Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	2.37%
6.3.9600.16384 (winblue_rtm.130821-1623)	3.43%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.2.9200.16384 (win8_rtm.120725-1247)	18.21%
6.2.9200.16384 (win8_rtm.120725-1247)	2.64%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.13%
6.1.7600.16385 (win7_rtm.090713-1255)	50.26%
6.1.7600.16385 (win7_rtm.090713-1255)	22.30%
6.1.7600.16385 (win7_rtm.090713-1255)	0.26%
6.1.7600.16385 (win7_rtm.090713-1255)	0.13%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-delayload-l1-1-1.dll

DelayLoadFailureHook, ResolveDelayLoadedAPI

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalAlloc

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-1.dll

DisableThreadLibraryCalls, GetProcAddress, GetModuleFileNameW, GetModuleHandleExW, FreeLibrary

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcess, OpenThreadToken, SetThreadToken, OpenProcessToken, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess

api-ms-win-core-processthreads-l1-1-2.dll

GetCurrentThreadId, GetCurrentProcessId, OpenProcessToken, SetThreadToken, TerminateProcess, GetCurrentProcess, OpenThreadToken

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegEnumValueW, RegDeleteKeyExW, RegCreateKeyExW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, RegQueryValueExW

api-ms-win-core-synch-l1-1-1.dll

Sleep

api-ms-win-core-synch-l1-2-0.dll

Sleep

api-ms-win-core-sysinfo-l1-1-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation, CheckTokenMembership, GetWindowsAccountDomainSid, CreateWellKnownSid, RevertToSelf, EqualSid, CopySid

api-ms-win-security-base-l1-2-0.dll

GetTokenInformation, CopySid, GetWindowsAccountDomainSid, CheckTokenMembership, CreateWellKnownSid, RevertToSelf, EqualSid

api-ms-win-security-grouppolicy-l1-1-0.dll

RegisterGPNotificationInternal, UnregisterGPNotificationInternal

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus

api-ms-win-service-winsvc-l1-2-0.dll

QueryServiceStatus

kernel32.dll

LoadLibraryExA, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, InterlockedCompareExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetProcessHeap, HeapSetInformation, HeapCreate, HeapDestroy, HeapAlloc, HeapReAlloc, HeapFree, RegOpenKeyExW, RegCloseKey, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, FreeLibrary, GetLastError, GetProcAddress, DelayLoadFailureHook, DisableThreadLibraryCalls, SwitchToThread, LoadLibraryW, GetCurrentThreadId, CreateDirectoryW, RegCreateKeyExW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, DuplicateHandle, ResetEvent, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeviceIoControl, RegNotifyChangeKeyValue, CreateThread, WaitForMultipleObjects, WaitForSingleObject, FileTimeToSystemTime, SystemTimeToFileTime, ExitProcess, GetVersionExW, SetLastError, CopyFileW, DeleteFileW, RegQueryValueExW, DebugBreak, MultiByteToWideChar, WideCharToMultiByte, CloseHandle, WriteFile, CreateFileW, ReadFile, GetFileSize, CompareFileTime, CompareStringA, lstrlenA, lstrlenW, UnregisterWaitEx, SetEvent, RegisterWaitForSingleObject, CreateEventW, GetCurrentThread, LoadLibraryExW, GetFileAttributesW, WaitForMultipleObjectsEx, CopyFileExW, RegisterWaitForSingleObjectEx, LocalFree

msvcrt.dll

DllMain

ntdll.dll

EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwTraceMessage, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, EtwGetTraceEnableFlags, RtlFreeUnicodeString, RtlStringFromGUID

rpcrt4.dll

RpcSsContextLockExclusive, RpcRaiseException, NdrClientCall2, I_RpcExceptionFilter, UuidToStringW, RpcServerUseProtseqW, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx, RpcEpRegisterW, RpcErrorStartEnumeration, RpcErrorGetNextRecord, RpcErrorEndEnumeration, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW, RpcBindingFree, RpcServerUnregisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingVectorFree, I_RpcBindingInqTransportType, RpcBindingInqAuthClientW, UuidCreate, RpcRevertToSelf, RpcImpersonateClient, NdrServerCall2

Export table

IMServiceMain

SvchostPushServiceGlobals

SVCServiceMain

pnrpsvc.dll

PNRP Service Dll by Microsoft

Remove pnrpsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	3eac4455472cc2c97107b5291e0dcafe
SHA1:	e3945299a002d3acd671ddad89ecf839d1a353a5
SHA256:	e51f373f2dbeaee516b42bae8c1b5bb68d00b881323e842cb6edec0a183cffc3

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

pnrpsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

Details

File name:	pnrpsvc.dll
Publisher:	Microsoft Corporation
Product name:	PNRP Service Dll
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\pnrpsvc.dll
Original name:	pnrpsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	319.5 KB (327,168 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	38.00%
Windows 7 Ultimate	16.50%
Windows 8.1	11.50%
Windows 8	10.00%
Windows 7 Professional	6.50%
Windows 8.1 Pro	6.00%
Windows 8.1 Single Language	2.50%
Windows 8 Pro	2.50%
Windows 8 Single Language	2.00%
Windows 8.1 Pro with Media Center	1.00%
Windows Seven Black Edition	0.50%
Windows 8.1 Enterprise	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 7 Enterprise	0.50%
Windows 8 Enterprise	0.50%
Windows Developer Preview	0.50%
Windows 8.1 Pro Preview	0.50%

Distribution by country

United States installs about 52.28% of PNRP Service Dll.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	17.65%
Hewlett-Packard	16.54%
ASUS	16.18%
Toshiba	11.76%
Lenovo	11.03%
Acer	10.29%
Sony	4.41%
GIGABYTE	3.31%
Samsung	2.21%
Intel	2.21%
MSI	1.47%
Sahara	0.74%
Gateway	0.74%
NEC	0.74%
Alienware	0.37%
American Megatrends	0.37%

Remove Adware and Spyware Programs, FREE Download!