SecurityHealthHost.exe

  • File Path: C:\Windows\system32\SecurityHealthHost.exe
  • Description: Windows Security Health Host

Hashes

Type Hash
MD5 672C2568647CE3A4F06A1CB466490AB7
SHA1 D64739946F3A93E607F53C17CE53BD7E59CE316E
SHA256 67A32C8D55F69FE8A98CA425F86DA2983027DFAF0705D07E3D270C1914E98D4D
SHA384 5A1BEDE1DCD4C31007AADC1BE9EE8E40CE9DF327985DC598C9B94BCD1BACFDFB2B5C7EA9484A47A79DD55E50D69091D7
SHA512 2A541AE4758CD2F498AF2BA4095518FEC22D8EC9D8E796B4944CFC302A0EEDC26B949B6327FDCEC74FC6A99B43FCE585A2FFCB80E18F45F775645A0AC57CEDC4
SSDEEP 1536:ofakaonCO/GnCwMslXQiAMlFdMi+J3JYP9TZTG3QrgBiTQGmCvtTJn+wRZmMvGxV:By/GnXXI+Fd9C3JYP99S3Qrg4sGmCvt0
IMP 6F1E8099156B5DDC6203D61A36DBBEC0
PESHA1 A71590F8F2E91822BEE259F223905687BF98F291
PE256 C4B3D55FD39E5E047621A15F7FB39447248B12A9B947388BF3D202D39508F526

Runtime Data

Loaded Modules:

Path
C:\Windows\System32\combase.dll
C:\Windows\System32\CRYPT32.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\system32\SecurityHealthHost.exe
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\WINTRUST.dll

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SecurityHealthHost.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 4.18.1907.16384 (WinBuild.160101.0800)
  • Product Version: 4.18.1907.16384
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/67a32c8d55f69fe8a98ca425f86da2983027dfaf0705d07e3d270c1914e98d4d/detection/

File Similarity (ssdeep match)

File Score
C:\Windows\system32\SecurityHealthHost.exe 97
C:\Windows\system32\SecurityHealthHost.exe 97
C:\WINDOWS\system32\SecurityHealthHost.exe 63

MIT License. Copyright (c) 2020-2021 Strontic.