CmdID

CmdID / Files

SecurityHealthHost.exe

Windows Security Health Host file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SecurityHealthHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Security Health Host

8 known copies

10.0.22000.100 (WinBuild.160101.0800) · C:\WINDOWS\system32\SecurityHealthHost.exe · signed by Microsoft Windows

ccf7f23a3289bee64b2185e8df470d925bf6183f9d3fcfc581fd03591885e309

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

67a32c8d55f69fe8a98ca425f86da2983027dfaf0705d07e3d270c1914e98d4d

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

690da9b46e5f3f4c15344266e88fb2b4760d54e2f33e8fa1d4ad1329e1f7ba6c

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

989f652848f7267aaf5b22f6d1ec1453377412f1fe21a78d05bf6617f6bb8872

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

9e51ae18554e6bf48b475be5cb5d8149691a5e73a97a53cae00448bf5c86b2b8

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

a324bc004a2cc89da39f8a32d09f71d668e19bb41dd58cb921ac64cb5ae8fc51

4.18.1907.16384 (WinBuild.160101.0800) · C:\Windows\system32\SecurityHealthHost.exe · signed by Microsoft Windows

bd6a744264071b613623cf3cd18984a7e3f6fd55da8b65d47971ef33f7de96b4

4.18.1901.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\SecurityHealthHost.exe · signed by Microsoft Windows

efd17df1e3995963bfa87f89648ea184b09960c318134f2cdd13786b25edddba

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.