wuauclt.exe

Windows ProcessMicrosoft Corporation

Also called wuauclt, windows update client, automatic updates client

WindowsSystem Component

Windows Update AutoUpdate client. Older tasks and some tools still launch it. Current orchestration often uses UsoClient.exe instead.

What you need to know

This is a Windows Update client stub. UsoClient.exe is the Update Orchestrator command people see more now.

wuauclt.exe is the historic Automatic Updates client. Scheduled tasks and support articles still mention /detectnow. On current Windows, UsoClient.exe StartScan is the usual kick. Both can exist.

Safe?: Yes, in System32
Still used?: Sometimes. UsoClient is the newer kick
Should I delete it?: No

Feex says

If wuauclt flashed and vanished, I would treat it as an Update detect, not as a breach. The download still belongs to wuauserv and the Update stack.

What is wuauclt.exe?

wuauclt.exe is Windows Update AutoUpdate Client. It is a System32 binary that older Update tasks call.

What does it do?

It can ask the Update agent to detect or show UI. It is not TiWorker applying packages and it is not BITS itself.

Why is it running?

A leftover scheduled task, a support script, or compatibility still invoked it. A forever-running wuauclt with a weird command line is the case to inspect.

Is it safe?

Usually safe

System32 wuauclt is Microsoft. A wuauclt.exe in AppData is a classic fake name from the Automatic Updates era.

A legitimate copy normally runs from:

C:\Windows\System32\wuauclt.exe

Older Update client
Newer kick: UsoClient.exe
Service: wuauserv

Can I end it?

Usually unnecessary

Ending wuauclt.exe does not stop Windows Update. Pause updates in Settings if you need the network.

Can I remove it?

Do not delete wuauclt.exe. Some scheduled tasks still point at this client. Pause updates in Settings if you need the network.

Should it start with Windows?

A task may start it. It is not a chat Startup entry.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Short spike
Memory: Small
Network: Detect, not the whole download
Disk: Low

File information

wuauclt.exe file information
Executable name	wuauclt.exe
Common legitimate path	C:\Windows\System32\wuauclt.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

Guides still say wuauclt /detectnow

On current Windows that switch is often a no-op. Use UsoClient or Settings > Check for updates.

Fake wuauclt in Temp

Open file location. System32 only.

Troubleshooting

Diagnose before you change anything destructive.

Match the command line to a task

Task Scheduler under Windows Update or UpdateOrchestrator.

Do not replace the client from a zip

The file is signed system.

Technical details

wuauclt.exe technical details
Image name	wuauclt.exe
Role	Legacy Windows Update client

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: Windows Update · Client and orchestrator
Microsoft Support: Windows · Public support naming
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.