CmdID

CmdID / Files

UNPUXHost.exe

UNPUXHost file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UNPUXHost.exe?

file version info and known copies
Installed inC:\Windows\system32\UNP\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionUNPUXHost

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UNP\UNPUXHost.exe · signed by Microsoft Windows

f2c942e0ccd7947425540bc7a5a21f191d837beab96ce035ea69b0d0b8a45b8d

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\UNP\UNPUXHost.exe · signed by Microsoft Windows

bf2bb12082daab0649d6e9c828102156528cdc656957c9e11b5863117ef60f51

10.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\UNP\UNPUXHost.exe · signed by Microsoft Windows

6a77b259f7344f60991d2a977b9a9be308c70999c97293138640c441264cc20a

10.0.18362.592 (WinBuild.160101.0800) · C:\WINDOWS\system32\UNP\UNPUXHost.exe · signed by Microsoft Windows

c59f1a7b6dcecc8fb2d84ae08cbe1a19122db2fbe414615d6b3f22d66007d7fa

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.