Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	2.37%
6.3.9600.16384 (winblue_rtm.130821-1623)	3.43%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.2.9200.16384 (win8_rtm.120725-1247)	18.21%
6.2.9200.16384 (win8_rtm.120725-1247)	2.64%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.13%
6.1.7600.16385 (win7_rtm.090713-1255)	50.26%
6.1.7600.16385 (win7_rtm.090713-1255)	22.30%
6.1.7600.16385 (win7_rtm.090713-1255)	0.26%
6.1.7600.16385 (win7_rtm.090713-1255)	0.13%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-delayload-l1-1-1.dll

DelayLoadFailureHook, ResolveDelayLoadedAPI

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalAlloc

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-1.dll

DisableThreadLibraryCalls, GetProcAddress, GetModuleFileNameW, GetModuleHandleExW, FreeLibrary

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcess, OpenThreadToken, SetThreadToken, OpenProcessToken, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess

api-ms-win-core-processthreads-l1-1-2.dll

GetCurrentThreadId, GetCurrentProcessId, OpenProcessToken, SetThreadToken, TerminateProcess, GetCurrentProcess, OpenThreadToken

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegEnumValueW, RegDeleteKeyExW, RegCreateKeyExW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, RegQueryValueExW

api-ms-win-core-synch-l1-1-1.dll

Sleep

api-ms-win-core-synch-l1-2-0.dll

Sleep

api-ms-win-core-sysinfo-l1-1-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation, CheckTokenMembership, GetWindowsAccountDomainSid, CreateWellKnownSid, RevertToSelf, EqualSid, CopySid

api-ms-win-security-base-l1-2-0.dll

GetTokenInformation, CopySid, GetWindowsAccountDomainSid, CheckTokenMembership, CreateWellKnownSid, RevertToSelf, EqualSid

api-ms-win-security-grouppolicy-l1-1-0.dll

RegisterGPNotificationInternal, UnregisterGPNotificationInternal

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus

api-ms-win-service-winsvc-l1-2-0.dll

QueryServiceStatus

kernel32.dll

LoadLibraryExA, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, InterlockedCompareExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetProcessHeap, HeapSetInformation, HeapCreate, HeapDestroy, HeapAlloc, HeapReAlloc, HeapFree, RegOpenKeyExW, RegCloseKey, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, FreeLibrary, GetLastError, GetProcAddress, DelayLoadFailureHook, DisableThreadLibraryCalls, SwitchToThread, LoadLibraryW, GetCurrentThreadId, CreateDirectoryW, RegCreateKeyExW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, DuplicateHandle, ResetEvent, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeviceIoControl, RegNotifyChangeKeyValue, CreateThread, WaitForMultipleObjects, WaitForSingleObject, FileTimeToSystemTime, SystemTimeToFileTime, ExitProcess, GetVersionExW, SetLastError, CopyFileW, DeleteFileW, RegQueryValueExW, DebugBreak, MultiByteToWideChar, WideCharToMultiByte, CloseHandle, WriteFile, CreateFileW, ReadFile, GetFileSize, CompareFileTime, CompareStringA, lstrlenA, lstrlenW, UnregisterWaitEx, SetEvent, RegisterWaitForSingleObject, CreateEventW, GetCurrentThread, LoadLibraryExW, GetFileAttributesW, WaitForMultipleObjectsEx, CopyFileExW, RegisterWaitForSingleObjectEx, LocalFree

msvcrt.dll

DllMain

ntdll.dll

EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwTraceMessage, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, EtwGetTraceEnableFlags, RtlFreeUnicodeString, RtlStringFromGUID

rpcrt4.dll

RpcSsContextLockExclusive, RpcRaiseException, NdrClientCall2, I_RpcExceptionFilter, UuidToStringW, RpcServerUseProtseqW, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx, RpcEpRegisterW, RpcErrorStartEnumeration, RpcErrorGetNextRecord, RpcErrorEndEnumeration, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW, RpcBindingFree, RpcServerUnregisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingVectorFree, I_RpcBindingInqTransportType, RpcBindingInqAuthClientW, UuidCreate, RpcRevertToSelf, RpcImpersonateClient, NdrServerCall2

Export table

IMServiceMain

SvchostPushServiceGlobals

SVCServiceMain

pnrpsvc.dll

PNRP Service Dll by Microsoft

Remove pnrpsvc.dll

Version:	6.2.9200.16384 (win8_rtm.120725-1247)
MD5:	ab76700d764a342d7475fb8f47cab18c
SHA1:	6c8e0990c9d35f4b629ab15df91d29fa631a3f0d
SHA256:	ecdf705d3e69ef6e7044c98a462a7281d0e7d0d85769c0815555d934b0b69c8d

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

pnrpsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is installed on Windows 8.

Details

File name:	pnrpsvc.dll
Publisher:	Microsoft Corporation
Product name:	PNRP Service Dll
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\pnrpsvc.dll
Original name:	pnrpsvc.dll.mui
File version:	6.2.9200.16384 (win8_rtm.120725-1247)
Product version:	6.2.9200.16384
Size:	322 KB (329,728 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	38.00%
Windows 7 Ultimate	16.50%
Windows 8.1	11.50%
Windows 8	10.00%
Windows 7 Professional	6.50%
Windows 8.1 Pro	6.00%
Windows 8.1 Single Language	2.50%
Windows 8 Pro	2.50%
Windows 8 Single Language	2.00%
Windows 8.1 Pro with Media Center	1.00%
Windows Seven Black Edition	0.50%
Windows 8.1 Enterprise	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 7 Enterprise	0.50%
Windows 8 Enterprise	0.50%
Windows Developer Preview	0.50%
Windows 8.1 Pro Preview	0.50%

Distribution by country

United States installs about 52.28% of PNRP Service Dll.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	17.65%
Hewlett-Packard	16.54%
ASUS	16.18%
Toshiba	11.76%
Lenovo	11.03%
Acer	10.29%
Sony	4.41%
GIGABYTE	3.31%
Samsung	2.21%
Intel	2.21%
MSI	1.47%
Sahara	0.74%
Gateway	0.74%
NEC	0.74%
Alienware	0.37%
American Megatrends	0.37%

Remove Adware and Spyware Programs, FREE Download!