CmdID

CmdID / Files

WUDFCompanionHost.exe

Windows Driver Foundation - User-mode Driver Companion Framework Host Process file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WUDFCompanionHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Driver Foundation - User-mode Driver Companion Framework Host Process

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WUDFCompanionHost.exe · signed by Microsoft Windows

62cd126497acb732cf5463f5149f10afb212cb7c20d52c70ef2c166f7ca89d71

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WUDFCompanionHost.exe · signed by Microsoft Windows

493433767c039a105a6ff53305cf0cf34f85a737d94bafca4e449284675ae34f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WUDFCompanionHost.exe · signed by Microsoft Windows

4194ebd3ff47bb9ef42dbcef72d9c14960bd7815a2ab1a0213ca9dc30582f869

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WUDFCompanionHost.exe · signed by Microsoft Windows

648cd26cb4f955f1c5f0fd6a4d3cd58a8d1f6eb6b082a7791b5b2a0a5b46f327

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.