Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.6.4.2 63.64%
1.6.4.2 4.55%
1.6.0.9 31.82%

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegQueryValueExW, LookupPrivilegeValueW, OpenProcessToken, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, SetEntriesInAclW, CreateWellKnownSid, InitializeSecurityDescriptor, RegOpenKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, ControlService, DeleteService, CreateServiceW, AdjustTokenPrivileges, OpenSCManagerW, OpenServiceW, CloseServiceHandle, SetServiceStatus, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCloseKey
dbghelp.dll
MiniDumpWriteDump
kernel32.dll
DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetLastError, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, SetPriorityClass, GetCurrentThread, SetThreadPriority, GetCommandLineW, CreateThread, SetProcessWorkingSetSize, CreateDirectoryW, LoadLibraryW, GetDriveTypeW, WaitForSingleObject, InterlockedExchange, Sleep, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, CloseHandle, CreateFileW, GetLocalTime, LocalFree, LocalAlloc, lstrlenW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetProcAddress, GetModuleHandleW, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, FreeLibrary, MultiByteToWideChar, LoadLibraryExW, GetVolumeNameForVolumeMountPointW, GetVolumePathNameW, CreateEventW, InitializeCriticalSection, SetEvent, ResetEvent, WaitForMultipleObjects
mscoree.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoReleaseServerProcess, CoResumeClassObjects, CoCreateInstance, StringFromGUID2, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoInitializeEx, ProgIDFromCLSID, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoInitializeSecurity, CoAddRefServerProcess
shell32.dll
SHGetSpecialFolderPathW
user32.dll
GetMessageW, LoadStringW, CharNextW, CharUpperW, TranslateMessage, PostThreadMessageW, MessageBoxW, DispatchMessageW

WDRulesEngine.exe

WD SmartWare by Western Digital Technologies (Signed)

Remove WDRulesEngine.exe
Version:   1.6.4.2
MD5:   fd2d1c60cdbdfab63ef182539d8ffc2d
SHA1:   515f1d4fc1e6c0bc985c2e121c8049a7cbc566a3
SHA256:   6774cacc3eac8764e860c2aabd6f3843ad2c8e6e8d4943b3785e8c7a85fab1e0

Overview

wdrulesengine.exe runs as a service under the name WDRulesService (WDRulesService) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including WD SmartWare published by Western Digital Technologies, Inc., WD SmartWare from Western Digital Technologies, Inc. and WD SmartWare by Western Digital Technologies, Inc.. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Western Digital Technologies which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:wdrulesengine.exe
Publisher:Western Digital
Product name:WD SmartWare
Description:WD Rules Engine
Typical file path:C:\Program Files\western digital\wd smartware\wdrulesengine.exe
File version:1.6.4.2
Size:1.12 MB (1,177,536 bytes)
Certificate
Issued to:Western Digital Technologies
Authority (CA):VeriSign
Effective date:Friday, December 10, 2010
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following programs will install this file
WD SmartWare
 Western Digital Technologies, Inc.
6% remove
“WD SmartWare™ software is an easy-to-use backup application that gives you the power to protect your data automatically—Relax! Your data is safe. Automatic, continuous backup instantly makes a second copy whenever you add or change a file. Bring back lost files effortlessly—Retrieve your valuable data to its original location whether you have lost everything, deleted a file, or just overwritten an important file. Customize your backup, ...”

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • WDRulesService
  • 'WDRulesService' (WD Rules)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00138841%
0.028634%
Kernel CPU:0.00046908%
0.013761%
User CPU:0.00091933%
0.014873%
Kernel CPU time:433,126,271 ms/min
100,923,805ms/min
CPU cycles:4,543,994/sec
17,470,203/sec
Memory
Private memory:17.16 MB
21.59 MB
Private (maximum):9.38 MB
Private (minimum):943.43 KB
Non-paged memory:17.16 MB
21.59 MB
Virtual memory:165.34 MB
140.96 MB
Virtual memory (peak):169.19 MB
169.69 MB
Working set:2.52 MB
18.61 MB
Working set (peak):20.39 MB
37.95 MB
Page faults:1,189,790/min
2,039/min
I/O
I/O read transfer:489 Bytes/sec
1.02 MB/min
I/O read operations:20/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:406 Bytes/sec
448.09 KB/min
I/O other operations:3,423/sec
1,671/min
Resource allocations
Threads:7
12
Handles:256
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\western digital\wd smartware\wdrulesengine.exe"
Owner:SYSTEM
Windows Service
Service name:WDRulesService
Display name:WDRulesService
Description:“WD SmartWare Rules Engine”
Type:Win32OwnProcess
Parent process:services.exe (by Microsoft)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.11720641%
0.272967%
Kernel CPU:0.02622760%
0.107585%
User CPU:0.09097881%
0.165382%
CPU cycles:1,831,907/sec
5,741,424/sec
Memory:1.66 MB
1.16 MB
WDRulesEngine.exe (main module)
Total CPU:0.00262190%
Kernel CPU:0.00086222%
User CPU:0.00175968%
CPU cycles:73,342/sec
Memory:1.21 MB
wow64win.dll
Total CPU:0.00030083%
Kernel CPU:0.00021050%
User CPU:0.00009033%
CPU cycles:25,617/sec
Memory:360 KB
wow64.dll
Total CPU:0.00018747%
Kernel CPU:0.00002678%
User CPU:0.00016068%
CPU cycles:1,776/sec
Memory:252 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 36.36%
Windows 8 Pro 27.27%
Windows 8 Pro with Media Center 13.64%
Windows 7 Ultimate 9.09%
Windows 7 Professional 9.09%
Windows 8 4.55%

Distribution by countryDistribution by country

United States installs about 63.64% of WD SmartWare.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 48.00%
Hewlett-Packard 16.00%
Dell 16.00%
Acer 8.00%
Sony 8.00%
GIGABYTE 4.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE