf207d1edd4f64579ef192da7791b4cfdc

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

caf30f94d34a439eb468f314cc360e50da8a140d0c4294d28ae1ea4298e4fcec

10.0.18362.387 (WinBuild.160101.0800) · C:\WINDOWS\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

5c108a5b67bcee3278873d2877df0a5f9129fe047c9b81265492a5268ffe5c22

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

c34d682afde0423f9e4dcdaa3a88392281f35aa21d2bc301ca28f9938286b519

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\IcsEntitlementHost.exe · signed by Microsoft Windows

e0aeb4758bd99d1ee66e38bb457638acd6750a01c2cd5a32abbbfe00ebbc2f5a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.