Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 5.89%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.12%
6.2.9200.16384 (win8_rtm.120725-1247) 55.36%
6.2.9200.16384 (win8_rtm.120725-1247) 21.20%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.24%
6.1.7600.16385 (win7_rtm.090713-1255) 5.30%
6.1.7600.16385 (win7_rtm.090713-1255) 4.83%
6.1.7600.16385 (win7_rtm.090713-1255) 2.24%
6.1.7600.16385 (win7_rtm.090713-1255) 2.47%
6.0.6000.16386 (vista_rtm.061101-2205) 1.18%
6.0.6000.16386 (vista_rtm.061101-2205) 0.59%
6.0.6000.16386 (vista_rtm.061101-2205) 0.47%
6.0.5716.32 (winmain(wmbla).060928-1756) 0.12%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, TraceMessage, UnregisterTraceGuids, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, TraceEvent, ConvertStringSidToSidW, RegSetValueExW, RevertToSelf, EventRegister, EventWrite, EventUnregister, EventActivityIdControl
api-ms-win-core-com-l1-1-1.dll
CLSIDFromString, CoInitializeEx, CoUninitialize
api-ms-win-core-errorhandling-l1-1-1.dll
SetLastError, GetLastError, RaiseException, SetUnhandledExceptionFilter, UnhandledExceptionFilter
api-ms-win-core-file-l1-2-1.dll
CreateFileW, WriteFile, FlushFileBuffers, ReadFile
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-2-0.dll
HeapAlloc, GetProcessHeap, HeapFree, HeapSetInformation
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalAlloc, LocalFree
api-ms-win-core-io-l1-1-1.dll
GetOverlappedResult, DeviceIoControl
api-ms-win-core-libraryloader-l1-1-1.dll
LoadLibraryExW, GetModuleHandleA, GetProcAddress, LoadLibraryExA, FreeLibrary
api-ms-win-core-namedpipe-l1-2-0.dll
WaitNamedPipeW, SetNamedPipeHandleState, TransactNamedPipe
api-ms-win-core-processenvironment-l1-2-0.dll
SetEnvironmentVariableW, ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-2.dll
GetCurrentThread, TlsFree, GetCurrentProcess, TlsSetValue, GetCurrentProcessId, TlsAlloc, TlsGetValue, GetCurrentThreadId, TerminateProcess, CreateThread
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegCloseKey, RegQueryValueExW, RegSetValueExW, RegOpenKeyExW
api-ms-win-core-rtlsupport-l1-2-0.dll
RtlCaptureContext
api-ms-win-core-synch-l1-2-0.dll
DeleteCriticalSection, InitializeCriticalSection, Sleep, WaitForSingleObject, CreateEventW, EnterCriticalSection, SetEvent, WaitForMultipleObjectsEx, InitializeCriticalSectionAndSpinCount, LeaveCriticalSection
api-ms-win-core-sysinfo-l1-2-1.dll
GetTickCount, GetSystemTimeAsFileTime, GetSystemDirectoryW, GetOsSafeBootMode
api-ms-win-core-threadpool-l1-2-0.dll
