CmdID

CmdID / Files

StartMenuExperienceHost.exe

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real StartMenuExperienceHost.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\
Signed byMicrosoft Windows

3 known copies

Version not recorded · C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe · signed by Microsoft Windows

03f57900a9324df23da95a46f58245649b0357f065b7f4128e387507ce9582e6

Version not recorded · C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe · signed by Microsoft Windows

185339cac3f7a459f91731d7dc1f50b55a19725f05bbf676bd99ba10cfb33010

Version not recorded · C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe · signed by Microsoft Windows

ec5f923e60d162c48058b7fde56a85e74e45d979ed923330b07dc32b1adad473

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.