WUDFHost.exe

File Path: C:\WINDOWS\system32\WUDFHost.exe
Description: Windows Driver Foundation - User-mode Driver Framework Host Process

Hashes

Type	Hash
MD5	`5E84F0F66C373CCBBC3FBD12AF9256DE`
SHA1	`5AEC8A610EDCF075AE4904F9BD1CEE2F266CA67E`
SHA256	`3B6DCD23432B4C9A74B7905D4713F33C5E1162436B3A8E94EF0347A1A3107C56`
SHA384	`636BF592D46D327D68FCBECB7E6ED6348CF9F36C37605EC439047758344FBAFDB8A7C2533DA146897135764C8DAD5A55`
SHA512	`7766E97BA6D36AA45188AE5E10AA81F684AC24FE02FCD7428B4A447ECB1619CE4A8CE5E76A0720174C1C7C67A7D92C8868996E7C977A68C5D250E15218C54F75`
SSDEEP	`6144:R+hiV+nID7cgJeNjKw21Lyg7aMPk9vzv2aJLK/x25uP8wIks9ANBXNvxawcmp+/B:R+hRnoXMNjKw21L/7a9vC6LK/x25uP8a`
IMP	`65C9A45070EE1A684BDB1AADA51B1FC8`
PESHA1	`86E3BF2A9DBA34E8B24BA900465A1D6991AF17E9`
PE256	`DEE254AD97CAEB16F0AC58EFDC47A3219703A5C02CD0D1B2EE5A3DF3CB5BC28B`

Runtime Data

Loaded Modules:

Path
C:\WINDOWS\System32\combase.dll
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\RPCRT4.dll
C:\WINDOWS\System32\ucrtbase.dll
C:\WINDOWS\system32\WUDFHost.exe

Signature

Status: Signature verified.
Serial: 33000002ED2C45E4C145CF48440000000002ED
Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: WUDFHost.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.22000.1 (WinBuild.160101.0800)
Product Version: 10.0.22000.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 64-bit

File Scan

VirusTotal Detections: 0/74
VirusTotal Link: https://www.virustotal.com/gui/file/3b6dcd23432b4c9a74b7905d4713f33c5e1162436b3a8e94ef0347a1a3107c56/detection

MIT License. Copyright (c) 2020-2021 Strontic.