Should I block it?

No, this file is 100% safe to run.

Additional versions

6.2.9200.16384 (win8_rtm.120725-1247)	3.37%
6.1.7600.16385 (win7_rtm.090713-1255)	49.27%
6.1.7600.16385 (win7_rtm.090713-1255)	35.12%
6.1.7600.16385 (win7_rtm.090713-1255)	0.22%
6.0.6000.16386 (vista_rtm.061101-2205)	1.98%
6.0.6000.16386 (vista_rtm.061101-2205)	10.04%

PE file structure

Show functions

Import table

advapi32.dll

GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegisterServiceCtrlHandlerW, TraceMessage

api-ms-win-core-errorhandling-l1-1-0.dll

UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls

api-ms-win-core-libraryloader-l1-1-1.dll

DisableThreadLibraryCalls

api-ms-win-core-localregistry-l1-1-0.dll

RegQueryValueExW, RegCloseKey, RegOpenKeyExW

api-ms-win-core-misc-l1-1-0.dll

Sleep

api-ms-win-core-processthreads-l1-1-0.dll

ExitThread, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, CreateThread

api-ms-win-core-processthreads-l1-1-1.dll

CreateThread, GetCurrentThreadId, GetCurrentProcessId, ExitThread, TerminateProcess, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey, RegQueryValueExW, RegOpenKeyExW

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-1-0.dll

CreateEventW, SetEvent, ResetEvent, WaitForSingleObject

api-ms-win-core-synch-l1-2-0.dll

WaitForSingleObject, ResetEvent, SetEvent, Sleep, CreateEventW

api-ms-win-core-sysinfo-l1-1-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-service-core-l1-1-0.dll

SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

SetServiceStatus

api-ms-win-service-winsvc-l1-1-0.dll

RegisterServiceCtrlHandlerW

api-ms-win-service-winsvc-l1-2-0.dll

RegisterServiceCtrlHandlerW

iphlpapi.dll

IcmpCloseHandle, GetCurrentThreadCompartmentId, IcmpCreateFile, SetCurrentThreadCompartmentId, IcmpSendEcho

kernel32.dll

SetLastError, WaitForMultipleObjects, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, GetLastError, SetEvent, CloseHandle, CreateEventW, DisableThreadLibraryCalls, MultiByteToWideChar, ExitThread, ResetEvent, WaitForSingleObject, CreateThread, InterlockedExchange, Sleep, InterlockedCompareExchange, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess

msvcrt.dll

DllMain

nrpsrv.dll

NrpStopRpcServer, NrpStartRpcServer

ntdll.dll

RtlInitUnicodeString, NtCreateFile, NtDeviceIoControlFile, NtWaitForSingleObject, DbgPrint, NtClose, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, EtwTraceMessage, NtWaitForMultipleObjects, EtwUnregisterTraceGuids, RtlNtStatusToDosError, NtCancelIoFile

ws2_32.dll

GetAddrInfoW, FreeAddrInfoW

lmhsvc.dll

TCPIP NetBios Transport Services DLL by Microsoft

Remove lmhsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	55ca01ba19d0006c8f2639b6c045e08b
SHA1:	b7420b40c5e90a23ae76be517498c5bec3a32d53
SHA256:	4dbbdc820c514db18cc13f8ee178f8c4e39c295c6e3c255416c235553ce7bdc1

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is lmhsvc.dll?

NetBIOS over TCP/IP (NBT, or sometimes NetBT) is a networking protocol that allows legacy computer applications relying on the NetBIOS API to be used on modern TCP/IP networks.

Overview

lmhsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

Details

File name:	lmhsvc.dll
Publisher:	Microsoft Corporation
Product name:	TCPIP NetBios Transport Services DLL
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\lmhsvc.dll
Original name:	lmhsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	18 KB (18,432 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	50.00%
Windows 7 Ultimate	29.00%
Windows 7 Professional	10.50%
Windows Vista Home Premium	4.00%
Windows 7 Starter	1.50%
Windows 8 Pro	1.50%
Windows 7 Home Basic	1.00%
Windows Seven Black Edition	0.50%
Windows Vista Home Basic	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 7 Enterprise	0.50%
Windows Se7en Titan	0.50%

Distribution by country

United States installs about 44.72% of TCPIP NetBios Transport Services DLL.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	25.37%
ASUS	18.66%
Hewlett-Packard	17.54%
Toshiba	11.94%
Acer	9.33%
GIGABYTE	2.99%
Intel	2.99%
Samsung	2.24%
Lenovo	2.24%
Sony	1.49%
MSI	1.49%
Alienware	1.12%
Medion	0.75%
Gateway	0.75%
NEC	0.75%
Sahara	0.37%

Remove Adware and Spyware Programs, FREE Download!