Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 3.91%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.17%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.09%
6.2.9200.16384 (win8_rtm.120725-1247) 38.72%
6.2.9200.16384 (win8_rtm.120725-1247) 22.66%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.17%
6.1.7600.16385 (win7_rtm.090713-1255) 6.60%
6.1.7600.16385 (win7_rtm.090713-1255) 7.20%
6.1.7600.16385 (win7_rtm.090713-1255) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 2.34%
6.1.7600.16385 (win7_rtm.090713-1255) 6.42%
6.1.7600.16385 (win7_rtm.090713-1255) 0.17%
6.1.7600.16385 (win7_rtm.090713-1255) 0.09%
6.1.7600.16385 (win7_rtm.090713-1255) 0.09%
6.1.7264.0 (win7_rtm.090622-1900) 0.09%
6.1.7071.0 (winmain.090326-1750) 0.09%
6.0.6000.16386 (vista_rtm.061101-2205) 0.61%
6.0.6000.16386 (vista_rtm.061101-2205) 2.52%
6.0.6000.16386 (vista_rtm.061101-2205) 0.52%
6.0.6000.16386 (vista_rtm.061101-2205) 0.09%
6.0.5730.0 (winmain.060915-1845) 0.17%
6.0.5716.32 (winmain(wmbla).060928-1756) 7.12%
6.0.5716.32 (winmain(wmbla).060818-1147) 0.09%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
SetServiceStatus, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterServiceCtrlHandlerExW, RegQueryValueExW, TraceEvent, RegCloseKey, RegOpenKeyExW, ConvertSidToStringSidW, RegSetKeySecurity, IsValidSecurityDescriptor, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetSecurityDescriptorLength, IsValidAcl, AddAccessAllowedAceEx, InitializeAcl, EqualSid, GetAce, AddAuditAccessAceEx, AddAccessDeniedAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, CreateProcessAsUserW, RegEnumKeyExW, RegGetKeySecurity, GetSecurityDescriptorControl, GetSecurityDescriptorDacl, GetLengthSid, GetTokenInformation, OpenProcessToken, LogonUserW, RegSetValueExW, SetSecurityInfo, RegQueryInfoKeyW, EventWrite, EventRegister, EventUnregister, AddAce
api-ms-win-core-datetime-l1-1-1.dll
GetDateFormatW
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLastError, SetLastError
api-ms-win-core-file-l1-2-1.dll
CreateFileW, CompareFileTime
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW, SearchPathW
api-ms-win-core-processthreads-l1-1-2.dll
CreateThread, TerminateProcess, CreateProcessAsUserW, GetCurrentProcessId, GetCurrentProcess, GetCurrentThreadId, GetExitCodeProcess, ResumeThread
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegSetValueExW, RegQueryInfoKeyW, RegGetKeySecurity, RegSetKeySecurity, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrlenW
api-ms-win-core-synch-l1-2-0.dll
CreateEventW, SetWaitableTimer, DeleteCriticalSection, CancelWaitableTimer, CreateWaitableTimerExW, WaitForMultipleObjectsEx, WaitForSingleObject, InitializeCriticalSectionAndSpinCount, SetEvent, Sleep, EnterCriticalSection, LeaveCriticalSection
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTimeAsFileTime, GetSystemDirectoryW, GetTickCount64, GetTickCount
api-ms-win-core-threadpool-l1-2-0.dll
CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CallbackMayRunLong, TrySubmitThreadpoolCallback, CloseThreadpool, CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-legacy-l1-1-0.dll
UnregisterWaitEx
api-ms-win-core-threadpool-private-l1-1-0.dll
RegisterWaitForSingleObjectEx
api-ms-win-core-timezone-l1-1-0.dll
FileTimeToSystemTime
api-ms-win-devices-config-l1-1-0.dll
CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, CM_Get_DevNode_Status
api-ms-win-eventing-classicprovider-l1-1-0.dll
GetTraceEnableLevel, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableFlags
api-ms-win-eventing-provider-l1-1-0.dll
EventWrite, EventRegister, EventUnregister
api-ms-win-security-base-l1-2-0.dll
GetSecurityDescriptorControl, AddAuditAccessAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetLengthSid, GetAce, EqualSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, IsValidAcl, AddAccessAllowedAceEx, AddAce, AddAccessDeniedAceEx, InitializeAcl
api-ms-win-security-sddl-l1-1-0.dll
ConvertSidToStringSidW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
devobj.dll
DevObjOpenDevRegKey, DevObjGetDeviceRegistryProperty, DevObjGetDeviceProperty, DevObjDeleteDeviceInfo, DevObjGetDeviceInstanceId, DevObjCreateDeviceInfoList, DevObjGetDeviceInfoListDetail, DevObjEnumDeviceInfo, DevObjGetClassDevs, DevObjDestroyDeviceInfoList, DevObjOpenDeviceInfo
kernel32.dll
ResumeThread, SetEvent, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, CloseHandle, UnregisterWait, CreateEventW, InitializeCriticalSectionAndSpinCount, ExpandEnvironmentStringsW, SearchPathW, GetSystemDirectoryW, InterlockedIncrement, InterlockedDecrement, DeviceIoControl, GetLastError, GetProcAddress, GetModuleHandleW, GetVersionExW, InterlockedExchange, Sleep, InterlockedCompareExchange, RtlUnwind, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CreateFileW, WaitForSingleObject, lstrlenW, LocalFree, WaitForMultipleObjects, QueueUserWorkItem, RtlCaptureContext, GetExitCodeProcess, InitializeCriticalSection, CreateProcessW, CancelWaitableTimer, UnregisterWaitEx, SetWaitableTimer, RegisterWaitForSingleObject, CreateWaitableTimerW, VerifyVersionInfoW, VerSetConditionMask, CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroup, CloseThreadpool, TrySubmitThreadpoolCallback, CallbackMayRunLong, CloseThreadpoolCleanupGroupMembers, CompareFileTime, CreateThread, FileTimeToSystemTime, GetDateFormatW, GetTickCount64
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError, DbgPrint, NtClose, _vsnwprintf, RtlInitUnicodeString, NtQuerySystemInformation, VerSetConditionMask, RtlVerifyVersionInfo, RtlCaptureContext
rpcrt4.dll
UuidCreate, UuidFromStringW, RpcStringFreeW, UuidToStringW
setupapi.dll
SetupDiGetDeviceRegistryPropertyW, CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, CM_Get_DevNode_Status_Ex, SetupDiOpenDeviceInfoW, SetupDiCreateDeviceInfoList, SetupDiOpenDevRegKey, SetupDiGetDeviceInfoListDetailW, SetupDiGetDeviceInstanceIdW, SetupDiDeleteDeviceInfo, CM_Get_DevNode_Status, SetupDiGetDevicePropertyW
wudfplatform.dll
InitializePlatformLibrary, GetAndInitializePlatformObject, WdfGetLpcInterface, ShutdownPlatformLibrary
Export table
ServiceMain
SvchostPushServiceGlobals

wudfsvc.dll

Windows Driver Foundation - User-mode Driver Framework Service by Microsoft

Remove wudfsvc.dll
Version:   6.0.5716.32 (winmain(wmbla).060818-1147)
MD5:   9dcf6c499773b709de8f70cd5013cb38
SHA1:   0125886cc81b39a9ff2e2f2e8e48eee63288ecd2
SHA256:   ad63481dccd8b78a81e87c79644300e18392c50512a979dd80704f1922cf8fce
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wudfsvc.dll?

Windows Driver Foundation (WDF) is a set of Microsoft tools that aid in the creation of device drivers for Windows. The User-Mode Driver Framework, for writing certain classes of driver that can run in user-mode.

About wudfsvc.dll (from Microsoft)

“WDF implements the fundamental features of a Windows driver and enables you to focus on the specific details of your hardware or filter. WDF defines a single driver model that you can use to create ob”

Overview

wudfsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). .

DetailsDetails

File name:wudfsvc.dll
Publisher:Microsoft Corporation
Product name:Windows Driver Foundation - User-mode Driver Framework Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wudfsvc.dll
Original name:WUDFSvc.dll.mui
File version:6.0.5716.32 (winmain(wmbla).060818-1147)
Product version:6.0.5716.32
Size:65.5 KB (67,072 bytes)
Build date:9/29/2006 4:52 AM
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'
  • Shared name is 'wudfsvc'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 27.00%
Windows 7 Ultimate 19.50%
Windows 8.1 11.00%
Windows 7 Professional 7.00%
Windows 8.1 Pro 6.00%
Windows 8 Pro 5.00%
Windows 8 Single Language 3.50%
Windows 8 3.50%
Windows Vista Home Premium 3.50%
Windows 8.1 Single Language 3.00%
Microsoft Windows XP 3.00%
Windows 8.1 Pro with Media Center 1.50%
Windows 7 Starter 1.50%
Windows 8 Enterprise 1.00%
Windows 7 Home Basic 1.00%
Windows 8.1 N 0.50%
Windows Seven Black Edition 0.50%
Windows Vista Home Basic 0.50%
Windows 8.1 Pro Preview 0.50%
Windows 7 Enterprise 0.50%
Windows Se7en Titan 0.50%
21 other Windows OS version

Distribution by countryDistribution by country

United States installs about 33.00% of Windows Driver Foundation - User-mode Driver Framework Service.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 19.85%
ASUS 19.12%
Hewlett-Packard 14.34%
Lenovo 13.97%
Acer 10.66%
Toshiba 5.15%
Sony 3.68%
Intel 3.68%
GIGABYTE 2.94%
Samsung 1.84%
Alienware 0.74%
Medion 0.74%
Gateway 0.74%
MSI 0.74%
NEC 0.74%
American Megatrends 0.74%
Sahara 0.37%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE