Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	0.17%
6.2.9200.16384 (win8_rtm.120725-1247)	5.48%
6.2.9200.16384 (win8_rtm.120725-1247)	1.99%
6.2.9200.16384 (win8_rtm.120725-1247)	0.50%
6.2.9200.16384 (win8_rtm.120725-1247)	4.98%
6.2.9200.16384 (win8_rtm.120725-1247)	0.66%
6.2.9200.16384 (win8_rtm.120725-1247)	0.17%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.33%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.33%
6.1.7600.16385 (win7_rtm.090713-1255)	33.22%
6.1.7600.16385 (win7_rtm.090713-1255)	6.48%
6.1.7600.16385 (win7_rtm.090713-1255)	0.17%
6.1.7600.16385 (win7_rtm.090713-1255)	2.99%
6.1.7600.16385 (win7_rtm.090713-1255)	17.77%
6.0.6002.18112 (vistasp2_gdr_win7ip_wpd(wmbla).090930-1800)	18.11%
6.0.6002.18112 (vistasp2_gdr_win7ip_wpd(wmbla).090930-1749)	3.16%
6.0.6000.16386 (vista_rtm.061101-2205)	1.33%
6.0.6000.16386 (vista_rtm.061101-2205)	2.16%

Relationships

wpdshext.dll (Portable Devices Shell Extension by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

GetSecurityDescriptorLength, ImpersonateLoggedOnUser, RevertToSelf, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, MakeSelfRelativeSD, GetTokenInformation, AllocateAndInitializeSid, SetEntriesInAclW, InitiateShutdownW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegCreateKeyExW, ConvertSecurityDescriptorToStringSecurityDescriptorW, SetSecurityInfo, RegisterServiceCtrlHandlerExW, SetServiceStatus, RegSetValueExW, RegCloseKey, ControlTraceW, EnableTrace, RegOpenKeyExW, RegQueryValueExW, UnregisterTraceGuids, RegisterTraceGuidsW, TraceMessage, RegEnumValueW, RegOpenCurrentUser, RegDeleteValueW, AuditQuerySystemPolicy, AuditQueryPerUserPolicy, AuditFree, RegDeleteKeyW

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, RaiseException, UnhandledExceptionFilter, GetLastError

api-ms-win-core-file-l1-2-0.dll

CreateFileW

api-ms-win-core-handle-l1-1-0.dll

DuplicateHandle, CloseHandle

api-ms-win-core-heap-l1-2-0.dll

HeapAlloc, HeapDestroy, GetProcessHeap, HeapReAlloc, HeapFree, HeapSize

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedCompareExchange64, InterlockedDecrement, InterlockedIncrement, InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-io-l1-1-1.dll

DeviceIoControl

api-ms-win-core-libraryloader-l1-1-1.dll

LoadResource, FindResourceExW, FreeLibrary, LoadLibraryExW, SizeofResource, LockResource, LoadStringW

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentThread, CreateThread, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, OpenProcessToken, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter, QueryPerformanceFrequency

api-ms-win-core-registry-l1-1-0.dll

RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, RegCloseKey, RegCreateKeyExW, RegEnumKeyExW, RegGetValueW, RegDeleteTreeW

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-2-0.dll

ReleaseMutex, WaitForSingleObject, CreateEventW, DeleteCriticalSection, InitializeCriticalSection, EnterCriticalSection, ResetEvent, LeaveCriticalSection, Sleep, SetEvent, CreateMutexW

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetTickCount, GetVersionExW

api-ms-win-core-threadpool-l1-2-0.dll

SetThreadpoolTimer, CreateThreadpoolTimer, CloseThreadpoolTimer, WaitForThreadpoolTimerCallbacks

api-ms-win-eventing-classicprovider-l1-1-0.dll

RegisterTraceGuidsW, GetTraceEnableLevel, GetTraceEnableFlags, TraceMessage, UnregisterTraceGuids, GetTraceLoggerHandle

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW

api-ms-win-security-base-l1-2-0.dll

ImpersonateLoggedOnUser, GetSecurityDescriptorLength, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AdjustTokenPrivileges, AllocateAndInitializeSid, GetTokenInformation, SetSecurityDescriptorSacl, MakeSelfRelativeSD, RevertToSelf

api-ms-win-security-lsalookup-l2-1-0.dll

LookupPrivilegeValueW

api-ms-win-security-sddl-l1-1-0.dll

ConvertSecurityDescriptorToStringSecurityDescriptorW, ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-service-core-l1-1-1.dll

SetServiceStatus, RegisterServiceCtrlHandlerExW

kernel32.dll

RegEnumValueW, RegOpenCurrentUser, RegDeleteValueW, InterlockedDecrement, InterlockedIncrement, GetLastError, MultiByteToWideChar, SetEvent, CloseHandle, WaitForSingleObject, CreateThread, CreateEventW, TerminateThread, DeviceIoControl, CreateFileW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, CreateMutexW, ReleaseMutex, SetThreadpoolTimer, InterlockedCompareExchange64, UnregisterWait, CloseThreadpoolTimer, WaitForThreadpoolTimerCallbacks, CreateThreadpoolTimer, QueryPerformanceCounter, QueryPerformanceFrequency, LocalFree, UnregisterWaitEx, LocalAlloc, lstrcmpW, RegisterWaitForSingleObject, GetVersionExW, InterlockedExchange, DuplicateHandle, GetCurrentThread, GetCurrentProcess, GetSystemPowerStatus, WTSGetActiveConsoleSessionId, ResetEvent, DelayLoadFailureHook, GetProcAddress, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, GetVersionExA, Sleep, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, QueueUserWorkItem, LoadLibraryA, ResolveDelayLoadedAPI

msvcrt.dll

DllMain

ntdll.dll

RtlCompareMemory, NtQueryVolumeInformationFile

ole32.dll

StringFromGUID2, CoFreeUnusedLibraries, CoCreateInstance, PropVariantClear, CoTaskMemFree, CoTaskMemAlloc, CoUninitialize, CoInitializeEx, PropVariantCopy

setupapi.dll

SetupDiGetDeviceInterfaceDetailW, SetupDiOpenDeviceInterfaceW, SetupDiCreateDeviceInfoList, SetupDiSetClassInstallParamsW, SetupDiCallClassInstaller, SetupDiSetDeviceRegistryPropertyW, SetupDiDestroyDeviceInfoList, SetupDiGetDevicePropertyW, SetupDiGetDeviceInstanceIdW, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceRegistryPropertyW, SetupDiGetDeviceInstallParamsW, SetupDiSetDeviceInstallParamsW, CM_Get_DevNode_Status_Ex

user32.dll

DispatchMessageW, GetMessageW, PeekMessageW, UnregisterDeviceNotification, PostThreadMessageW, RegisterDeviceNotificationW, LoadStringW, MsgWaitForMultipleObjectsEx, UnregisterClassA

userenv.dll

RegisterGPNotification, UnregisterGPNotification

wtsapi32.dll

WTSQueryUserToken, WTSEnumerateSessionsW, WTSFreeMemory

Export table

ServiceMain

SvchostPushServiceGlobals

wpdbusenum.dll

Portable Device Enumerator by Microsoft

Remove wpdbusenum.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	aa53356d60af47eacc85bc617a4f3f66
SHA1:	0486568feb53efbdd4c7fc7d2807f352f89f09e4
SHA256:	155cb8112aa382d841c1891750ff29ef4f1bf716cd9cdf0f2243209e2cccac98

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wpdbusenum.dll?

The Portable Device Enumerator enforces group policy for removable mass-storage devices. Portable Device Enumerator also enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.

Overview

wpdbusenum.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

Details

File name:	wpdbusenum.dll
Publisher:	Microsoft Corporation
Product name:	Portable Device Enumerator
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\wpdbusenum.dll
Original name:	WpdBusEnum.DLL.MUI
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	83.5 KB (85,504 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'
Shared name is 'WPDBusEnum'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	33.50%
Windows 7 Ultimate	21.00%
Windows Vista Home Premium	13.00%
Windows 7 Professional	9.50%
Windows 8 Pro	6.00%
Windows 8	3.00%
Windows Vista Home Basic	3.00%
Windows 8 Enterprise	2.50%
Windows Vista Ultimate	2.00%
Windows 8 Single Language	1.50%
Windows Seven Black Edition	1.00%
Windows Vista Business	1.00%
Windows 8.1 Pro	0.50%
Windows 7 Starter	0.50%
Windows 7 Home Basic	0.50%
Windows 7 Enterprise	0.50%
Windows Se7en Titan	0.50%
Windows 8 Pro with Media Center	0.50%

Distribution by country

United States installs about 46.94% of Portable Device Enumerator.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	28.15%
Hewlett-Packard	15.56%
Acer	12.96%
ASUS	12.59%
Toshiba	8.15%
Sony	6.67%
Intel	4.44%
GIGABYTE	2.59%
Lenovo	2.22%
Gateway	1.48%
NEC	1.48%
Samsung	0.74%
Medion	0.74%
American Megatrends	0.74%
MSI	0.74%
Alienware	0.37%
Packard Bell	0.37%

Remove Adware and Spyware Programs, FREE Download!