Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.1.7600.16385 (win7_rtm.090713-1255) 50.00%
6.1.7600.16385 (win7_rtm.090713-1255) 50.00%
(Note, Microsoft publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
api-ms-win-core-errorhandling-l1-1-0.dll
UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, GetLastError
api-ms-win-core-file-l1-1-0.dll
CreateFileW, GetDiskFreeSpaceA
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapFree, GetProcessHeap, HeapAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
FreeLibrary, LoadLibraryExW, GetProcAddress
api-ms-win-core-localregistry-l1-1-0.dll
RegOpenKeyExW, RegCloseKey, RegGetValueW, RegQueryValueExW
api-ms-win-core-memory-l1-1-0.dll
UnmapViewOfFile, MapViewOfFileEx, VirtualFree, VirtualAlloc
api-ms-win-core-misc-l1-1-0.dll
LocalFree, Sleep, LocalAlloc
api-ms-win-core-processthreads-l1-1-0.dll
OpenThreadToken, GetCurrentProcess, GetCurrentThread, GetCurrentProcessId, GetCurrentThreadId, SwitchToThread, TerminateProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0.dll
LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, EnterCriticalSection
api-ms-win-core-sysinfo-l1-1-0.dll
GlobalMemoryStatusEx, GetTickCount, GetSystemTimeAsFileTime, GetComputerNameExA
api-ms-win-security-base-l1-1-0.dll
AllocateAndInitializeSid, IsValidSid, FreeSid, GetLengthSid, CheckTokenMembership, SetSecurityDescriptorDacl, InitializeAcl, CopySid, AllocateLocallyUniqueId, AddAccessAllowedAce, InitializeSecurityDescriptor, GetTokenInformation, EqualSid
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
kernelbase.dll
BemFreeContract, BemCreateContractFrom, CompareStringA
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError, DbgPrint, NtOpenSection, RtlInitUnicodeString, NtSetUuidSeed, EtwEventRegister, EtwEventWrite, EtwEventEnabled, NtQuerySystemInformation, RtlInitializeCriticalSection, RtlGetNtProductType, WinSqmIsOptedIn, WinSqmSetDWORD, NtOpenFile, RtlFreeHeap, RtlAllocateHeap, RtlImageNtHeader
rpcrt4.dll
RpcServerRegisterIf2, I_RpcServerSetAddressChangeFn, I_RpcServerRegisterForwardFunction, TowerExplode, RpcRaiseException, I_RpcServerInqRemoteConnAddress, I_RpcBindingIsClientLocal, I_RpcSystemFunction001, RpcServerRegisterAuthInfoW, RpcImpersonateClient, I_RpcServerInqLocalConnAddress, I_RpcBindingInqTransportType, I_RpcGetPortAllocationData, UuidIsNil, NdrServerCall2, RpcServerUseProtseqEpExW, RpcMgmtSetServerStackSize, I_RpcFwThisIsTheManager, RpcMgmtIsServerListening, RpcServerListen, RpcRevertToSelfEx, RpcServerInqCallAttributesW, I_RpcAllocate, RpcRevertToSelf, I_RpcFree, RpcServerUnregisterIf, I_RpcServerCheckClientRestriction

rpcepmap.dll

RPC Endpoint Mapper by Microsoft

Remove rpcepmap.dll
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   78d072f35bc45d9e4e1b61895c152234
SHA1:   c604bc90032b99456c9f92f98f963df999cf8b15
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

rpcepmap.dll is loaded as dynamic link library that runs in the context of a process. This version is designed to run on Windows 7.

DetailsDetails

File name:rpcepmap.dll
Publisher:Microsoft Corporation
Product name:RPC Endpoint Mapper
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\rpcepmap.dll
Original name:RpcEpMap.dll.mui
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:42.5 KB (43,520 bytes)
Build date:7/14/2009 1:12 AM
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'RpcEptMapper'
  • Shared name is 'RpcEptMapper'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 100.00%

Distribution by countryDistribution by country

Canada installs about 50.00% of RPC Endpoint Mapper.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 50.00%
Hewlett-Packard 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE