wuapihost.exe
wuapihost file version info
Program on Windows 6 known copies with hashes
Is it the real wuapihost.exe?
C:\Windows\system32\6 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wuapihost.exe · signed by Microsoft Windows
d283cd196845687a5b25c8bc16800a0819b63fc032b4c92480d446aabb862bb610.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\wuapihost.exe · signed by Microsoft Windows
5832324fa5859bcdca9fe53cac9eee0e1a6514882cdd0d759e8e66f4bc4f06ba10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wuapihost.exe · signed by Microsoft Windows
ba77d5ebacbad0939b9ee667c59bcb7143a432be91522f4397d458e62f03eedd10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wuapihost.exe · signed by Microsoft Windows
15a205b7ab319f5c87bf967f6e4ecfc5b208a1c6225944be5abf2c82c5b2c6f010.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\wuapihost.exe · signed by Microsoft Windows
5a7c14146018cdf58bba0b291ae2b6e4826dc1a45f335f4dfc378e1eb545d27b10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\wuapihost.exe · signed by Microsoft Windows
c5d699fa15205869828b3f4386082696599b59dc6c2b0c17054dac0f6b33224dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.