Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

8.0.18494.886912 33.33%
8.0.18483.860857 33.33%
8.0.18354.823166 33.33%

Relationships

Parent process
Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
SetTokenInformation, AdjustTokenPrivileges, LookupPrivilegeValueW, DuplicateTokenEx, OpenProcessToken, SetServiceStatus, CreateProcessAsUserW, RegisterServiceCtrlHandlerExW, ChangeServiceConfig2W, CloseServiceHandle, CreateServiceW, OpenSCManagerW, StartServiceW, QueryServiceStatusEx, OpenServiceW, ControlService, DeleteService, StartServiceCtrlDispatcherW, RegCloseKey, RegSetValueExW, RegOpenKeyExW, RegOpenKeyExA, RegCreateKeyExA, RegEnumKeyExW, RegQueryValueExW, GetSecurityInfo, ConvertStringSidToSidW, SetEntriesInAclW, SetSecurityInfo, RegEnumKeyA, CryptReleaseContext, CryptDestroyHash, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptAcquireContextW, RegCreateKeyExW, RegDeleteKeyW, EnumServicesStatusExW
kernel32.dll
WaitForMultipleObjects, SetEvent, DisconnectNamedPipe, WaitForSingleObject, FlushFileBuffers, DeleteCriticalSection, TerminateProcess, ResumeThread, ConnectNamedPipe, CreateEventW, CreateNamedPipeW, GetModuleFileNameW, CreateFileW, InitializeCriticalSection, SetConsoleCtrlHandler, GetTickCount, MultiByteToWideChar, ReadFile, WideCharToMultiByte, CreateProcessW, GetExitCodeProcess, GetVolumePathNameW, GetCommandLineW, GetStdHandle, SetHandleInformation, CreatePipe, GetStartupInfoW, OpenThread, GetCurrentThreadId, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetComputerNameExW, SetComputerNameExW, GetFileAttributesW, GetEnvironmentVariableW, GetVersionExW, GetSystemDirectoryW, GetVersion, FreeLibrary, GetProcAddress, LoadLibraryW, Sleep, GetModuleHandleW, CloseHandle, SetLastError, InterlockedExchange, InterlockedCompareExchange, OutputDebugStringA, RtlUnwind, SetUnhandledExceptionFilter, ResetEvent, CancelIo, EnterCriticalSection, GetModuleHandleA, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, UnhandledExceptionFilter, GetSystemInfo, VirtualAlloc, VirtualFree, VirtualLock, VirtualUnlock, LeaveCriticalSection, CreateDirectoryW, GetCurrentProcess, GetOverlappedResult, GetLastError, WriteFile, DeviceIoControl, InterlockedDecrement, InterlockedIncrement, GetEnvironmentVariableA, GetDriveTypeW, GetVolumeNameForVolumeMountPointW, GetComputerNameW, GetFileInformationByHandle, GetWindowsDirectoryA, CreateDirectoryA, LocalFree, GetLocalTime, CreateThread, GetFileSizeEx, CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, GetTempFileNameW, MoveFileExW, GetTempPathW
msvcrt.dll
DllMain
ole32.dll
CoInitializeEx, CLSIDFromProgID, CoCreateInstance, CoUninitialize, CoSetProxyBlanket, CoInitializeSecurity
setupapi.dll
SetupDiGetDeviceRegistryPropertyW, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList, CM_Get_DevNode_Status, SetupDiSetClassInstallParamsW, SetupDiCallClassInstaller, SetupDiGetDeviceInstallParamsW, SetupDiGetClassDevsW, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsExW, SetupDiRemoveDevice
shell32.dll
SHGetFolderPathW
user32.dll
PostMessageW, PostQuitMessage, DefWindowProcW, TranslateMessage, GetMessageW, CreateWindowExW, RegisterClassW, SendMessageTimeoutW, wsprintfW, DispatchMessageW
winspool.drv
DeletePrinter, OpenPrinterW, FindNextPrinterChangeNotification, ClosePrinter, FindClosePrinterChangeNotification, FindFirstPrinterChangeNotification, SetPrinterW, DocumentPropertiesW, GetPrinterW, EnumPrintersW

prl_tools_service.exe

Parallels Tools 8.0 by Parallels (Signed)

Remove prl_tools_service.exe
Version:   8.0.18483.860857
MD5:   1f38ce840cd1662535e6741ac2a12004
SHA1:   87c37d32c11352cc5e359a61bf5c4e931a78b91d
SHA256:   76c083e489282ace2db0eadc5bcfb512ba4755a63a4df8c3fd020599c3cc47dc

Overview

prl_tools_service.exe runs as a service under the name Parallels Tools Service with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Parallels Transporter Agent published by Parallels Software International Inc and Parallels Transporter Agent published by Parallels Software International Inc. The file is digitally signed by Parallels which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:prl_tools_service.exe
Publisher:Parallels Holdings, Ltd. and its affiliates.
Product name:Parallels Tools 8.0
Description:Parallels Tools Service
Typical file path:C:\Program Files\parallels\parallels tools\services\prl_tools_service.exe
File version:8.0.18483.860857
Product version:8.0 build 18483860857
Size:168.25 KB (172,288 bytes)
Certificate
Issued to:Parallels
Authority (CA):VeriSign
Effective date:Wednesday, October 10, 2012
Expiration date:Wednesday, March 11, 2015
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Parallels Software International Inc
4% remove
Parallels Transporter allows you to copy documents, pictures, music, videos, downloads, and Internet bookmarks from a Windows computer to your Mac. Use your Windows documents, pictures, music, downloads, and Internet bookmarks on your Mac without installing Windows.

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Parallels Tools Service'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00005700%
0.028634%
Kernel CPU:0.00002524%
0.013761%
User CPU:0.00003176%
0.014873%
Kernel CPU time:63 ms/min
100,923,805ms/min
CPU cycles:14,995/sec
17,470,203/sec
Memory
Private memory:1.84 MB
21.59 MB
Private (maximum):1.23 MB
Private (minimum):144 KB
Non-paged memory:1.84 MB
21.59 MB
Virtual memory:41.88 MB
140.96 MB
Virtual memory (peak):42.88 MB
169.69 MB
Working set:428 KB
18.61 MB
Working set (peak):4.44 MB
37.95 MB
Page faults:16,526/min
2,039/min
I/O
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:8 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:8
12
Handles:99
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\parallels\parallels tools\services\prl_tools_service.exe"
Owner:SYSTEM
Windows Service
Service name:Parallels Tools Service
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:0.00012717%
0.272967%
Kernel CPU:0.00002543%
0.107585%
User CPU:0.00010174%
0.165382%
CPU cycles:4,519/sec
5,741,424/sec
Memory:124 KB
1.16 MB
msvcrt.dll (Windows NT CRT DLL by Microsoft)
Total CPU:0.00003815%
Kernel CPU:0.00003815%
User CPU:0.00000000%
CPU cycles:159/sec
Memory:636 KB
prl_tools_service.exe (main module)
Total CPU:0.00002543%
Kernel CPU:0.00000000%
User CPU:0.00002543%
CPU cycles:474/sec
Memory:180 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 33.33%
Windows 7 Professional 33.33%
Windows 8 Pro 33.33%

Distribution by countryDistribution by country

Canada installs about 33.33% of Parallels Tools 8.0 .
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE