Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 4.12%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.10%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.21%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.10%
6.2.9200.16384 (win8_rtm.120725-1247) 1.96%
6.2.9200.16384 (win8_rtm.120725-1247) 13.40%
6.1.7600.16385 (win7_rtm.090713-1255) 42.68%
6.1.7600.16385 (win7_rtm.090713-1255) 18.35%
6.0.6000.16386 (vista_rtm.061101-2205) 2.27%
6.0.6000.16386 (vista_rtm.061101-2205) 0.72%
6.0.6000.16386 (vista_rtm.061101-2205) 12.27%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.10%
5.1.2600.5512 (xpsp.080413-0852) 2.68%
5.1.2600.5512 (xpsp.080413-0852) 0.10%
5.1.2600.5512 (xpsp.080413-0852) 0.31%
5.1.2600.5512 (xpsp.080413-0852) 0.10%
5.1.2600.3311 (xpsp.080211-1047) 0.10%
5.1.2600.3077 (xpsp_sp2_qfe.070205-0007) 0.10%
5.1.2600.3077 (xpsp_sp2_gdr.070204-2255) 0.10%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.21%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, RegQueryValueExW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, OpenThreadToken, QueryServiceConfigW, RegQueryValueExA, RegOpenKeyExA, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumValueW, TraceMessage, ChangeServiceConfig2W, CloseServiceHandle, OpenServiceW, OpenSCManagerW, RegEnumKeyExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegisterServiceCtrlHandlerExW, ChangeServiceConfigW
api-ms-win-core-com-l1-1-0.dll
CoSetProxyBlanket, StringFromGUID2, CoQueryProxyBlanket, CoRegisterClassObject, CoInitializeEx, CoUninitialize, CoRevokeClassObject, CoCreateInstance, CLSIDFromString, CoTaskMemFree, CLSIDFromProgID, CoTaskMemRealloc, CoCreateGuid, CoGetCallContext, CoTaskMemAlloc
api-ms-win-core-com-l1-1-1.dll
StringFromGUID2, CoTaskMemFree, CoCreateGuid, CoSetProxyBlanket, CoGetCallContext, CoCreateInstance, CoQueryProxyBlanket, CoTaskMemAlloc, CoInitializeEx, CoUninitialize, CLSIDFromString, CoRevokeClassObject, CLSIDFromProgID, CoRegisterClassObject, CoTaskMemRealloc
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter
api-ms-win-core-file-l1-2-0.dll
ReadFile, CreateFileW
api-ms-win-core-file-l1-2-1.dll
ReadFile, CreateFileW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-2-0.dll
HeapDestroy
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedIncrement, InterlockedExchange, InterlockedCompareExchange, InterlockedDecrement
api-ms-win-core-libraryloader-l1-1-1.dll
LoadResource, LoadLibraryExW, FreeLibrary, FindResourceExW, SizeofResource, GetModuleFileNameW, LoadStringW, GetModuleHandleW, GetProcAddress, LockResource, DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll
LoadLibraryExW, SizeofResource, DisableThreadLibraryCalls, GetModuleFileNameW, FindResourceExW, LockResource, LoadResource, FreeLibrary, LoadStringW, GetProcAddress, GetModuleHandleW
api-ms-win-core-localregistry-l1-1-0.dll
RegEnumKeyExW, RegEnumValueW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW
api-ms-win-core-memory-l1-1-1.dll
VirtualQuery, VirtualProtect, VirtualAlloc
api-ms-win-core-memory-l1-1-2.dll
VirtualQuery, VirtualAlloc, VirtualProtect
api-ms-win-core-processthreads-l1-1-0.dll
OpenProcessToken, OpenThreadToken, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-1.dll
TerminateProcess, GetCurrentProcessId, OpenThreadToken, GetCurrentThreadId, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll
GetCurrentProcessId, GetCurrentThreadId, TerminateProcess, OpenThreadToken, GetCurrentProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegQueryInfoKeyW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, RegEnumValueW, RegSetValueExW, RegDeleteTreeW, RegDeleteKeyExW
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar
api-ms-win-core-string-l2-1-0.dll
IsCharAlphaW, CharNextW, CharPrevW, IsCharAlphaNumericW
api-ms-win-core-synch-l1-2-0.dll
InitializeCriticalSection, WaitForSingleObject, DeleteCriticalSection, SetEvent, LeaveCriticalSection, EnterCriticalSection, CreateEventW, Sleep
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetVersionExW, GetTickCount, GetSystemInfo
api-ms-win-core-sysinfo-l1-2-1.dll
GetVersionExW, GetTickCount, GetSystemInfo, GetSystemTimeAsFileTime
api-ms-win-security-base-l1-1-0.dll
CheckTokenMembership, AllocateAndInitializeSid, FreeSid
api-ms-win-security-base-l1-2-0.dll
AllocateAndInitializeSid, CheckTokenMembership, FreeSid
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-core-l1-1-1.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenServiceW, OpenSCManagerW
api-ms-win-service-management-l2-1-0.dll
ChangeServiceConfig2W, QueryServiceConfigW
combase.dll
CreateErrorInfo, SetErrorInfo
kernel32.dll
GetOverlappedResult, TryEnterCriticalSection, ResetEvent, WaitForMultipleObjects, LockResource, ReadFile, UnregisterWaitEx, RegQueryValueExA, RegOpenKeyExA, InterlockedExchangeAdd, DelayLoadFailureHook, CancelIo, GetFileAttributesExW, SetLastError, SystemTimeToFileTime, GetSystemTime, FileTimeToSystemTime, GetFileAttributesW, GetFileSize, GetFileTime, CompareFileTime, GetCurrentThread, RegQueryValueExW, GetSystemDirectoryW, CopyFileW, CreateDirectoryW, DeleteFileW, WideCharToMultiByte, lstrcmpW, CreateThreadpoolWait, HeapFree, GetProcessHeap, HeapAlloc, HeapReAlloc, GetVersionExW, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, MultiByteToWideChar, lstrlenW, GetLastError, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, LoadLibraryW, GetProcAddress, GetModuleHandleW, lstrcmpiW, DisableThreadLibraryCalls, FreeLibrary, lstrcpynW, lstrcpyW, GetModuleFileNameW, lstrcatW, lstrlenA, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, CreateEventW, InterlockedIncrement, InterlockedDecrement, HeapDestroy, SetEvent, CloseHandle, WaitForSingleObject, UnregisterWait, CreateTimerQueueTimer, InterlockedCompareExchange, LoadLibraryExA, CreateFileW, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CloseThreadpoolCleanupGroup, CloseThreadpool, SetThreadpoolThreadMaximum, CreateThreadpoolCleanupGroup, CreateThreadpool, CloseThreadpoolCleanupGroupMembers, TrySubmitThreadpoolCallback, CreateThread, DeleteTimerQueueEx, CreateTimerQueue, DeleteTimerQueueTimer, CloseThreadpoolWait, WaitForThreadpoolWaitCallbacks, SetThreadpoolWait, QueueUserWorkItem, LoadLibraryA, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, RegisterWaitForSingleObject, GetShortPathNameW, lstrcpyA, lstrcmpiA, GetWindowsDirectoryW, WaitForThreadpoolWorkCallbacks, SubmitThreadpoolWork, CreateThreadpoolWork, GetSystemDefaultLocaleName, CopyFileExW, WaitForMultipleObjectsEx, CancelIoEx
msvcrt.dll
DllMain
ntdll.dll
EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwGetTraceEnableFlags, EtwTraceMessage
ole32.dll
CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree, CoUninitialize, CoInitializeEx, CoRevokeClassObject, CoRegisterClassObject, CoSetProxyBlanket, CoQueryProxyBlanket, StringFromGUID2, CLSIDFromString, CLSIDFromProgID, CoCreateGuid, CoGetCallContext, CoImpersonateClient, CoRevertToSelf, CoSuspendClassObjects
rpcrt4.dll
NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, RpcStringFreeW, UuidToStringW, UuidCreate, UuidFromStringW, UuidFromStringA
shell32.dll
SHGetFolderPathW
shlwapi.dll
SHDeleteKeyW
ssdpapi.dll
RegisterServiceEx, DeregisterService, SsdpCleanup, SsdpStartup, RegisterService, FreeSsdpMessageEx
user32.dll
LoadStringW, CharPrevW, CharNextW, PostThreadMessageW, DispatchMessageW, GetMessageW, wsprintfW, wvsprintfW
winhttp.dll
WinHttpSendRequest, WinHttpOpenRequest, WinHttpConnect, WinHttpCrackUrl, WinHttpSetStatusCallback, WinHttpReceiveResponse, WinHttpSetTimeouts, WinHttpOpen, WinHttpCloseHandle, WinHttpSetOption
ws2_32.dll
WSAAddressToStringA, freeaddrinfo, getaddrinfo, WSASocketW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
SvchostPushServiceGlobals

upnphost.dll

UPnP Device Host by Microsoft

Remove upnphost.dll
Version:   6.3.9431.0 (winmain_bluemp.130615-1214)
MD5:   23b1af95f6717867f71c84cb1d659cd9
SHA1:   87ed530a43d19a1cec7af9f04d9c8a12cdf57bd5
SHA256:   c94547a674292cde93f69a654b7566f34a7194853cfe274ed9b9243fd7779644
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is upnphost.dll?

The Universal Plug and Play (UPnP) implementation provides an architectural framework for creating self-configuring, self-describing devices and services. Because UPnP supports automatic discovery, devices managed by UPnP require no set up by users or network administrators. UPnP enables a device to dynamically join a network, obtain an IP address, and convey its capabilities upon request.

About upnphost.dll (from Microsoft)

Universal Plug and Play (UPnP) is a distributed, open networking architecture that enhances peer-to-peer network connectivity for personal computers, wireless devices, and other intelligent appliances

DetailsDetails

File name:upnphost.dll
Publisher:Microsoft Corporation
Product name:UPnP Device Host
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\upnphost.dll
Original name:unpnhost.dll.mui
File version:6.3.9431.0 (winmain_bluemp.130615-1214)
Product version:6.3.9431.0
Size:425.5 KB (435,712 bytes)
Build date:6/16/2013 2:05 AM
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'
  • Shared name is 'upnphost'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 35.50%
Windows 7 Ultimate 16.00%
Windows 8.1 11.00%
Windows 7 Professional 8.00%
Windows 8.1 Pro 5.50%
Windows 8 5.50%
Windows Vista Home Premium 4.50%
Windows 8 Pro 3.50%
Windows 8.1 Single Language 2.50%
Microsoft Windows XP 2.00%
Windows 8 Single Language 1.00%
Windows 7 Enterprise 1.00%
Windows 7 Home Basic 0.50%
Windows 8.1 Enterprise 0.50%
Windows Vista Home Basic 0.50%
Windows 8 Enterprise Evaluation 0.50%
Windows 8.1 Pro Preview 0.50%
Windows Vista Business 0.50%
Windows 8.1 Pro with Media Center 0.50%
Windows 8 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 48.99% of UPnP Device Host.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 25.00%
Hewlett-Packard 15.91%
ASUS 14.39%
Acer 12.12%
Toshiba 12.12%
Lenovo 6.82%
Sony 5.30%
GIGABYTE 2.65%
MSI 1.52%
Alienware 0.76%
Samsung 0.76%
Intel 0.76%
Gateway 0.76%
American Megatrends 0.76%
Sahara 0.38%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE