Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.91%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.17%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.09%
6.2.9200.16384 (win8_rtm.120725-1247)	38.72%
6.2.9200.16384 (win8_rtm.120725-1247)	22.66%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.17%
6.1.7600.16385 (win7_rtm.090713-1255)	6.60%
6.1.7600.16385 (win7_rtm.090713-1255)	7.20%
6.1.7600.16385 (win7_rtm.090713-1255)	0.09%
6.1.7600.16385 (win7_rtm.090713-1255)	2.34%
6.1.7600.16385 (win7_rtm.090713-1255)	6.42%
6.1.7600.16385 (win7_rtm.090713-1255)	0.17%
6.1.7600.16385 (win7_rtm.090713-1255)	0.09%
6.1.7600.16385 (win7_rtm.090713-1255)	0.09%
6.1.7264.0 (win7_rtm.090622-1900)	0.09%
6.1.7071.0 (winmain.090326-1750)	0.09%
6.0.6000.16386 (vista_rtm.061101-2205)	0.61%
6.0.6000.16386 (vista_rtm.061101-2205)	2.52%
6.0.6000.16386 (vista_rtm.061101-2205)	0.52%
6.0.6000.16386 (vista_rtm.061101-2205)	0.09%
6.0.5730.0 (winmain.060915-1845)	0.17%
6.0.5716.32 (winmain(wmbla).060928-1756)	7.12%
6.0.5716.32 (winmain(wmbla).060818-1147)	0.09%

Relationships

wudfhost.exe (Windows Driver Foundation - proceso host del marco de controlador de modo usuario by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterServiceCtrlHandlerExW, RegQueryValueExW, TraceEvent, RegCloseKey, RegOpenKeyExW, ConvertSidToStringSidW, RegSetKeySecurity, IsValidSecurityDescriptor, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetSecurityDescriptorLength, IsValidAcl, AddAccessAllowedAceEx, InitializeAcl, EqualSid, GetAce, AddAuditAccessAceEx, AddAccessDeniedAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, CreateProcessAsUserW, RegEnumKeyExW, RegGetKeySecurity, GetSecurityDescriptorControl, GetSecurityDescriptorDacl, GetLengthSid, GetTokenInformation, OpenProcessToken, LogonUserW, RegSetValueExW, SetSecurityInfo, RegQueryInfoKeyW, EventWrite, EventRegister, EventUnregister, AddAce

api-ms-win-core-datetime-l1-1-1.dll

GetDateFormatW

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLastError, SetLastError

api-ms-win-core-file-l1-2-1.dll

CreateFileW, CompareFileTime

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree

api-ms-win-core-io-l1-1-1.dll

DeviceIoControl

api-ms-win-core-processenvironment-l1-2-0.dll

ExpandEnvironmentStringsW, SearchPathW

api-ms-win-core-processthreads-l1-1-2.dll

CreateThread, TerminateProcess, CreateProcessAsUserW, GetCurrentProcessId, GetCurrentProcess, GetCurrentThreadId, GetExitCodeProcess, ResumeThread

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegSetValueExW, RegQueryInfoKeyW, RegGetKeySecurity, RegSetKeySecurity, RegOpenKeyExW, RegQueryValueExW, RegCloseKey

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrlenW

api-ms-win-core-synch-l1-2-0.dll

CreateEventW, SetWaitableTimer, DeleteCriticalSection, CancelWaitableTimer, CreateWaitableTimerExW, WaitForMultipleObjectsEx, WaitForSingleObject, InitializeCriticalSectionAndSpinCount, SetEvent, Sleep, EnterCriticalSection, LeaveCriticalSection

api-ms-win-core-sysinfo-l1-2-1.dll

GetSystemTimeAsFileTime, GetSystemDirectoryW, GetTickCount64, GetTickCount

api-ms-win-core-threadpool-l1-2-0.dll

CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CallbackMayRunLong, TrySubmitThreadpoolCallback, CloseThreadpool, CloseThreadpoolCleanupGroup

api-ms-win-core-threadpool-legacy-l1-1-0.dll

UnregisterWaitEx

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime

api-ms-win-devices-config-l1-1-0.dll

CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, CM_Get_DevNode_Status

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableLevel, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableFlags

api-ms-win-eventing-provider-l1-1-0.dll

EventWrite, EventRegister, EventUnregister

api-ms-win-security-base-l1-2-0.dll

GetSecurityDescriptorControl, AddAuditAccessAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetLengthSid, GetAce, EqualSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, IsValidAcl, AddAccessAllowedAceEx, AddAce, AddAccessDeniedAceEx, InitializeAcl

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW

api-ms-win-service-core-l1-1-1.dll

SetServiceStatus, RegisterServiceCtrlHandlerExW

devobj.dll

DevObjOpenDevRegKey, DevObjGetDeviceRegistryProperty, DevObjGetDeviceProperty, DevObjDeleteDeviceInfo, DevObjGetDeviceInstanceId, DevObjCreateDeviceInfoList, DevObjGetDeviceInfoListDetail, DevObjEnumDeviceInfo, DevObjGetClassDevs, DevObjDestroyDeviceInfoList, DevObjOpenDeviceInfo

kernel32.dll

ResumeThread, SetEvent, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, CloseHandle, UnregisterWait, CreateEventW, InitializeCriticalSectionAndSpinCount, ExpandEnvironmentStringsW, SearchPathW, GetSystemDirectoryW, InterlockedIncrement, InterlockedDecrement, DeviceIoControl, GetLastError, GetProcAddress, GetModuleHandleW, GetVersionExW, InterlockedExchange, Sleep, InterlockedCompareExchange, RtlUnwind, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CreateFileW, WaitForSingleObject, lstrlenW, LocalFree, WaitForMultipleObjects, QueueUserWorkItem, RtlCaptureContext, GetExitCodeProcess, InitializeCriticalSection, CreateProcessW, CancelWaitableTimer, UnregisterWaitEx, SetWaitableTimer, RegisterWaitForSingleObject, CreateWaitableTimerW, VerifyVersionInfoW, VerSetConditionMask, CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroup, CloseThreadpool, TrySubmitThreadpoolCallback, CallbackMayRunLong, CloseThreadpoolCleanupGroupMembers, CompareFileTime, CreateThread, FileTimeToSystemTime, GetDateFormatW, GetTickCount64

msvcrt.dll

DllMain

ntdll.dll

RtlNtStatusToDosError, DbgPrint, NtClose, _vsnwprintf, RtlInitUnicodeString, NtQuerySystemInformation, VerSetConditionMask, RtlVerifyVersionInfo, RtlCaptureContext

rpcrt4.dll

UuidCreate, UuidFromStringW, RpcStringFreeW, UuidToStringW

setupapi.dll

SetupDiGetDeviceRegistryPropertyW, CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, CM_Get_DevNode_Status_Ex, SetupDiOpenDeviceInfoW, SetupDiCreateDeviceInfoList, SetupDiOpenDevRegKey, SetupDiGetDeviceInfoListDetailW, SetupDiGetDeviceInstanceIdW, SetupDiDeleteDeviceInfo, CM_Get_DevNode_Status, SetupDiGetDevicePropertyW

wudfplatform.dll

InitializePlatformLibrary, GetAndInitializePlatformObject, WdfGetLpcInterface, ShutdownPlatformLibrary

Export table

ServiceMain

SvchostPushServiceGlobals

wudfsvc.dll

Windows Driver Foundation - User-mode Driver Framework Service by Microsoft

Remove wudfsvc.dll

Version:	6.0.6000.16386 (vista_rtm.061101-2205)
MD5:	bcbf4873ecc317a6fc950e36383fc082
SHA1:	425ea227670af1eb2058153b82f9946eb1bb5773

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wudfsvc.dll?

Windows Driver Foundation (WDF) is a set of Microsoft tools that aid in the creation of device drivers for Windows. The User-Mode Driver Framework, for writing certain classes of driver that can run in user-mode.

About wudfsvc.dll (from Microsoft)

“WDF implements the fundamental features of a Windows driver and enables you to focus on the specific details of your hardware or filter. WDF defines a single driver model that you can use to create ob”

Overview

wudfsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows Vista.

Details

File name:	wudfsvc.dll
Publisher:	Microsoft Corporation
Product name:	Windows Driver Foundation - User-mode Driver Framework Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\wudfsvc.dll
Original name:	WUDFSvc.dll.mui
File version:	6.0.6000.16386 (vista_rtm.061101-2205)
Product version:	6.0.6000.16386
Size:	54 KB (55,296 bytes)
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'
Shared name is 'wudfsvc'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	27.00%
Windows 7 Ultimate	19.50%
Windows 8.1	11.00%
Windows 7 Professional	7.00%
Windows 8.1 Pro	6.00%
Windows 8 Pro	5.00%
Windows 8 Single Language	3.50%
Windows 8	3.50%
Windows Vista Home Premium	3.50%
Windows 8.1 Single Language	3.00%
Microsoft Windows XP	3.00%
Windows 8.1 Pro with Media Center	1.50%
Windows 7 Starter	1.50%
Windows 8 Enterprise	1.00%
Windows 7 Home Basic	1.00%
Windows 8.1 N	0.50%
Windows Seven Black Edition	0.50%
Windows Vista Home Basic	0.50%
Windows 8.1 Pro Preview	0.50%
Windows 7 Enterprise	0.50%
Windows Se7en Titan	0.50%
21 other Windows OS version

Distribution by country

United States installs about 33.00% of Windows Driver Foundation - User-mode Driver Framework Service.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	19.85%
ASUS	19.12%
Hewlett-Packard	14.34%
Lenovo	13.97%
Acer	10.66%
Toshiba	5.15%
Sony	3.68%
Intel	3.68%
GIGABYTE	2.94%
Samsung	1.84%
Alienware	0.74%
Medion	0.74%
Gateway	0.74%
MSI	0.74%
NEC	0.74%
American Megatrends	0.74%
Sahara	0.37%

Remove Adware and Spyware Programs, FREE Download!