CmdID / Files

wudriver.dll

Windows Update WUDriver Stub file version info

Library on Windows 2 known copies with hashes

Is it the real wudriver.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Update WUDriver Stub

2 known copies

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wudriver.dll · signed by Microsoft Windows

91e53981176f8c6cd251d36af1432e6fffadcae973544c75ec4dfba93dcdeb39

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\wudriver.dll · signed by Microsoft Windows

ed96b9c7f2fc22b143c4121ffdeb7b54ee74008975c4476c41d1f74b8afd2ef9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.