Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	4.12%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.10%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.21%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.10%
6.2.9200.16384 (win8_rtm.120725-1247)	1.96%
6.2.9200.16384 (win8_rtm.120725-1247)	13.40%
6.1.7600.16385 (win7_rtm.090713-1255)	42.68%
6.1.7600.16385 (win7_rtm.090713-1255)	18.35%
6.0.6000.16386 (vista_rtm.061101-2205)	2.27%
6.0.6000.16386 (vista_rtm.061101-2205)	0.72%
6.0.6000.16386 (vista_rtm.061101-2205)	12.27%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.10%
5.1.2600.5512 (xpsp.080413-0852)	2.68%
5.1.2600.5512 (xpsp.080413-0852)	0.10%
5.1.2600.5512 (xpsp.080413-0852)	0.31%
5.1.2600.5512 (xpsp.080413-0852)	0.10%
5.1.2600.3311 (xpsp.080211-1047)	0.10%
5.1.2600.3077 (xpsp_sp2_qfe.070205-0007)	0.10%
5.1.2600.3077 (xpsp_sp2_gdr.070204-2255)	0.10%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.21%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

OpenProcessToken, RegQueryValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, QueryServiceConfigW, RegQueryValueExA, RegOpenKeyExA, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumValueW, TraceMessage, ChangeServiceConfig2W, CloseServiceHandle, OpenServiceW, OpenSCManagerW, RegEnumKeyExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegisterServiceCtrlHandlerExW, ChangeServiceConfigW

api-ms-win-core-com-l1-1-0.dll

CoSetProxyBlanket, StringFromGUID2, CoQueryProxyBlanket, CoRegisterClassObject, CoInitializeEx, CoUninitialize, CoRevokeClassObject, CoCreateInstance, CLSIDFromString, CoTaskMemFree, CLSIDFromProgID, CoTaskMemRealloc, CoCreateGuid, CoGetCallContext, CoTaskMemAlloc

api-ms-win-core-com-l1-1-1.dll

StringFromGUID2, CoTaskMemFree, CoCreateGuid, CoSetProxyBlanket, CoGetCallContext, CoCreateInstance, CoQueryProxyBlanket, CoTaskMemAlloc, CoInitializeEx, CoUninitialize, CLSIDFromString, CoRevokeClassObject, CLSIDFromProgID, CoRegisterClassObject, CoTaskMemRealloc

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI, DelayLoadFailureHook

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-file-l1-2-0.dll

ReadFile, CreateFileW

api-ms-win-core-file-l1-2-1.dll

ReadFile, CreateFileW

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-l1-2-0.dll

HeapDestroy

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedIncrement, InterlockedExchange, InterlockedCompareExchange, InterlockedDecrement

api-ms-win-core-libraryloader-l1-1-1.dll

LoadResource, LoadLibraryExW, FreeLibrary, FindResourceExW, SizeofResource, GetModuleFileNameW, LoadStringW, GetModuleHandleW, GetProcAddress, LockResource, DisableThreadLibraryCalls

api-ms-win-core-libraryloader-l1-2-0.dll

LoadLibraryExW, SizeofResource, DisableThreadLibraryCalls, GetModuleFileNameW, FindResourceExW, LockResource, LoadResource, FreeLibrary, LoadStringW, GetProcAddress, GetModuleHandleW

api-ms-win-core-localregistry-l1-1-0.dll

RegEnumKeyExW, RegEnumValueW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW

api-ms-win-core-memory-l1-1-1.dll

VirtualQuery, VirtualProtect, VirtualAlloc

api-ms-win-core-memory-l1-1-2.dll

VirtualQuery, VirtualAlloc, VirtualProtect

api-ms-win-core-processthreads-l1-1-0.dll

OpenProcessToken, OpenThreadToken, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId

api-ms-win-core-processthreads-l1-1-1.dll

TerminateProcess, GetCurrentProcessId, OpenThreadToken, GetCurrentThreadId, GetCurrentProcess

api-ms-win-core-processthreads-l1-1-2.dll

GetCurrentProcessId, GetCurrentThreadId, TerminateProcess, OpenThreadToken, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegQueryInfoKeyW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, RegEnumValueW, RegSetValueExW, RegDeleteTreeW, RegDeleteKeyExW

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-string-l2-1-0.dll

IsCharAlphaW, CharNextW, CharPrevW, IsCharAlphaNumericW

api-ms-win-core-synch-l1-2-0.dll

InitializeCriticalSection, WaitForSingleObject, DeleteCriticalSection, SetEvent, LeaveCriticalSection, EnterCriticalSection, CreateEventW, Sleep

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetVersionExW, GetTickCount, GetSystemInfo

api-ms-win-core-sysinfo-l1-2-1.dll

GetVersionExW, GetTickCount, GetSystemInfo, GetSystemTimeAsFileTime

api-ms-win-security-base-l1-1-0.dll

CheckTokenMembership, AllocateAndInitializeSid, FreeSid

api-ms-win-security-base-l1-2-0.dll

AllocateAndInitializeSid, CheckTokenMembership, FreeSid

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle, OpenServiceW, OpenSCManagerW

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W, QueryServiceConfigW

combase.dll

CreateErrorInfo, SetErrorInfo

kernel32.dll

GetOverlappedResult, TryEnterCriticalSection, ResetEvent, WaitForMultipleObjects, LockResource, ReadFile, UnregisterWaitEx, RegQueryValueExA, RegOpenKeyExA, InterlockedExchangeAdd, DelayLoadFailureHook, CancelIo, GetFileAttributesExW, SetLastError, SystemTimeToFileTime, GetSystemTime, FileTimeToSystemTime, GetFileAttributesW, GetFileSize, GetFileTime, CompareFileTime, GetCurrentThread, RegQueryValueExW, GetSystemDirectoryW, CopyFileW, CreateDirectoryW, DeleteFileW, WideCharToMultiByte, lstrcmpW, CreateThreadpoolWait, HeapFree, GetProcessHeap, HeapAlloc, HeapReAlloc, GetVersionExW, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, MultiByteToWideChar, lstrlenW, GetLastError, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, LoadLibraryW, GetProcAddress, GetModuleHandleW, lstrcmpiW, DisableThreadLibraryCalls, FreeLibrary, lstrcpynW, lstrcpyW, GetModuleFileNameW, lstrcatW, lstrlenA, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, CreateEventW, InterlockedIncrement, InterlockedDecrement, HeapDestroy, SetEvent, CloseHandle, WaitForSingleObject, UnregisterWait, CreateTimerQueueTimer, InterlockedCompareExchange, LoadLibraryExA, CreateFileW, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CloseThreadpoolCleanupGroup, CloseThreadpool, SetThreadpoolThreadMaximum, CreateThreadpoolCleanupGroup, CreateThreadpool, CloseThreadpoolCleanupGroupMembers, TrySubmitThreadpoolCallback, CreateThread, DeleteTimerQueueEx, CreateTimerQueue, DeleteTimerQueueTimer, CloseThreadpoolWait, WaitForThreadpoolWaitCallbacks, SetThreadpoolWait, QueueUserWorkItem, LoadLibraryA, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, RegisterWaitForSingleObject, GetShortPathNameW, lstrcpyA, lstrcmpiA, GetWindowsDirectoryW, WaitForThreadpoolWorkCallbacks, SubmitThreadpoolWork, CreateThreadpoolWork, GetSystemDefaultLocaleName, CopyFileExW, WaitForMultipleObjectsEx, CancelIoEx

msvcrt.dll

DllMain

ntdll.dll

EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwGetTraceEnableFlags, EtwTraceMessage

ole32.dll

CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree, CoUninitialize, CoInitializeEx, CoRevokeClassObject, CoRegisterClassObject, CoSetProxyBlanket, CoQueryProxyBlanket, StringFromGUID2, CLSIDFromString, CLSIDFromProgID, CoCreateGuid, CoGetCallContext, CoImpersonateClient, CoRevertToSelf, CoSuspendClassObjects

rpcrt4.dll

NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, RpcStringFreeW, UuidToStringW, UuidCreate, UuidFromStringW, UuidFromStringA

shell32.dll

SHGetFolderPathW

shlwapi.dll

SHDeleteKeyW

ssdpapi.dll

RegisterServiceEx, DeregisterService, SsdpCleanup, SsdpStartup, RegisterService, FreeSsdpMessageEx

user32.dll

LoadStringW, CharPrevW, CharNextW, PostThreadMessageW, DispatchMessageW, GetMessageW, wsprintfW, wvsprintfW

winhttp.dll

WinHttpSendRequest, WinHttpOpenRequest, WinHttpConnect, WinHttpCrackUrl, WinHttpSetStatusCallback, WinHttpReceiveResponse, WinHttpSetTimeouts, WinHttpOpen, WinHttpCloseHandle, WinHttpSetOption

ws2_32.dll

WSAAddressToStringA, freeaddrinfo, getaddrinfo, WSASocketW

Export table

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

ServiceMain

SvchostPushServiceGlobals

upnphost.dll

UPnP Device Host by Microsoft

Remove upnphost.dll

Version:	6.3.9431.0 (winmain_bluemp.130615-1214)
MD5:	23b1af95f6717867f71c84cb1d659cd9
SHA1:	87ed530a43d19a1cec7af9f04d9c8a12cdf57bd5
SHA256:	c94547a674292cde93f69a654b7566f34a7194853cfe274ed9b9243fd7779644

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is upnphost.dll?

The Universal Plug and Play (UPnP) implementation provides an architectural framework for creating self-configuring, self-describing devices and services. Because UPnP supports automatic discovery, devices managed by UPnP require no set up by users or network administrators. UPnP enables a device to dynamically join a network, obtain an IP address, and convey its capabilities upon request.

About upnphost.dll (from Microsoft)

“Universal Plug and Play (UPnP) is a distributed, open networking architecture that enhances peer-to-peer network connectivity for personal computers, wireless devices, and other intelligent appliances”

Details

File name:	upnphost.dll
Publisher:	Microsoft Corporation
Product name:	UPnP Device Host
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\upnphost.dll
Original name:	unpnhost.dll.mui
File version:	6.3.9431.0 (winmain_bluemp.130615-1214)
Product version:	6.3.9431.0
Size:	425.5 KB (435,712 bytes)
Build date:	6/16/2013 2:05 AM
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'
Shared name is 'upnphost'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	35.50%
Windows 7 Ultimate	16.00%
Windows 8.1	11.00%
Windows 7 Professional	8.00%
Windows 8.1 Pro	5.50%
Windows 8	5.50%
Windows Vista Home Premium	4.50%
Windows 8 Pro	3.50%
Windows 8.1 Single Language	2.50%
Microsoft Windows XP	2.00%
Windows 8 Single Language	1.00%
Windows 7 Enterprise	1.00%
Windows 7 Home Basic	0.50%
Windows 8.1 Enterprise	0.50%
Windows Vista Home Basic	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 8.1 Pro Preview	0.50%
Windows Vista Business	0.50%
Windows 8.1 Pro with Media Center	0.50%
Windows 8 Enterprise	0.50%

Distribution by country

United States installs about 48.99% of UPnP Device Host.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	25.00%
Hewlett-Packard	15.91%
ASUS	14.39%
Acer	12.12%
Toshiba	12.12%
Lenovo	6.82%
Sony	5.30%
GIGABYTE	2.65%
MSI	1.52%
Alienware	0.76%
Samsung	0.76%
Intel	0.76%
Gateway	0.76%
American Megatrends	0.76%
Sahara	0.38%

Remove Adware and Spyware Programs, FREE Download!