Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 0.94%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.24%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.71%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.24%
6.2.9200.16384 (win8_rtm.120725-1247) 2.35%
6.2.9200.16384 (win8_rtm.120725-1247) 0.47%
6.1.7600.16385 (win7_rtm.090713-1255) 8.24%
6.1.7600.16385 (win7_rtm.090713-1255) 8.00%
6.0.6000.16386 (vista_rtm.061101-2205) 1.65%
6.0.6000.16386 (vista_rtm.061101-2205) 0.24%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.47%
5.1.2600.5589 (xpsp_sp3_qfe.080428-1317) 4.94%
5.1.2600.5589 (xpsp_sp3_qfe.080428-1317) 0.24%
5.1.2600.5589 (xpsp_sp3_qfe.080428-1317) 0.47%
5.1.2600.5584 (xpsp_sp3_qfe.080421-1413) 0.24%
5.1.2600.5584 (xpsp_sp3_qfe.080421-1413) 0.24%
5.1.2600.5512 (xpsp.080413-0852) 44.94%
5.1.2600.5512 (xpsp.080413-0852) 0.24%
5.1.2600.5512 (xpsp.080413-0852) 0.24%
5.1.2600.5512 (xpsp.080413-0852) 1.88%
5.1.2600.5512 (xpsp.080413-0852) 2.35%
5.1.2600.5512 (xpsp.080413-0852) 0.47%
5.1.2600.5512 (xpsp.080413-0852) 2.35%
5.1.2600.5512 (xpsp.080413-0852) 0.47%
5.1.2600.5512 (xpsp.080413-0852) 0.24%
View more

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
AccessCheck, RevertToSelf, QueryServiceConfigW, CloseServiceHandle, QueryServiceStatus, OpenServiceW, OpenSCManagerW, StartServiceW, FreeSid, AllocateAndInitializeSid, GetTokenInformation, LookupAccountSidW, OpenProcessToken, EqualSid, DuplicateTokenEx, CreateProcessAsUserW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegisterServiceCtrlHandlerW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenThreadToken, CheckTokenMembership, CreateWellKnownSid, SetTraceCallback, OpenTraceW, ProcessTrace, CloseTrace, StartTraceW, EnableTrace, ControlTraceW, RemoveTraceCallback, QueryServiceConfigA, RegCreateKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, RegDeleteValueW, RegNotifyChangeKeyValue, DuplicateToken, SetThreadToken, WmiOpenBlock, WmiSetSingleInstanceW, WmiCloseBlock
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll
DelayLoadFailureHook, ResolveDelayLoadedAPI
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, SetLastError, UnhandledExceptionFilter, GetLastError
api-ms-win-core-file-l1-2-0.dll
ReadFile, CreateFileA, WriteFile
api-ms-win-core-file-l1-2-1.dll
ReadFile, WriteFile, CreateFileA
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-heap-l1-2-0.dll
GetProcessHeap, HeapAlloc, HeapFree, HeapSize, HeapDestroy
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree, LocalAlloc
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedExchangeAdd, InterlockedCompareExchange, InterlockedDecrement, InterlockedExchange, InterlockedIncrement
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-kernel32-legacy-l1-1-0.dll
FindResourceW, GetComputerNameW, LoadLibraryA, WaitForMultipleObjects, LoadLibraryW, BindIoCompletionCallback, UnregisterWait, RegisterWaitForSingleObject
api-ms-win-core-kernel32-legacy-l1-1-1.dll
RegisterWaitForSingleObject, BindIoCompletionCallback, GetComputerNameW, UnregisterWait, LoadLibraryW, FindResourceW, LoadLibraryA, WaitForMultipleObjects
api-ms-win-core-libraryloader-l1-1-1.dll
DisableThreadLibraryCalls, LockResource, SizeofResource, FreeLibrary, LoadStringW, GetModuleHandleExW, GetProcAddress, LoadResource, LoadLibraryExW, GetModuleFileNameW, FreeLibraryAndExitThread, FreeResource
api-ms-win-core-libraryloader-l1-2-0.dll
LoadResource, GetModuleHandleExW, SizeofResource, GetProcAddress, LockResource, GetModuleFileNameW, LoadStringW, DisableThreadLibraryCalls, FreeLibrary, FreeResource
api-ms-win-core-localization-l1-2-0.dll
FormatMessageW
api-ms-win-core-localization-l1-2-1.dll
FormatMessageW
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsA
api-ms-win-core-processthreads-l1-1-1.dll
SetThreadToken, TerminateProcess, CreateThread, GetCurrentThreadId, GetCurrentProcessId, OpenProcessToken, GetCurrentProcess, OpenThreadToken, GetCurrentThread, OpenProcess
api-ms-win-core-processthreads-l1-1-2.dll
OpenProcessToken, SetThreadToken, TerminateProcess, OpenProcess, GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess, OpenThreadToken, GetCurrentThread
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegSetValueExW, RegDeleteValueW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar, WideCharToMultiByte
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrlenA, lstrcmpiA, lstrcmpiW, lstrcmpW, lstrlenW
api-ms-win-core-synch-l1-2-0.dll
EnterCriticalSection, Sleep, WaitForSingleObjectEx, InitializeCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, CreateEventW, SetEvent, CreateEventA, ResetEvent
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetComputerNameExW, GetTickCount64, GetTickCount, GetSystemDirectoryW, GetVersionExW
api-ms-win-core-sysinfo-l1-2-1.dll
GetVersionExW, GetComputerNameExW, GetTickCount64, GetSystemDirectoryW, GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-threadpool-legacy-l1-1-0.dll
CreateTimerQueue, UnregisterWaitEx, DeleteTimerQueueEx, QueueUserWorkItem
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime, FileTimeToSystemTime
api-ms-win-security-base-l1-2-0.dll
DuplicateToken, RevertToSelf, CreateWellKnownSid, CheckTokenMembership
authz.dll
AuthzInitializeResourceManager, AuthziLogAuditEvent, AuthzFreeAuditEvent, AuthzFreeResourceManager
dhcpcsvc6.dll
Dhcpv6RenewPrefix, Dhcpv6RequestPrefix, Dhcpv6ReleasePrefix, Dhcpv6RequestPrefixEx, Dhcpv6ReleasePrefixEx, Dhcpv6RenewPrefixEx, Dhcpv6CancelOperation
dnsapi.dll
Dns_BuildPacket, DnsUtf8ToUnicode, DnsGetBufferLengthForStringCopy, Dns_ParseMessage, DnsFreeConfigStructure, DnsQueryConfigAllocEx, DnsNameCompare_W, DnsGetPrimaryDomainName_A, DnsQuery_W, DnsRecordListFree, DnsQuery_UTF8, DnsFree
iphlpapi.dll
NhpAllocateAndGetInterfaceInfoFromStack, SetIpForwardEntryToStack, AllocateAndGetIpAddrTableFromStack, AllocateAndGetIfTableFromStack, GetIpNetTable, SendARP, NotifyAddrChange, GetPerAdapterInfo, GetAdaptersInfo, GetInterfaceInfo, UnenableRouter, EnableRouter, GetAdaptersAddresses, GetIfTable, GetIpAddrTable, ConvertInterfaceIndexToLuid, ConvertInterfaceLuidToNameW, ConvertInterfaceLuidToIndex, ConvertIpv4MaskToLength, ConvertInterfaceLuidToGuid, SetIpInterfaceEntry, InitializeIpInterfaceEntry, ConvertInterfaceGuidToLuid, GetIfEntry, GetAdapterIndex, CancelIPChangeNotify, CreateUnicastIpAddressEntry, DeleteIpNetEntry, DeleteUnicastIpAddressEntry, InitializeUnicastIpAddressEntry, GetIfEntry2
kernel32.dll
CreateTimerQueue, DeleteTimerQueueEx, UnregisterWaitEx, SystemTimeToFileTime, FileTimeToSystemTime, GetComputerNameExW, FormatMessageW, LocalAlloc, GetCurrentThread, DuplicateHandle, OpenProcess, GetSystemDirectoryW, MultiByteToWideChar, WideCharToMultiByte, SetLastError, QueueUserWorkItem, lstrcmpiW, lstrlenA, lstrcpyA, lstrcmpiA, LocalFree, SetEvent, FreeResource, SizeofResource, LockResource, LoadResource, FindResourceW, LoadLibraryW, lstrcmpW, CreateFileW, ExpandEnvironmentStringsA, InterlockedCompareExchange, ExpandEnvironmentStringsW, LoadLibraryExW, GetLongPathNameW, CreateDirectoryW, InitializeCriticalSectionAndSpinCount, MoveFileExW, lstrcatW, FileTimeToLocalFileTime, DeleteTimerQueueTimer, TerminateThread, GetFileSize, GetLocalTime, CreateTimerQueueTimer, CreateThread, GetComputerNameW, GetVersionExW, Sleep, ResumeThread, WTSGetActiveConsoleSessionId, DeviceIoControl, lstrcpyW, InterlockedExchange, WaitForSingleObject, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, BindIoCompletionCallback, CreateEventW, RegisterWaitForSingleObject, HeapAlloc, GetProcessHeap, InterlockedDecrement, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, HeapFree, InterlockedIncrement, DeleteCriticalSection, GetProcAddress, LoadLibraryA, CloseHandle, GetLastError, CreateEventA, FreeLibrary, DisableThreadLibraryCalls, lstrlenW, UnregisterWait, ReadFile, WriteFile, HeapSize, WaitForSingleObjectEx, GetModuleHandleExW
mprapi.dll
MprInfoDelete, MprInfoBlockAdd, MprInfoBlockFind, MprInfoCreate, MprInfoBlockSet
msvcrt.dll
DllMain
mswsock.dll
AcceptEx
netshell.dll
NcFreeNetconProperties
nsi.dll
NsiSetAllParametersEx, NsiGetParameterEx, NsiAllocateAndGetTable, NsiSetAllParameters, NsiRequestChangeNotification, NsiCancelChangeNotification, NsiFreeTable, NsiGetAllParameters
ntdll.dll
RtlFindClearBitsAndSet, RtlClearBits, RtlFindSetBits, NtDeviceIoControlFile, RtlInitializeBitMap, RtlClearAllBits, NtCreateFile, RtlImpersonateSelf, NtUnloadDriver, NtLoadDriver, RtlQueueWorkItem, RtlRandom, RtlDeregisterWait, RtlRegisterWait, NtCreateEvent, RtlInitializeGenericTable, RtlDeleteElementGenericTable, RtlGetElementGenericTable, RtlNumberGenericTableElements, RtlLookupElementGenericTable, RtlEnumerateGenericTable, RtlAnsiStringToUnicodeString, NtOpenFile, RtlFreeHeap, RtlAllocateHeap, NtQuerySymbolicLinkObject, NtOpenSymbolicLinkObject, RtlIpv4StringToAddressW, RtlIpv4AddressToStringW, RtlNtStatusToDosError, RtlCreateTimerQueue, RtlCreateTimer, RtlUpdateTimer, RtlDeleteTimerQueue, RtlDeleteTimer, NtOpenKey, NtClose, RtlInitUnicodeString, NtQueryValueKey, RtlInsertElementGenericTable, NtQueryInformationProcess, RtlInitString, RtlAdjustPrivilege, NtSetEvent, RtlFreeUnicodeString, RtlStringFromGUID, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlInitAnsiString, RtlDeregisterWaitEx, NtNotifyChangeKey, RtlGUIDFromString, RtlPublishWnfStateData, RtlDeleteTimerQueueEx
ole32.dll
CoTaskMemFree, CoUninitialize, CLSIDFromString, CoSwitchCallContext, CoImpersonateClient, CoRevertToSelf, StringFromGUID2, CoTaskMemAlloc, CoCreateInstance, CoInitializeEx, CoSetProxyBlanket, CoGetCallContext, CLSIDFromProgID, OleRun
rasapi32.dll
RasQuerySharedConnection, RasGetCredentialsW, RasDialW, RasHangUpW, RasGetConnectionStatistics, RasConnectionNotificationW, RasGetEntryPropertiesW, RasQuerySharedAutoDial, RasGetAutodialAddressA, RasGetEntryHrasconnW, RasGetProjectionInfoA, RasAutoDialSharedConnection
rasman.dll
RasInitialize, RasReferenceRasman
rpcrt4.dll
RpcServerUnregisterIfEx, RpcBindingVectorFree, RpcEpUnregister, RpcEpRegisterW, RpcServerInqBindings, RpcServerRegisterIfEx, RpcServerUseProtseqW, RpcBindingInqAuthClientW, RpcStringBindingParseW, RpcBindingToStringBindingW, I_RpcBindingIsClientLocal, I_RpcBindingInqLocalClientPID, NdrServerCall2, RpcServerRegisterAuthInfoW, RpcStringFreeW, RpcRaiseException, RpcRevertToSelf, RpcImpersonateClient, RpcServerInqDefaultPrincNameW
rtutils.dll
TracePrintfExA, TraceRegisterExW, RouterLogDeregisterW, RouterLogRegisterA, TraceVprintfExA, TraceDeregisterW, TraceRegisterExA, RouterLogEventValistExA
shlwapi.dll
PathIsRelativeW, PathFindNextComponentW, PathCanonicalizeW, AssocQueryStringW, PathFindFileNameW, PathSkipRootW
slc.dll
SLGetWindowsInformationDWORD
user32.dll
LoadStringW
winnsi.dll
NsiConnectToServer, NsiRpcRegisterChangeNotification, NsiRpcDeregisterChangeNotification, NsiRpcSetAllParameters, NsiDisconnectFromServer
wmi.dll
WmiCloseBlock, WmiSetSingleInstanceW, WmiOpenBlock
ws2_32.dll
WSAProviderConfigChange, WSAIoctl, WSASendTo, WSARecvFrom, WSAAddressToStringA, WSAEnumProtocolsW, WSASocketW, WSAStringToAddressA, WSAAddressToStringW
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory
Export table
NatAcquirePortReservation
NatCancelDynamicRedirect
NatCancelRedirect
NatCreateDynamicFullRedirect
NatCreateDynamicRedirect
NatCreateDynamicRedirectEx
NatCreateRedirect
NatCreateRedirectEx
NatInitializePortReservation
NatInitializeTranslator
NatLookupAndQueryInformationSessionMapping
NatQueryInformationRedirect
NatQueryInformationRedirectHandle
NatReleasePortReservation
NatShutdownPortReservation
NatShutdownTranslator
NhAcceptStreamSocket
NhAcquireFixedLengthBuffer
NhAcquireVariableLengthBuffer
NhCreateDatagramSocket
NhCreateStreamSocket
NhDeleteSocket
NhInitializeBufferManagement
NhInitializeTraceManagement
NhReadDatagramSocket
NhReadStreamSocket
NhReleaseBuffer
NhWriteDatagramSocket
NhWriteStreamSocket
RegisterProtocol
ServiceMain
SvchostPushServiceGlobals

IPNATHLP.dll

Microsoft NAT Helper Components by Microsoft

Remove IPNATHLP.dll
Version:   5.1.2600.5512 (xpsp.080413-0852)
MD5:   c4e4c037245cd2a2610ee58f46614712
SHA1:   cad26f3f331b286dc3afd87c9b609b435126a5e1
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

ipnathlp.dll is loaded as dynamic link library that runs in the context of a process. This version is installed on Windows XP.

DetailsDetails

File name:ipnathlp.dll
Publisher:Microsoft Corporation
Product name:Microsoft NAT Helper Components
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\ipnathlp.dll
File version:5.1.2600.5512 (xpsp.080413-0852)
Product version:5.1.2600.5512
Size:323.5 KB (331,264 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'
  • Shared name is 'SharedAccess'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 77.50%
Windows 7 Home Premium 8.00%
Windows 7 Ultimate 3.50%
Windows 8 Pro 3.00%
Windows 8.1 Pro 1.50%
Windows 8.1 1.50%
Windows Vista Home Premium 1.50%
Windows 8.1 Single Language 0.50%
Windows 8.1 Enterprise 0.50%
Windows 8.1 Pro Preview 0.50%
Windows 7 Professional 0.50%
Windows Vista Ultimate 0.50%
Windows 8 Pro with Media Center 0.50%
Windows 8 0.50%

Distribution by countryDistribution by country

United States installs about 46.60% of Microsoft NAT Helper Components.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 43.40%
Intel 9.36%
Hewlett-Packard 8.09%
Toshiba 5.96%
American Megatrends 5.53%
Acer 5.11%
Compaq 5.11%
GIGABYTE 4.68%
ASUS 4.26%
Sahara 2.55%
Sony 1.70%
Lenovo 1.70%
Gateway 1.70%
Samsung 0.85%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE