CmdID

CmdID / Files

WallpaperHost.exe

Wallpaper Host Process file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WallpaperHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWallpaper Host Process

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WallpaperHost.exe · signed by Microsoft Windows

e7a71c7401b1ddfa823803b5e5484fddc66466477a55394aa551a633cedf64f1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WallpaperHost.exe · signed by Microsoft Windows

d3cf86e66420b2da75b0be38fa78fd8e41f01ad827f9d5eebda59182d394968c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WallpaperHost.exe · signed by Microsoft Windows

9ab56a6d354e7866cb8215e054fdaa65bc98e6d7faff54c7053c2ac25e9ebecd

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WallpaperHost.exe · signed by Microsoft Windows

564f1c7b9f5e9818656dfdce2bdfb7af2c7a78819e67a2f8766cb2dd785f01e5

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\WallpaperHost.exe · signed by Microsoft Windows

fad8c9c0f8bceb1b897aa9e989e5549a8c4e4dc02e07fc47a7f6f41d86751376

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\WallpaperHost.exe · not signed

552b590ee6c54f05aff5faf910615ef897328b3338cf69f35cd5924a2ba6eb1b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.