Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 5.89%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.12%
6.2.9200.16384 (win8_rtm.120725-1247) 55.36%
6.2.9200.16384 (win8_rtm.120725-1247) 21.20%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.24%
6.1.7600.16385 (win7_rtm.090713-1255) 5.30%
6.1.7600.16385 (win7_rtm.090713-1255) 4.83%
6.1.7600.16385 (win7_rtm.090713-1255) 2.24%
6.1.7600.16385 (win7_rtm.090713-1255) 2.47%
6.0.6000.16386 (vista_rtm.061101-2205) 1.18%
6.0.6000.16386 (vista_rtm.061101-2205) 0.59%
6.0.6000.16386 (vista_rtm.061101-2205) 0.47%
6.0.5716.32 (winmain(wmbla).060928-1756) 0.12%

Relationships

Parent process
Related files

WUDFHost.exe

Windows Driver Foundation - User-mode Driver Framework Host Process by Microsoft

Remove WUDFHost.exe
Version:   6.2.9200.16384 (win8_rtm.120725-1247)
MD5:   8abfe00f213f2571498f1b8fd7939a98
SHA1:   803e2aa7eb71676c3d0981fa01be9a38ffaf050d
SHA256:   b557ec9efd33612bafe01ffd304b50efb8c3c19763470560da950b5ab4a9ac9c
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is WUDFHost.exe?

Windows Driver Foundation (WDF) is a set of Microsoft tools that aid in the creation of device drivers for Windows. The User-Mode Driver Framework, for writing certain classes of driver that can run in user-mode.

About WUDFHost.exe (from Microsoft)

“WDF implements the fundamental features of a Windows driver and enables you to focus on the specific details of your hardware or filter. WDF defines a single driver model that you can use to create ob”

Overview

WUDFHost.exe executes as a process with LOCAL SERVICE privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). This version is installed on Windows 8 and is compiled as a 64 bit program.

DetailsDetails

File name:WUDFHost.exe
Publisher:Microsoft Corporation
Product name:Windows Driver Foundation - User-mode Driver Framework Host Process
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\wudfhost.exe
Original name:WUDFHost.exe.mui
File version:6.2.9200.16384 (win8_rtm.120725-1247)
Product version:6.2.9200.16384
Size:224.5 KB (229,888 bytes)
Digital DNA
Entropy:5.856292
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00118010%
0.028634%
Kernel CPU:0.00075440%
0.013761%
User CPU:0.00042569%
0.014873%
Kernel CPU time:1,185,471 ms/min
100,923,805ms/min
CPU cycles:371,597/sec
17,470,203/sec
Context switches:8/sec
284/sec
Memory
Private memory:2.95 MB
21.59 MB
Private (maximum):6.51 MB
Private (minimum):4.03 MB
Non-paged memory:2.95 MB
21.59 MB
Virtual memory:54.66 MB
140.96 MB
Virtual memory (peak):76.07 MB
169.69 MB
Working set:4.86 MB
18.61 MB
Working set (peak):7.3 MB
37.95 MB
Page faults:236,293/min
2,039/min
I/O
I/O read transfer:3.4 KB/sec
1.02 MB/min
I/O read operations:6/sec
343/min
I/O write transfer:6.35 KB/sec
274.99 KB/min
I/O write operations:2/sec
227/min
I/O other transfer:2.6 KB/sec
448.09 KB/min
I/O other operations:8/sec
1,671/min
Resource allocations
Threads:9
12
Handles:242
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command lines:
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-4e5b250a-5501-4f4c-8754-87e9a816c82e -systemeventportnamC:hostprocess-c134e64c-5af3-4291-a334-e46b05f29282 -iocanceleventportnamC:hostprocess-be206a0d-bec2-4765-a26c-28fc34ab4c25 -nonstatechangingeventportnamC:hostprocess-df4f30f5-b2c9-48f8-8fb6-2dbb31fb041e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:eb0c080f-0cfc-4e2c-9b8d-b6d51d3e038c -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-3fa0878d-a51d-424e-ab88-28420019060f -systemeventportnamC:hostprocess-6748fae5-a3f8-4747-8357-1ae221db7a5f -iocanceleventportnamC:hostprocess-6c64eabf-b0ca-4f5a-bd08-1720f749c188 -nonstatechangingeventportnamC:hostprocess-a2423966-07a0-4c44-9bca-5fe9321a410e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:a4056623-4928-4ec4-9ba9-0b1cd2a1c2f9 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-f7c08d0f-c206-4cce-823e-5e4cdf87b205 -systemeventportnamC:hostprocess-4bf524b8-ad07-44e0-89e9-bd4a68c42cc2 -iocanceleventportnamC:hostprocess-32a40caa-2bdd-4d12-b785-30f29be46c03 -nonstatechangingeventportnamC:hostprocess-32302b7f-ff38-4131-b9aa-b8c91a25a7c0 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:7ececdec-a41a-4e32-96a7-fb47e445683b -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-922dd549-d7cb-4c65-8b62-f50cef62af5f -systemeventportnamC:hostprocess-3fd0c5f2-1a70-4057-8f69-c9393f18242f -iocanceleventportnamC:hostprocess-15f25c36-12af-490b-ae62-979ee8bbde5b -nonstatechangingeventportnamC:hostprocess-4f9f2b97-1330-4c44-8c67-fafca6863366 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:caf90dea-d686-41a1-b10c-2a1ddbf84c56 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-2dcb715a-fe0b-41d7-9861-f546bf49b0e6 -systemeventportnamC:hostprocess-0f2479db-cdee-41ab-9538-450ef94ba33d -iocanceleventportnamC:hostprocess-6863c5c6-66d6-401a-b2a3-3f21daadd1cb -nonstatechangingeventportnamC:hostprocess-189fecc4-88fb-48c0-99a4-13fbd84794d4 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:099b8b51-810c-48dc-93ac-8ef1082424cb -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-085d95ee-8dd8-444a-94e4-e66d517ebbf3 -systemeventportnamC:hostprocess-78834654-f10d-43e1-a72f-ded1167eb110 -iocanceleventportnamC:hostprocess-a9392e10-8d13-4df5-814c-09b52b4eb244 -nonstatechangingeventportnamC:hostprocess-e07d44d9-8097-4829-8049-3c85a3a3005e -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:630a63fe-644f-4525-9797-bf90fc06ccd1 -devi
  • "C:\Windows\System32\wudfhost.exe" -hostguiC:{193a1820-d9ac-4997-8c55-be817523f6aa} -ioeventportnamC:hostprocess-56501c26-a0ea-4425-896a-ce730e3d4760 -systemeventportnamC:hostprocess-90cc6c53-b8ac-4259-8275-7dd01da16183 -iocanceleventportnamC:hostprocess-27dc9a37-467b-46d8-a5ef-ac6fb68bbdd2 -nonstatechangingeventportnamC:hostprocess-1b39fa2b-33df-4541-a3d2-2e546bfe3e14 -servicesiC:s-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -lifetimeiC:6a4eba47-3de1-4197-8f70-83cd5bf82826 -devi
  • (200 more)
Owner:LOCAL SERVICE
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
ntdll.dll
Total CPU:0.05703043%
0.272967%
Kernel CPU:0.02480816%
0.107585%
User CPU:0.03222227%
0.165382%
CPU cycles:1,121,977/sec
5,741,424/sec
Context switches:3/sec
79/sec
Memory:1.74 MB
1.16 MB
SensorsHIDClassDriver.dll
Total CPU:0.04350652%
Kernel CPU:0.01184635%
User CPU:0.03166017%
CPU cycles:806,286/sec
Memory:580 KB
combase.dll
Total CPU:0.03189819%
Kernel CPU:0.01449918%
User CPU:0.01739901%
CPU cycles:377,148/sec
Context switches:4/sec
Memory:1.69 MB
msvcrt.dll (Windows NT CRT DLL by Microsoft)
Total CPU:0.01589706%
Kernel CPU:0.00956395%
User CPU:0.00633311%
CPU cycles:433,601/sec
Context switches:1/sec
Memory:660 KB
tcwbf.dll
Total CPU:0.00625703%
Kernel CPU:0.00024379%
User CPU:0.00601324%
CPU cycles:314,636/sec
Context switches:8/sec
Memory:992 KB
ESENT.dll
Total CPU:0.00329991%
Kernel CPU:0.00003041%
User CPU:0.00326950%
CPU cycles:170,222/sec
Memory:2.75 MB
MSVCR80.dll
Total CPU:0.00155753%
Kernel CPU:0.00083713%
User CPU:0.00072040%
CPU cycles:293,431/sec
Context switches:2/sec
Memory:804 KB
WpdFs.dll
Total CPU:0.00150334%
Kernel CPU:0.00113411%
User CPU:0.00036923%
CPU cycles:40,816/sec
Memory:304 KB
WUDFHost.exe (main module)
Total CPU:0.00115649%
Kernel CPU:0.00076510%
User CPU:0.00039139%
CPU cycles:32,494/sec
Memory:240 KB
LocationProvider.dll
Total CPU:0.00040734%
Kernel CPU:0.00014645%
User CPU:0.00026088%
CPU cycles:16,093/sec
Memory:208 KB
wlanapi.dll
Total CPU:0.00038018%
Kernel CPU:0.00013686%
User CPU:0.00024331%
CPU cycles:57,840/sec
Memory:280 KB
SensorsClassExtension.dll
Total CPU:0.00036908%
Kernel CPU:0.00028947%
User CPU:0.00007961%
CPU cycles:8,369/sec
Memory:136 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 28.00%
Windows 7 Ultimate 14.50%
Windows 8.1 11.50%
Windows 7 Professional 10.50%
Windows 8 Pro 7.50%
Windows 8.1 Pro 6.50%
Windows 8 4.50%
Windows 8.1 Single Language 3.50%
Windows 8 Single Language 3.00%
Windows 8.1 Pro with Media Center 2.50%
Windows 8 Enterprise 2.00%
Windows Vista Home Premium 2.00%
Windows Seven Black Edition 1.00%
Windows 8.1 Enterprise Evaluation 0.50%
Windows Vista Home Basic 0.50%
Windows 7 Starter 0.50%
Windows 8.1 Enterprise 0.50%
Windows 7 Enterprise 0.50%
Windows Se7en Titan 0.50%

Distribution by countryDistribution by country

United States installs about 41.12% of Windows Driver Foundation - User-mode Driver Framework Host Process.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 19.31%
ASUS 16.99%
Hewlett-Packard 16.22%
Dell 16.22%
Acer 11.58%
Sony 6.18%
GIGABYTE 3.09%
Toshiba 2.32%
Intel 2.32%
Samsung 1.54%
Medion 1.54%
Gateway 0.77%
NEC 0.77%
Sahara 0.39%
Alienware 0.39%
American Megatrends 0.39%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE