Should I block it?

No, this file is 100% safe to run.

Additional versions

6.0.5358.0 (WMP_11.060509-2009)	0.70%
12.0.9600.16384 (winblue_rtm.130821-1623)	37.32%
12.0.9600.16384 (winblue_rtm.130821-1623)	1.41%
12.0.9600.16384 (winblue_rtm.130821-1623)	59.15%
12.0.8102.0 (winmain_win8m3.110823-1455)	1.41%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

EventRegister, EventUnregister, TraceMessage, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, EventWrite, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegCloseKey, CreateServiceW, RegOpenKeyExW, ChangeServiceConfig2W, QueryServiceStatusEx, ControlService, DeleteService, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, SetServiceStatus, CopySid, GetLengthSid, IsValidSid, EqualSid, InitializeAcl, AddAce, GetAclInformation, ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSecurityDescriptorToStringSecurityDescriptorW, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, GetSecurityDescriptorControl, MakeAbsoluteSD, InitializeSecurityDescriptor, GetNamedSecurityInfoW, RegQueryValueExW, RegDeleteValueW, RegSetValueExW, RegNotifyChangeKeyValue, ConvertStringSidToSidW, RegCreateKeyExW, RegSetKeySecurity, RegEnumKeyExW, RegGetValueW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, GetTokenInformation, OpenThreadToken, AllocateAndInitializeSid, SetEntriesInAclW, SetNamedSecurityInfoW, FreeSid, RevertToSelf, ImpersonateLoggedOnUser, DuplicateTokenEx, CheckTokenMembership, ConvertSidToStringSidW, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, LsaOpenPolicy, LsaLookupNames2, LsaFreeMemory, LsaClose, SetFileSecurityW, GetFileSecurityW, OpenProcessToken, LookupAccountSidW, SetSecurityInfo, GetSecurityInfo, ChangeServiceConfigW, StartServiceW, GetAce, SetSecurityDescriptorControl, CreateWellKnownSid

gdi32.dll

DeleteObject

iphlpapi.dll

GetIpAddrTable, NotifyAddrChange, CancelIPChangeNotify, GetIpNetEntry2, SendARP, ResolveIpNetEntry2, GetIpForwardTable, GetBestInterfaceEx, GetAdaptersAddresses

kernel32.dll

DllMain

msvcrt.dll

DllMain

netapi32.dll

NetApiBufferFree, NetGetJoinInformation, NetShareGetInfo

ntdll.dll

RtlIpv4StringToAddressExW, RtlNtStatusToDosError, NtQuerySystemTime, RtlInitUnicodeString, RtlInitString, NtAllocateLocallyUniqueId, RtlFreeUnicodeString, NtCompareTokens

ole32.dll

CoCreateGuid, StringFromGUID2, CLSIDFromProgID, CoTaskMemAlloc, PropVariantCopy, CoUnmarshalInterface, CoReleaseMarshalData, CoMarshalInterface, CreateStreamOnHGlobal, PropVariantClear, CoSetProxyBlanket, CoInitializeSecurity, CoInitializeEx, CoUninitialize, CoTaskMemFree, IIDFromString, CoCreateInstance

propsys.dll

InitPropVariantFromCLSID, PSGetPropertyDescriptionByName, PropVariantToStringAlloc, PropVariantToString, PSGetPropertyKeyFromName

shell32.dll

SHGetKnownFolderPath, SHCreateItemWithParent, SHGetKnownFolderItem, SHGetFolderPathW, SHCreateItemFromParsingName, SHCreateDirectoryExW

shlwapi.dll

SHDeleteKeyW, StrCmpNW, PathRemoveExtensionW, PathFindFileNameW, PathFindExtensionW, PathCreateFromUrlW, SHStrDupW, PathFileExistsW

user32.dll

TranslateMessage, RegisterPowerSettingNotification, UnregisterPowerSettingNotification, PeekMessageW, DispatchMessageW, MsgWaitForMultipleObjectsEx, CharUpperW, CharUpperBuffW, CharLowerBuffW, wvsprintfA, UnregisterClassA, wvsprintfW, MsgWaitForMultipleObjects

userenv.dll

RegisterGPNotification, UnregisterGPNotification

wtsapi32.dll

WTSEnumerateSessionsW, WTSQuerySessionInformationW, WTSFreeMemory

xmllite.dll

CreateXmlWriter, CreateXmlReader

WMPNetwk.exe

‎‎Windows Media Player Network Sharing Service by Microsoft

Remove WMPNetwk.exe

Version:	12.0.9600.16384 (winblue_rtm.130821-1623)
MD5:	9ce95e2a32023ce9d9b38ee2295688a9
SHA1:	157416ad31d4d9482e1ca38959a99e0d267ea606

Overview

wmpnetwk.exe runs as a service under the name Windows Media Player-Netzwerkfreigabedienst (WMPNetworkSvc) with minimal NETWORK SERVICE privileges on the local PC and acts as the computer on the network. and is compiled as a 64 bit program.

Details

File name:	wmpnetwk.exe
Publisher:	Microsoft Corporation
Product name:	‎‎Windows Media Player Network Sharing Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Program Files\windows media player\wmpnetwk.exe
File version:	12.0.9600.16384 (winblue_rtm.130821-1623)
Product version:	12.0.9600.16384
Size:	1.34 MB (1,402,368 bytes)
Build date:	8/22/2013 6:10 AM
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'WMPNetworkSvc' (Windows Media Player-Netzwerkfreigabedienst)
WMPNetworkSvc

Network connections

[UDP] listens on port 5005

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00121313%	0.028634%
Kernel CPU:	0.00072063%	0.013761%
User CPU:	0.00049250%	0.014873%
Kernel CPU time:	17,096 ms/min	100,923,805ms/min
CPU cycles:	69,098/sec	17,470,203/sec
Context switches:	1/sec	284/sec
Memory
Private memory:	5.34 MB	21.59 MB
Private (maximum):	10.78 MB
Private (minimum):	2.19 MB
Non-paged memory:	5.34 MB	21.59 MB
Virtual memory:	90.67 MB	140.96 MB
Virtual memory (peak):	94.48 MB	169.69 MB
Working set:	4 MB	18.61 MB
Working set (peak):	15.87 MB	37.95 MB
Page faults:	12,325/min	2,039/min
I/O
I/O read transfer:	1.09 KB/sec	1.02 MB/min
I/O read operations:	2/sec	343/min
I/O write transfer:	2 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	752 Bytes/sec	448.09 KB/min
I/O other operations:	9/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	374	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\windows media player\wmpnetwk.exe"
Owner:	NETWORK SERVICE
Windows Service
Service name:	WMPNetworkSvc
Display name:	Windows Media Player-Netzwerkfreigabedienst
Description:	“Gibt Windows Media Player-Bibliotheken mithilfe des universellen Plug & Play für andere Players und Mediengeräte auf dem Netzwerk frei”
Type:	Win32OwnProcess

Threads

Averages

sechost.dll
Total CPU:	0.00329524%	0.272967%
Kernel CPU:	0.00190461%	0.107585%
User CPU:	0.00139062%	0.165382%
CPU cycles:	65,969/sec	5,741,424/sec
Memory:	348 KB	1.16 MB
ntdll.dll
Total CPU:	0.00090163%
Kernel CPU:	0.00069485%
User CPU:	0.00020678%
CPU cycles:	17,817/sec
Memory:	1.66 MB
wmpnetwk.exe (main module)
Total CPU:	0.00033260%
Kernel CPU:	0.00027022%
User CPU:	0.00006238%
CPU cycles:	11,060/sec
Memory:	1.36 MB
combase.dll
Total CPU:	0.00003253%
Kernel CPU:	0.00003253%
User CPU:	0.00000000%
CPU cycles:	610/sec
Memory:	1.84 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

upnphost.dll (UPnP Device Host by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 8.1	52.14%
Windows 8.1 Pro	25.71%
Windows 8.1 Single Language	11.43%
Windows 8.1 Pro with Media Center	5.00%
Windows 8.1 Enterprise	2.86%
Windows Developer Preview	1.43%
Windows 8.1 Enterprise Evaluation	0.71%
Microsoft Windows XP	0.71%

Distribution by country

United States installs about 41.43% of ‎‎Windows Media Player Network Sharing Service.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	23.33%
Lenovo	20.00%
Dell	14.44%
Hewlett-Packard	12.22%
Acer	12.22%
Toshiba	7.78%
Sony	3.33%
GIGABYTE	2.22%
Alienware	1.67%
Samsung	1.67%
Medion	1.11%

Remove Adware and Spyware Programs, FREE Download!