Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.9600.16384 (winblue_rtm.130821-1623) 4.79%
12.0.9600.16384 (winblue_rtm.130821-1623) 0.11%
12.0.9431.0 (winmain_bluemp.130615-1214) 0.27%
12.0.9431.0 (winmain_bluemp.130615-1214) 0.05%
12.0.9200.16384 (win8_rtm.120725-1247) 2.64%
12.0.9200.16384 (win8_rtm.120725-1247) 15.18%
12.0.8400.0 (winmain_win8rc.120518-1423) 0.11%
12.0.8400.0 (winmain_win8rc.120518-1423) 0.11%
12.0.8250.0 (winmain_win8beta.120217-1520) 0.05%
12.0.8102.0 (winmain_win8m3.110823-1455) 0.11%
12.0.7600.16385 (win7_rtm.090713-1255) 21.85%
12.0.7600.16385 (win7_rtm.090713-1255) 44.51%
12.0.7600.16385 (win7_rtm.090713-1255) 0.05%
11.0.6000.6324 (vista_rtm.061101-2205) 8.67%
11.0.6000.6324 (vista_rtm.061101-2205) 0.27%
11.0.6000.6324 (vista_rtm.061101-2205) 0.54%
11.0.5721.5262 (WMP_11.090130-1421) 0.22%
11.0.5721.5262 (WMP_11.090130-1421) 0.05%
11.0.5721.5145 (WMP_11.061018-2006) 0.38%
11.0.5721.5145 (WMP_11.061018-2006) 0.05%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegCreateKeyExW, RegQueryValueExW, RegSetValueExW, RegDeleteKeyW, RegDeleteValueW, RegOpenKeyExW, RegQueryInfoKeyW, RegEnumKeyExW, GetAclInformation, GetAce, SetSecurityInfo, InitializeAcl, AddAce, CopySid, IsValidSid, GetLengthSid, EqualSid, ConvertStringSidToSidW, LookupAccountNameW, ConvertSidToStringSidW, GetSecurityInfo
gdi32.dll
GetObjectW, CreateSolidBrush, GetDeviceCaps, BitBlt, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, DeleteObject, DeleteDC, GetStockObject
gdiplus.dll
GdiplusShutdown, GdipCloneImage, GdipDrawImageRectI, GdipSetSmoothingMode, GdipSetInterpolationMode, GdipGetImageGraphicsContext, GdipCreateHICONFromBitmap, GdipCreateBitmapFromScan0, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipSetPropertyItem, GdipGetAllPropertyItems, GdipGetPropertySize, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipDeleteGraphics, GdipAlloc, GdipFree, GdiplusStartup
kernel32.dll
GlobalAlloc, WaitForMultipleObjects, CreateEventW, lstrcmpW, MulDiv, SetLastError, GetVersionExW, GlobalLock, lstrcpynW, CompareStringW, Sleep, GetProcAddress, InterlockedCompareExchange, LoadLibraryA, GlobalUnlock, FormatMessageW, CreateThread, LocalFree, OpenEventW, GetModuleFileNameW, GetModuleHandleW, LoadLibraryExW, MultiByteToWideChar, lstrcpynA, FreeLibrary, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, RtlUnwind, OutputDebugStringA, GetStartupInfoW, VirtualAlloc, VirtualFree, GetVersion, InterlockedExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetVersionExA, DelayLoadFailureHook, FindResourceW, FindResourceExW, CloseHandle, lstrlenW, FlushInstructionCache, GetCurrentProcess, GetCurrentThreadId, GetLastError, InterlockedIncrement, InterlockedDecrement, lstrcmpiW, WaitForSingleObject, RaiseException, SetEvent, RegisterApplicationRestart, HeapSetInformation, LoadLibraryW
msvcrt.dll
DllMain
netapi32.dll
NetApiBufferFree, NetGetJoinInformation
ole32.dll
StringFromIID, CLSIDFromString, CLSIDFromProgID, CoGetClassObject, OleLockRunning, StringFromGUID2, OleUninitialize, OleInitialize, CreateStreamOnHGlobal, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc
secur32.dll
GetUserNameExW
shlwapi.dll
SHCreateStreamOnFileW
user32.dll
DestroyAcceleratorTable, SetFocus, GetFocus, IsWindow, CreatePopupMenu, TrackPopupMenuEx, AppendMenuW, GetMenuItemCount, RemoveMenu, GetMenuItemInfoW, LoadStringA, MessageBeep, PtInRect, CreateAcceleratorTableW, GetSystemMetrics, SetForegroundWindow, GetCursorPos, GetWindowLongW, ShowWindow, SetWindowPos, GetDlgItem, MapWindowPoints, GetClientRect, SystemParametersInfoW, GetWindowRect, GetWindow, GetParent, DispatchMessageW, EndPaint, GetDesktopWindow, PeekMessageW, CharNextW, DestroyWindow, CreateWindowExW, RegisterClassExW, LoadImageW, wsprintfW, LoadCursorW, IsChild, GetClassInfoExW, LoadAcceleratorsW, LoadMenuW, LoadStringW, PostMessageW, SetTimer, KillTimer, RegisterWindowMessageW, EnableMenuItem, SetMenuDefaultItem, DestroyMenu, GetMonitorInfoW, MonitorFromPoint, SendMessageW, TrackPopupMenu, GetSubMenu, DefWindowProcW, SetWindowTextW, GetWindowTextW, CallWindowProcW, FillRect, ReleaseCapture, GetMessageW, BeginPaint, TranslateMessage, GetClassNameW, GetWindowTextLengthW, PostQuitMessage, GetSysColor, MoveWindow, ClientToScreen, ScreenToClient, GetDC, ReleaseDC, InvalidateRect, InvalidateRgn, RedrawWindow, SetCapture, UnregisterClassA, SetWindowLongW

wmpnscfg.exe

Windows Media Player Network Sharing Service Configuration Application by Microsoft

Remove wmpnscfg.exe
Version:   12.0.9431.0 (winmain_bluemp.130615-1214)
MD5:   e1fa3d0028f9e1609148c7a0ab037859
SHA1:   02f85f70ecd8871ee2d371c32958f3e5ca72506c
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is wmpnscfg.exe?

This service allows Media Player to share media with other computers on the network.

About wmpnscfg.exe (from Microsoft)

By sharing your media, you can do all of these things on your private network. (Media sharing does not allow you to share files outside of your network, however. For example, you cannot use media shar

Overview

wmpnscfg.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). .

DetailsDetails

File name:wmpnscfg.exe
Publisher:Microsoft Corporation
Product name:Windows Media Player Network Sharing Service Configuration Application
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows media player\wmpnscfg.exe
Original name:WMPNSCFG.EXE.MUI
File version:12.0.9431.0 (winmain_bluemp.130615-1214)
Product version:12.0.9431.0
Size:67 KB (68,608 bytes)
Build date:6/15/2013 5:11 PM
Digital DNA
PE subsystem:Windows GUI
Entropy:5.841634
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'UpdateLibrary' in the path '\Microsoft\Windows\Windows Media Sharing\UpdateLibrary'
  • Entry path '\Microsoft\Windows\Windows Media Sharing\UpdateLibrary'
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'WMPNSCFG' → C:\Program Files\Windows Media Player\WMPNSCFG.exe

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 29.50%
Windows 8.1 18.50%
Windows 7 Ultimate 15.50%
Windows 8.1 Pro 8.00%
Windows 7 Professional 5.50%
Windows 8 4.50%
Windows 8.1 Single Language 3.50%
Windows 8 Single Language 3.00%
Windows 8 Pro 3.00%
Windows 8.1 Pro with Media Center 2.50%
Windows Vista Home Premium 2.00%
Windows 7 Home Basic 1.50%
Windows Seven Black Edition 0.50%
Windows 8.1 Enterprise Evaluation 0.50%
Windows 8 Enterprise 0.50%
Windows 8 Enterprise N 0.50%
Windows 7 Starter 0.50%
Windows 8.1 Enterprise 0.50%

Distribution by countryDistribution by country

United States installs about 45.23% of Windows Media Player Network Sharing Service Configuration Application.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 19.12%
ASUS 18.33%
Hewlett-Packard 17.53%
Acer 11.95%
Toshiba 11.16%
Lenovo 9.56%
Sony 4.78%
GIGABYTE 1.99%
Samsung 1.59%
Intel 1.59%
Alienware 1.20%
Medion 0.80%
Sahara 0.40%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE