CmdID

CmdID / Files

OLicenseHeartbeat.exe

Office Subscription Licensing Heartbeat file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real OLicenseHeartbeat.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\
Signed byMicrosoft Corporation
ProductOffice Subscription Licensing Heartbeat, Microsoft Corporation
DescriptionOffice Subscription Licensing Heartbeat

1 known copy

16.0.12527.20482 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe · signed by Microsoft Corporation

4cfa3837ffa022ce78ff3b4f294db88669f31e5c21c327069bf3b4f1bb64d024

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.