SetThreadpoolThreadMinimum, SetThreadpoolThreadMaximum, CloseThreadpool, CreateThreadpool, CreateThreadpoolWait, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks, CloseThreadpoolWait, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, CreateThreadpoolCleanupGroup
api-ms-win-eventing-classicprovider-l1-1-0.dll
TraceMessage, RegisterTraceGuidsW, GetTraceEnableFlags, GetTraceEnableLevel, UnregisterTraceGuids, GetTraceLoggerHandle
api-ms-win-eventing-provider-l1-1-0.dll
EventActivityIdControl, EventUnregister, EventWrite, EventRegister
api-ms-win-security-base-l1-2-0.dll
RevertToSelf
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSidToSidW
devobj.dll
DevObjGetDeviceRegistryProperty, DevObjCreateDeviceInfoList, DevObjOpenDevRegKey, DevObjGetDeviceInstanceId, DevObjDestroyDeviceInfoList, DevObjEnumDeviceInfo, DevObjGetClassDevs
kernel32.dll
GetProcAddress, GetModuleHandleW, GetVersionExW, WaitForSingleObject, CloseHandle, TlsFree, GetLastError, TlsGetValue, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, TlsSetValue, TlsAlloc, InitializeCriticalSectionAndSpinCount, GetSystemDirectoryW, HeapSetInformation, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, CreateThread, LocalFree, CreateEventW, SetEvent, GetOverlappedResult, DeviceIoControl, CreateFileW, SetEnvironmentVariableW, InitializeCriticalSection, InterlockedExchange, BindIoCompletionCallback, FreeLibrary, LoadLibraryExW, GetCurrentProcessId, HeapFree, HeapAlloc, GetProcessHeap, FlushFileBuffers, Sleep, ReadFile, WriteFile, GetCurrentThread, VerifyVersionInfoW, VerSetConditionMask, LocalAlloc, LoadLibraryA, RaiseException, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, OutputDebugStringA, RtlCaptureContext, WaitNamedPipeW, SetNamedPipeHandleState, TransactNamedPipe, ExpandEnvironmentStringsW, SetThreadpoolThreadMinimum, SetThreadpoolThreadMaximum, CloseThreadpool, CreateThreadpool, CreateThreadpoolWait, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks, CloseThreadpoolWait, WaitForMultipleObjects, LoadLibraryExA
msvcrt.dll
DllMain
ntdll.dll
DbgPrintEx, RtlNtStatusToDosError, NtQueryInformationFile, RtlUnwind, NtSetInformationFile, RtlInitUnicodeString, RtlSetIoCompletionCallback, VerSetConditionMask, RtlVerifyVersionInfo
ole32.dll
CoInitializeEx, CLSIDFromString, CoUninitialize
rpcrt4.dll
UuidFromStringW
user32.dll
GetSystemMetrics
wudfplatform.dll
GetAndInitializePlatformObject, ShutdownPlatformLibrary, WudfWaitForDebugger, WudfDebugBreakPoint, WudfIsUserDebuggerPresent, WdfGetLpcInterface, InitializePlatformLibrary, WudfIsKernelDebuggerPresent

WUDFHost.exe

Windows Driver Foundation - User-mode Driver Framework Host Process by Microsoft

Remove WUDFHost.exe
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   8abfe00f213f2571498f1b8fd7939a98
SHA1:   803e2aa7eb71676c3d0981fa01be9a38ffaf050d
SHA256:   b557ec9efd33612bafe01ffd304b50efb8c3c19763470560da950b5ab4a9ac9c
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WUDFHost.exe?

Windows Driver Foundation (WDF) is a set of Microsoft tools that aid in the creation of device drivers for Windows. The User-Mode Driver Framework, for writing certain classes of driver that can run in user-mode.

About WUDFHost.exe (from Microsoft)

WDF implements the fundamental features of a Windows driver and enables you to focus on the specific details of your hardware or filter. WDF defines a single driver model that you can use to create ob

Overview

WUDFHost.exe executes as a process with LOCAL SERVICE privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). This version is installed on Windows 8 and is compiled as a 64 bit program.

DetailsDetails

File name:WUDFHost.exe
Publisher:Microsoft Corporation
Product name:Windows Driver Foundation - User-mode Driver Framework Host Process
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wudfhost.exe
Original name:WUDFHost.exe.mui
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:224.5 KB (229,888 bytes)
Digital DNA
Entropy:5.856292
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00118010%
0.028634%
Kernel CPU:0.00075440%
0.013761%
User CPU:0.00042569%
0.014873%
Kernel CPU time:1,185,471 ms/min
100,923,805ms/min
CPU cycles:371,597/sec
17,470,203/sec
Context switches:8/sec
284/sec
Memory
Private memory:2.95 MB
21.59 MB
Private (maximum):6.51 MB
Private (minimum):4.03 MB
Non-paged memory:2.95 MB
21.59 MB
Virtual memory:54.66 MB
140.96 MB
Virtual memory (peak):76.07 MB
169.69 MB
Working set:4.86 MB
18.61 MB
Working set (peak):7.3 MB
37.95 MB
Page faults:236,293/min
2,039/min
I/O
I/O read transfer:3.4 KB/sec
1.02 MB/min
I/O read operations:6/sec
343/min
I/O write transfer:6.35 KB/sec
274.99 KB/min
I/O write operations:2/sec
227/min
I/O other transfer:2.6 KB/sec
448.09 KB/min
I/O other operations:8/sec
1,671/min
Resource allocations
Threads:9
12
Handles:242
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-4e5b250a-5501-4f4c-8754-87e9a816c82e -systemeventportnamC:hostprocess-c134e64c-5af3-4291-a334-e46b05f29282 -iocanceleventportnamC:hostprocess-be206a0d-bec2-4765-a26c-28fc34ab4c25 -nonstatechangingeventportnamC:hostprocess-df4f30f5-b2c9-48f8-8fb6-2dbb31fb041e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:eb0c080f-0cfc-4e2c-9b8d-b6d51d3e038c -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-3fa0878d-a51d-424e-ab88-28420019060f -systemeventportnamC:hostprocess-6748fae5-a3f8-4747-8357-1ae221db7a5f -iocanceleventportnamC:hostprocess-6c64eabf-b0ca-4f5a-bd08-1720f749c188 -nonstatechangingeventportnamC:hostprocess-a2423966-07a0-4c44-9bca-5fe9321a410e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:a4056623-4928-4ec4-9ba9-0b1cd2a1c2f9 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-f7c08d0f-c206-4cce-823e-5e4cdf87b205 -systemeventportnamC:hostprocess-4bf524b8-ad07-44e0-89e9-bd4a68c42cc2 -iocanceleventportnamC:hostprocess-32a40caa-2bdd-4d12-b785-30f29be46c03 -nonstatechangingeventportnamC:hostprocess-32302b7f-ff38-4131-b9aa-b8c91a25a7c0 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:7ececdec-a41a-4e32-96a7-fb47e445683b -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-922dd549-d7cb-4c65-8b62-f50cef62af5f -systemeventportnamC:hostprocess-3fd0c5f2-1a70-4057-8f69-c9393f18242f -iocanceleventportnamC:hostprocess-15f25c36-12af-490b-ae62-979ee8bbde5b -nonstatechangingeventportnamC:hostprocess-4f9f2b97-1330-4c44-8c67-fafca6863366 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:caf90dea-d686-41a1-b10c-2a1ddbf84c56 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-2dcb715a-fe0b-41d7-9861-f546bf49b0e6 -systemeventportnamC:hostprocess-0f2479db-cdee-41ab-9538-450ef94ba33d -iocanceleventportnamC:hostprocess-6863c5c6-66d6-401a-b2a3-3f21daadd1cb -nonstatechangingeventportnamC:hostprocess-189fecc4-88fb-48c0-99a4-13fbd84794d4 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:099b8b51-810c-48dc-93ac-8ef1082424cb -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-085d95ee-8dd8-444a-94e4-e66d517ebbf3 -systemeventportnamC:hostprocess-78834654-f10d-43e1-a72f-ded1167eb110 -iocanceleventportnamC:hostprocess-a9392e10-8d13-4df5-814c-09b52b4eb244 -nonstatechangingeventportnamC:hostprocess-e07d44d9-8097-4829-8049-3c85a3a3005e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:630a63fe-644f-4525-9797-bf90fc06ccd1 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-56501c26-a0ea-4425-896a-ce730e3d4760 -systemeventportnamC:hostprocess-90cc6c53-b8ac-4259-8275-7dd01da16183 -iocanceleventportnamC:hostprocess-27dc9a37-467b-46d8-a5ef-ac6fb68bbdd2 -nonstatechangingeventportnamC:hostprocess-1b39fa2b-33df-4541-a3d2-2e546bfe3e14 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:6a4eba47-3de1-4197-8f70-83cd5bf82826 -devi
  • (200 more)
Owner:LOCAL SERVICE
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.05703043%
0.272967%
Kernel CPU:0.02480816%
0.107585%
User CPU:0.03222227%
0.165382%
CPU cycles:1,121,977/sec
5,741,424/sec
Context switches:3/sec
79/sec
Memory:1.74 MB
1.16 MB
SensorsHIDClassDriver.dll
Total CPU:0.04350652%
Kernel CPU:0.01184635%
User CPU:0.03166017%
CPU cycles:806,286/sec
Memory:580 KB
combase.dll
Total CPU:0.03189819%
Kernel CPU:0.01449918%
User CPU:0.01739901%
CPU cycles:377,148/sec
Context switches:4/sec
Memory:1.69 MB
msvcrt.dll (Windows NT CRT DLL by Microsoft)
Total CPU:0.01589706%
Kernel CPU:0.00956395%
User CPU:0.00633311%
CPU cycles:433,601/sec
Context switches:1/sec
Memory:660 KB
tcwbf.dll
Total CPU:0.00625703%
Kernel CPU:0.00024379%
User CPU:0.00601324%
CPU cycles:314,636/sec
Context switches:8/sec
Memory:992 KB
ESENT.dll
Total CPU:0.00329991%
Kernel CPU:0.00003041%
User CPU:0.00326950%
CPU cycles:170,222/sec
Memory:2.75 MB
MSVCR80.dll
Total CPU:0.00155753%
Kernel CPU:0.00083713%
User CPU:0.00072040%
CPU cycles:293,431/sec
Context switches:2/sec
Memory:804 KB
WpdFs.dll
Total CPU:0.00150334%
Kernel CPU:0.00113411%
User CPU:0.00036923%
CPU cycles:40,816/sec
Memory:304 KB
WUDFHost.exe (main module)
Total CPU:0.00115649%
Kernel CPU:0.00076510%
User CPU:0.00039139%
CPU cycles:32,494/sec
Memory:240 KB
LocationProvider.dll
Total CPU:0.00040734%
Kernel CPU:0.00014645%
User CPU:0.00026088%
CPU cycles:16,093/sec
Memory:208 KB
wlanapi.dll
Total CPU:0.00038018%
Kernel CPU:0.00013686%
User CPU:0.00024331%
CPU cycles:57,840/sec
Memory:280 KB
SensorsClassExtension.dll
Total CPU:0.00036908%
Kernel CPU:0.00028947%
User CPU:0.00007961%
CPU cycles:8,369/sec
Memory:136 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 28.00%
Windows 7 Ultimate 14.50%
Windows 8.1 11.50%
Windows 7 Professional 10.50%
Windows 8 Pro 7.50%
Windows 8.1 Pro 6.50%
Windows 8 4.50%
Windows 8.1 Single Language 3.50%
Windows 8 Single Language 3.00%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Enterprise 2.00%
Windows Vista Home Premium 2.00%
Windows Seven Black Edition 1.00%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Basic 0.50%
Windows 7 Starter 0.50%
Windows 8.1 Enterprise 0.50%
Windows 7 Enterprise 0.50%
Windows Se7en Titan 0.50%

Distribution by countryDistribution by country

United States installs about 41.12% of Windows Driver Foundation - User-mode Driver Framework Host Process.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 19.31%
ASUS 16.99%
Hewlett-Packard 16.22%
Dell 16.22%
Acer 11.58%
Sony 6.18%
GIGABYTE 3.09%
Toshiba 2.32%
Intel 2.32%
Samsung 1.54%
Medion 1.54%
Gateway 0.77%
NEC 0.77%
Sahara 0.39%
Alienware 0.39%
American Megatrends 0.39%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE