"WUDFHost.exe" Process on Windows 8

Q

What is the "WUDFHost.exe" process on Windows 8? Is the "WUDFHost.exe" process a virus? Can I terminate the "WUDFHost.exe" process?

✍: FYIcenter.com

A

"WUDFHost.exe" process represents "Windows Driver Foundation - User-mode Driver Framework Host Process" program.

"WUDFHost.exe" process is normally running under the parent process "Boot" as shown in the process tree below:

Boot
   WUDFHost

On the Processes tab of "Task Manager", "WUDFHost.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
WUDFHost.exe              5,440 K   Windows Driver Foundation - 
                                    User-mode Driver Framework Host Process

Additional information about "WUDFHost.exe" process:

Command line:
   "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} 
   -IoEventPortName:HostProcess-c8b53042-ec20-4f96-be70-e3cc8749a2a4 
   -SystemEventPortName:HostProcess-951cc06d-b896-4b0b-895d-a6910a7c469f 
   -IoCancelEventPortName:HostProcess-d37e97ee-e0b2-4b74-a7c7-42f052962167 
   -NonStateChangingEventPortName:HostProcess-520b1d6d-4523-49a0-9b02-5c6b746cde4d 
   -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 
   -LifetimeId:2fa8e361-26e2-4721-b8d0-760002a7cfe9 -DeviceGroupId:WpdFsGroup

Programe file information:
   Name: WUDFHost.exe
   Location: C:\Windows\System32\WUDFHost.exe
   Description: Windows Driver Foundation - User-mode Driver Framework Host Process
   Version: 6.2.9200.16384 (win8_rtm.120725-1247)
   Size: 229888 bytes
   Last modified: 7/25/2012 11:08:53 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\System32\en-US\WUDFHost.exe.mui

Some registry keys used:
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids
HKLM\SOFTWARE\MICROSOFT\WindowsRuntime\CLSID
HKCR\ActivatableClasses\CLSID

Some DLL libraries used:
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\KERNEL32.DLL
C:\Windows\system32\KERNELBASE.dll
C:\Windows\system32\ADVAPI32.dll
C:\Windows\system32\USER32.dll
C:\Windows\system32\msvcrt.dll
C:\Windows\system32\RPCRT4.dll
C:\Windows\system32\ole32.dll
C:\Windows\System32\WUDFPlatform.dll
C:\Windows\SYSTEM32\sechost.dll

"WUDFHost.exe" process is not a virus. You should not terminate "WUDFHost.exe" process.

 

"igfxtray.exe" Process on Windows 8

"explorer.exe" Process on Windows 8

System Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials

2016-12-30, 353👍, 0💬