Should I block it?

No, this file is 100% safe to run.

Additional versions

12.0.9600.16384 (winblue_rtm.130821-1623)	4.79%
12.0.9600.16384 (winblue_rtm.130821-1623)	0.11%
12.0.9431.0 (winmain_bluemp.130615-1214)	0.27%
12.0.9431.0 (winmain_bluemp.130615-1214)	0.05%
12.0.9200.16384 (win8_rtm.120725-1247)	2.64%
12.0.9200.16384 (win8_rtm.120725-1247)	15.18%
12.0.8400.0 (winmain_win8rc.120518-1423)	0.11%
12.0.8400.0 (winmain_win8rc.120518-1423)	0.11%
12.0.8250.0 (winmain_win8beta.120217-1520)	0.05%
12.0.8102.0 (winmain_win8m3.110823-1455)	0.11%
12.0.7600.16385 (win7_rtm.090713-1255)	21.85%
12.0.7600.16385 (win7_rtm.090713-1255)	44.51%
12.0.7600.16385 (win7_rtm.090713-1255)	0.05%
11.0.6000.6324 (vista_rtm.061101-2205)	8.67%
11.0.6000.6324 (vista_rtm.061101-2205)	0.27%
11.0.6000.6324 (vista_rtm.061101-2205)	0.54%
11.0.5721.5262 (WMP_11.090130-1421)	0.22%
11.0.5721.5262 (WMP_11.090130-1421)	0.05%
11.0.5721.5145 (WMP_11.061018-2006)	0.38%
11.0.5721.5145 (WMP_11.061018-2006)	0.05%

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

PE file structure

Show functions

Import table

advapi32.dll

TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegCreateKeyExW, RegQueryValueExW, RegSetValueExW, RegDeleteKeyW, RegDeleteValueW, RegOpenKeyExW, RegQueryInfoKeyW, RegEnumKeyExW, GetAclInformation, GetAce, SetSecurityInfo, InitializeAcl, AddAce, CopySid, IsValidSid, GetLengthSid, EqualSid, ConvertStringSidToSidW, LookupAccountNameW, ConvertSidToStringSidW, GetSecurityInfo

gdi32.dll

GetObjectW, CreateSolidBrush, GetDeviceCaps, BitBlt, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, DeleteObject, DeleteDC, GetStockObject

gdiplus.dll

GdiplusShutdown, GdipCloneImage, GdipDrawImageRectI, GdipSetSmoothingMode, GdipSetInterpolationMode, GdipGetImageGraphicsContext, GdipCreateHICONFromBitmap, GdipCreateBitmapFromScan0, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipSetPropertyItem, GdipGetAllPropertyItems, GdipGetPropertySize, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipDeleteGraphics, GdipAlloc, GdipFree, GdiplusStartup

kernel32.dll

GlobalAlloc, WaitForMultipleObjects, CreateEventW, lstrcmpW, MulDiv, SetLastError, GetVersionExW, GlobalLock, lstrcpynW, CompareStringW, Sleep, GetProcAddress, InterlockedCompareExchange, LoadLibraryA, GlobalUnlock, FormatMessageW, CreateThread, LocalFree, OpenEventW, GetModuleFileNameW, GetModuleHandleW, LoadLibraryExW, MultiByteToWideChar, lstrcpynA, FreeLibrary, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, RtlUnwind, OutputDebugStringA, GetStartupInfoW, VirtualAlloc, VirtualFree, GetVersion, InterlockedExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetVersionExA, DelayLoadFailureHook, FindResourceW, FindResourceExW, CloseHandle, lstrlenW, FlushInstructionCache, GetCurrentProcess, GetCurrentThreadId, GetLastError, InterlockedIncrement, InterlockedDecrement, lstrcmpiW, WaitForSingleObject, RaiseException, SetEvent, RegisterApplicationRestart, HeapSetInformation, LoadLibraryW

msvcrt.dll

DllMain

netapi32.dll

NetApiBufferFree, NetGetJoinInformation

ole32.dll

StringFromIID, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, StringFromGUID2, OleUninitialize, OleInitialize, CreateStreamOnHGlobal, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc

secur32.dll

GetUserNameExW

shlwapi.dll

SHCreateStreamOnFileW

user32.dll

DestroyAcceleratorTable, SetFocus, GetFocus, IsWindow, CreatePopupMenu, TrackPopupMenuEx, AppendMenuW, GetMenuItemCount, RemoveMenu, GetMenuItemInfoW, LoadStringA, MessageBeep, PtInRect, CreateAcceleratorTableW, GetSystemMetrics, SetForegroundWindow, GetCursorPos, GetWindowLongW, ShowWindow, SetWindowPos, GetDlgItem, MapWindowPoints, GetClientRect, SystemParametersInfoW, GetWindowRect, GetWindow, GetParent, DispatchMessageW, EndPaint, GetDesktopWindow, PeekMessageW, CharNextW, DestroyWindow, CreateWindowExW, RegisterClassExW, LoadImageW, wsprintfW, LoadCursorW, IsChild, GetClassInfoExW, LoadAcceleratorsW, LoadMenuW, LoadStringW, PostMessageW, SetTimer, KillTimer, RegisterWindowMessageW, EnableMenuItem, SetMenuDefaultItem, DestroyMenu, GetMonitorInfoW, MonitorFromPoint, SendMessageW, TrackPopupMenu, GetSubMenu, DefWindowProcW, SetWindowTextW, GetWindowTextW, CallWindowProcW, FillRect, ReleaseCapture, GetMessageW, BeginPaint, TranslateMessage, GetClassNameW, GetWindowTextLengthW, PostQuitMessage, GetSysColor, MoveWindow, ClientToScreen, ScreenToClient, GetDC, ReleaseDC, InvalidateRect, InvalidateRgn, RedrawWindow, SetCapture, UnregisterClassA, SetWindowLongW

wmpnscfg.exe

Windows Media Player Network Sharing Service Configuration Application by Microsoft

Remove wmpnscfg.exe

Version:	11.0.6000.6324 (vista_rtm.061101-2205)
MD5:	20ef9002cff89c4c1077e4415ec7297b
SHA1:	1c1c5601e419b1ef421d1195c1483671a6cc7f46
SHA256:	48be4f192fa8e8e1e8cc0c49aec75e893e29e640db9d9218f4fed8a40a5bec8c

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wmpnscfg.exe?

This service allows Media Player to share media with other computers on the network.

About wmpnscfg.exe (from Microsoft)

“By sharing your media, you can do all of these things on your private network. (Media sharing does not allow you to share files outside of your network, however. For example, you cannot use media shar”

Overview

wmpnscfg.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program Windows Media Player 11 published by Microsoft Corporation. This version is designed to run on Windows Vista and is compiled as a 32 bit program.

Details

File name:	wmpnscfg.exe
Publisher:	Microsoft Corporation
Product name:	Windows Media Player Network Sharing Service Configuration Application
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Program Files\windows media player\wmpnscfg.exe
Original name:	WMPNSCFG.EXE.MUI
File version:	11.0.6000.6324 (vista_rtm.061101-2205)
Product version:	11.0.6000.6324
Size:	197 KB (201,728 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	5.841634
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following program will install this file

Windows Media Player 11

Microsoft Corporation

5% remove

Windows Media Player 11 was included with Vista with no updates, final release on XP. Windows Media Player is a media player and media library application developed by Microsoft that is used for playing audio, video and viewing images .In addition to being a media player, Windows Media Player includes the ability to rip music from and copy music to compact discs, burn recordable discs in Audio CD format or as data discs with playlists ...

Behaviors

Scheduled tasks

The task 'UpdateLibrary' in the path '\Microsoft\Windows\Windows Media Sharing\UpdateLibrary'
Entry path '\Microsoft\Windows\Windows Media Sharing\UpdateLibrary'

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'WMPNSCFG' → C:\Program Files\Windows Media Player\WMPNSCFG.exe

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00003173%	0.028634%
Kernel CPU:	0.00002909%	0.013761%
User CPU:	0.00000264%	0.014873%
Kernel CPU time:	3,593 ms/min	100,923,805ms/min
CPU cycles:	4,015/sec	17,470,203/sec
Memory
Private memory:	1.7 MB	21.59 MB
Private (maximum):	5.11 MB
Private (minimum):	4.79 MB
Non-paged memory:	1.7 MB	21.59 MB
Virtual memory:	40.05 MB	140.96 MB
Virtual memory (peak):	42.19 MB	169.69 MB
Working set:	4.83 MB	18.61 MB
Working set (peak):	5.12 MB	37.95 MB
Page faults:	5,515/min	2,039/min
I/O
I/O read transfer:	0 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	7 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	107	600
GUI GDI count:	20	103
GUI USER count:	12	49

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	"C:\Program Files\windows media player\wmpnscfg.exe"
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads