Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.0.5358.0 (WMP_11.060509-2009) 0.03%
6.0.5358.0 (WMP_11.060509-2009) 0.03%
12.0.9431.0 (winmain_bluemp.130615-1214) 0.21%
12.0.9431.0 (winmain_bluemp.130615-1214) 0.03%
12.0.9200.16384 (win8_rtm.120725-1247) 0.67%
12.0.9200.16384 (win8_rtm.120725-1247) 0.73%
12.0.9200.16384 (win8_rtm.120725-1247) 1.33%
12.0.9200.16384 (win8_rtm.120725-1247) 12.36%
12.0.8400.0 (winmain_win8rc.120518-1423) 0.06%
12.0.8400.0 (winmain_win8rc.120518-1423) 0.06%
12.0.8250.0 (winmain_win8beta.120217-1520) 0.03%
12.0.7600.16385 (win7_rtm.090713-1255) 5.54%
12.0.7600.16385 (win7_rtm.090713-1255) 43.53%
12.0.7600.16385 (win7_rtm.090713-1255) 3.60%
12.0.7600.16385 (win7_rtm.090713-1255) 16.27%
12.0.7600.16385 (win7_rtm.090713-1255) 0.03%
12.0.7600.16385 (win7_rtm.090713-1255) 0.03%
12.0.7600.16385 (win7_rtm.090713-1255) 0.03%
11.0.6000.6324 (vista_rtm.061101-2205) 7.00%
11.0.6000.6324 (vista_rtm.061101-2205) 0.33%
11.0.6000.6324 (vista_rtm.061101-2205) 1.09%
11.0.5721.5262 (WMP_11.090130-1421) 1.36%
11.0.5721.5262 (WMP_11.090130-1421) 0.06%
11.0.5721.5262 (WMP_11.090130-1421) 0.03%
11.0.5721.5262 (WMP_11.090130-1421) 0.15%
View more

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
EventRegister, EventUnregister, TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, EventWrite, RegCloseKey, RegOpenKeyExW, QueryServiceStatusEx, ControlService, SetServiceStatus, CloseServiceHandle, OpenServiceW, OpenSCManagerW, DeleteService, ChangeServiceConfig2W, CreateServiceW, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, GetSecurityDescriptorControl, MakeAbsoluteSD, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, InitializeSecurityDescriptor, RegDeleteValueW, RegCreateKeyExW, RegQueryValueExW, RegSetValueExW, GetLengthSid, IsValidSid, CopySid, AddAce, InitializeAcl, GetAclInformation, SetSecurityDescriptorDacl, ConvertSecurityDescriptorToStringSecurityDescriptorW, ConvertStringSidToSidW, RegSetKeySecurity, ConvertStringSecurityDescriptorToSecurityDescriptorW, EqualSid, GetNamedSecurityInfoW, RegEnumKeyExW, RegNotifyChangeKeyValue, RegGetValueW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, FreeSid, SetNamedSecurityInfoW, SetEntriesInAclW, AllocateAndInitializeSid, LsaClose, LsaFreeMemory, LsaLookupNames2, LsaOpenPolicy, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, ConvertSidToStringSidW, ImpersonateLoggedOnUser, RevertToSelf, OpenProcessToken, GetTokenInformation, TraceEvent, LookupAccountSidW, ChangeServiceConfigW, StartServiceW, SetSecurityInfo, GetAce, GetSecurityInfo, SetSecurityDescriptorControl, LookupAccountNameW, RegDeleteKeyW, RegGetKeySecurity, RegQueryInfoKeyW, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA, CryptGenRandom, CryptAcquireContextW, CreateWellKnownSid, SetFileSecurityW, GetFileSecurityW, OpenThreadToken, CryptReleaseContext
faultrep.dll
ReportFault
gdi32.dll
DeleteObject
httpapi.dll
HttpInitialize, HttpTerminate, HttpSetServiceConfiguration, HttpDeleteServiceConfiguration
iphlpapi.dll
GetAdaptersAddresses, GetIpForwardTable, NotifyAddrChange, GetBestInterfaceEx, GetIpNetEntry2, SendARP, ResolveIpNetEntry2, CancelIPChangeNotify, GetIpAddrTable, CancelMibChangeNotify2, NotifyIpInterfaceChange
kernel32.dll
DllMain, InterlockedExchange, EnterCriticalSection, LeaveCriticalSection, IsDebuggerPresent, GetModuleFileNameW, LocalFree, IsWow64Process, GetCurrentProcess, lstrcmpW, ResetEvent, SetProcessWorkingSetSize, DeleteTimerQueueEx, DeleteTimerQueueTimer, CreateTimerQueue, CreateTimerQueueTimer, ChangeTimerQueueTimer, InterlockedExchangeAdd, CompareStringOrdinal, MultiByteToWideChar, WriteFile, CreateFileW, CompareStringA, MulDiv, GetLongPathNameW, CreateEventW, GetFileAttributesW, RemoveDirectoryW, UnregisterWaitEx, DeleteFileW, CopyFileW, RegisterWaitForSingleObject, FindNextFileW, FindFirstFileW, QueueUserWorkItem, FormatMessageW, lstrcmpiW, CreateThread, WaitForMultipleObjects, GetStringTypeExW, GetDynamicTimeZoneInformation, GetComputerNameW, WideCharToMultiByte, lstrlenA, LocalAlloc, HeapFree, GetProcessHeap, GetProductInfo, GetVersionExW, GetTempPathW, DelayLoadFailureHook, GetProcAddress, FreeLibrary, LoadLibraryExA, PowerCreateRequest, InterlockedCompareExchange64, SetLastError, GetTickCount64, PowerClearRequest, PowerSetRequest, WaitForSingleObject, Sleep, GetTickCount, GetLastError, InterlockedCompareExchange, HeapSetInformation, CompareStringW, OpenEventW, SetEvent, InterlockedDecrement, InterlockedIncrement, lstrlenW, ExitProcess, GetCommandLineW, GetStartupInfoW, RegSetValueExA, RegQueryValueExA, RegCreateKeyExA, GetLocalTime, GlobalMemoryStatus, GetDiskFreeSpaceA, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, FreeEnvironmentStringsA, DeviceIoControl, GetModuleHandleA, LoadLibraryA, OpenMutexW, CreateMutexW, ReleaseMutex, GetFileAttributesExW, CompareFileTime, FreeLibraryAndExitThread, DuplicateHandle, LoadLibraryExW, FreeResource, GetFileSize, GetThreadPriority, SetThreadPriority, FileTimeToSystemTime, FileTimeToDosDateTime, FindClose, GetTempFileNameW, GlobalFree, ExpandEnvironmentStringsW, VirtualFree, OpenFileMappingW, VirtualAlloc, GetCurrentThread, SetFileAttributesW, CreateDirectoryW, GetFileSizeEx, SetFilePointerEx, ReadFile, HeapDestroy, HeapAlloc, HeapReAlloc, HeapSize, CloseHandle, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetFullPathNameW, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, InitializeCriticalSectionAndSpinCount, CreateFileMappingW, MapViewOfFile, GetSystemTime, SystemTimeToFileTime, UnmapViewOfFile, RegEnumValueW, RegQueryInfoKeyW, RegGetKeySecurity, GetModuleHandleW, LoadLibraryW, OutputDebugStringA, SetUnhandledExceptionFilter, GetVersionExA, DebugBreak, SetThreadExecutionState, GetVersion, IsProcessorFeaturePresent, FileTimeToLocalFileTime, TzSpecificLocalTimeToSystemTime, FindCloseChangeNotification, FindFirstChangeNotificationW, FindNextChangeNotification, ResolveDelayLoadedAPI, GlobalMemoryStatusEx, GetDiskFreeSpaceW, GetUserGeoID, GetSystemDefaultLCID, GetNativeSystemInfo, GetModuleHandleExW, SetFilePointer, VerifyVersionInfoW, VerSetConditionMask, GetSystemWow64DirectoryW, GetSystemDirectoryW, WaitForMultipleObjectsEx, GetEnvironmentVariableW
mfplat.dll
MFShutdown, MFStartup, MFInvokeCallback, MFCreateAsyncResult, CreatePropertyStore
msvcrt.dll
DllMain
netapi32.dll
NetApiBufferFree, NetGetJoinInformation, NetShareGetInfo
ntdll.dll
NtQuerySystemTime, RtlFreeHeap, RtlAllocateHeap, RtlIpv4StringToAddressExW, RtlInitUnicodeString, RtlInitString, NtAllocateLocallyUniqueId, RtlFreeUnicodeString, RtlNtStatusToDosError, strchr, RtlUnwind, RtlGetVersion
ole32.dll
CoInitializeSecurity, CoInitializeEx, CoSetProxyBlanket, CoTaskMemFree, CoUninitialize, PropVariantClear, CoMarshalInterface, CreateStreamOnHGlobal, CoReleaseMarshalData, CoUnmarshalInterface, IIDFromString, CoTaskMemAlloc, PropVariantCopy, StringFromGUID2, CoCreateGuid, CoCreateInstance, CLSIDFromProgID
propsys.dll
PropVariantToString, PropVariantToStringAlloc, PSGetPropertyDescriptionByName, PSGetPropertyKeyFromName, InitPropVariantFromCLSID
shell32.dll
SHGetFolderPathW, SHCreateDirectoryExW, SHGetFolderPathAndSubDirW, SHGetKnownFolderItem, SHCreateItemWithParent, SHGetKnownFolderPath, SHCreateItemFromParsingName
shlwapi.dll
PathFileExistsW, StrCmpNW, PathFindFileNameW, StrStrIW, PathAppendW, HashData, PathRemoveExtensionW, PathFindExtensionW, PathCreateFromUrlW, SHStrDupW, SHDeleteKeyW
user32.dll
wvsprintfA, CharLowerBuffW, CharUpperBuffW, PeekMessageW, DispatchMessageW, CharNextA, TranslateMessage, MsgWaitForMultipleObjects, MsgWaitForMultipleObjectsEx, RegisterPowerSettingNotification, CharUpperW, wvsprintfW, UnregisterPowerSettingNotification, UnregisterClassA
userenv.dll
RegisterGPNotification, UnregisterGPNotification
winhttp.dll
WinHttpWriteData, WinHttpQueryHeaders, WinHttpAddRequestHeaders, WinHttpCrackUrl, WinHttpSetCredentials, WinHttpGetDefaultProxyConfiguration, WinHttpGetIEProxyConfigForCurrentUser, WinHttpGetProxyForUrl, WinHttpSetOption, WinHttpTimeFromSystemTime, WinHttpQueryDataAvailable, WinHttpCloseHandle, WinHttpReadData, WinHttpReceiveResponse, WinHttpSendRequest, WinHttpOpen, WinHttpSetTimeouts, WinHttpSetStatusCallback, WinHttpConnect, WinHttpOpenRequest
wmpmde.dll
MFCreateNetVRoot, MFCreateWMPMDEOpCenter
ws2_32.dll
GetAddrInfoW, getnameinfo, FreeAddrInfoW
wtsapi32.dll
WTSFreeMemory, WTSEnumerateSessionsW, WTSQuerySessionInformationW
xmllite.dll
CreateXmlReader, CreateXmlWriter

wmpnetwk.exe

Windows Media Player Network Sharing Service by Microsoft

Remove wmpnetwk.exe
Version:   12.0.9200.16384 (win8_rtm.120725-1247)
MD5:   c8d9bb66227b6309d1e394c7e02d40f2
SHA1:   e15e8ad983e873535882f4a9722d428c56a61cfd
SHA256:   313c272d2bf598c5ec37e16108dc570ad08b9e5027022c7e5ca1bd08ec539371
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wmpnetwk.exe?

This service allows Media Player to share media with other computers on the network.

About wmpnetwk.exe (from Microsoft)

Designed by media lovers, for media lovers. Windows Media Player 12—available only in Windows 7—plays more music and video than ever, including Flip Video and unprotected songs from your iTunes librar

Overview

wmpnetwk.exe runs as a service under the name A Windows Media Player hálózatmegosztási szolgáltatása (WMPNetworkSvc) with minimal NETWORK SERVICE privileges on the local PC and acts as the computer on the network. This version is installed on Windows 8 and is compiled as a 32 bit program.

DetailsDetails

File name:wmpnetwk.exe
Publisher:Microsoft Corporation
Product name:Windows Media Player Network Sharing Service
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows media player\wmpnetwk.exe
Original name:WMPNetwk.exe.mui
File version:12.0.9200.16384 (win8_rtm.120725-1247)
Product version:12.0.9200.16384
Size:1001.5 KB (1,025,536 bytes)
Digital DNA
Entropy:6.453524
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Network connections
  • [UDP] listens on port 5005

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00311213%
    0.028634%
    Kernel CPU:0.00158820%
    0.013761%
    User CPU:0.00152393%
    0.014873%
    Kernel CPU time:4,025,269 ms/min
    100,923,805ms/min
    CPU cycles:36,576/sec
    17,470,203/sec
    Memory
    Private memory:6.78 MB
    21.59 MB
    Private (maximum):11.22 MB
    Private (minimum):3.03 MB
    Non-paged memory:6.78 MB
    21.59 MB
    Virtual memory:83.32 MB
    140.96 MB
    Virtual memory (peak):85.47 MB
    169.69 MB
    Working set:4.68 MB
    18.61 MB
    Working set (peak):13.97 MB
    37.95 MB
    Page faults:15,755/min
    2,039/min
    I/O
    I/O read transfer:275 Bytes/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:65 Bytes/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:345 Bytes/sec
    448.09 KB/min
    I/O other operations:9/sec
    1,671/min
    Resource allocations
    Threads:10
    12
    Handles:556
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:32-bit
    Command line:"C:\Program Files\windows media player\wmpnetwk.exe"
    Owner:NETWORK SERVICE
    Windows Service
    Service name:WMPNetworkSvc
    Display name:A Windows Media Player hálózatmegosztási szolgáltatása
    Description:“Consente di condividere il Catalogo multimediale di Windows Media Player con altri lettori e dispositivi multimediali in rete mediante Universal Plug and Play”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    sechost.dll
    Total CPU:0.00320673%
    0.272967%
    Kernel CPU:0.00133231%
    0.107585%
    User CPU:0.00187443%
    0.165382%
    CPU cycles:54,971/sec
    5,741,424/sec
    Memory:208 KB
    1.16 MB
    wmpnetwk.exe (main module)
    Total CPU:0.00310081%
    Kernel CPU:0.00156581%
    User CPU:0.00153500%
    CPU cycles:49,871/sec
    Memory:1020 KB
    ntdll.dll
    Total CPU:0.00033674%
    Kernel CPU:0.00031213%
    User CPU:0.00002461%
    CPU cycles:4,768/sec
    Memory:1.4 MB

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 58.50%
    Windows 7 Ultimate 23.50%
    Windows 7 Professional 9.50%
    Windows Vista Home Premium 3.50%
    Windows 7 Home Basic 2.00%
    Windows Seven Black Edition 1.00%
    Microsoft Windows XP 1.00%
    Windows 8 Pro 0.50%
    Windows 7 Starter 0.50%

    Distribution by countryDistribution by country

    United States installs about 51.52% of Windows Media Player Network Sharing Service.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 24.80%
    Hewlett-Packard 19.60%
    ASUS 16.80%
    Toshiba 13.60%
    Acer 12.00%
    Sony 6.40%
    Alienware 1.60%
    GIGABYTE 1.60%
    Lenovo 1.60%
    Samsung 1.20%
    Sahara 0.80%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE