Should I block it?

No, this file is 100% safe to run.

Additional versions

6.2.9200.16384 (win8_rtm.120725-1247)	3.37%
6.1.7600.16385 (win7_rtm.090713-1255)	49.27%
6.1.7600.16385 (win7_rtm.090713-1255)	35.12%
6.1.7600.16385 (win7_rtm.090713-1255)	0.22%
6.0.6000.16386 (vista_rtm.061101-2205)	1.98%
6.0.6000.16386 (vista_rtm.061101-2205)	10.04%

PE file structure

Show functions

Import table

advapi32.dll

GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, SetServiceStatus, RegisterServiceCtrlHandlerW, TraceMessage

api-ms-win-core-errorhandling-l1-1-0.dll

UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError

api-ms-win-core-errorhandling-l1-1-1.dll

GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter

api-ms-win-core-handle-l1-1-0.dll

CloseHandle

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls

api-ms-win-core-libraryloader-l1-1-1.dll

DisableThreadLibraryCalls

api-ms-win-core-localregistry-l1-1-0.dll

RegQueryValueExW, RegCloseKey, RegOpenKeyExW

api-ms-win-core-misc-l1-1-0.dll

Sleep

api-ms-win-core-processthreads-l1-1-0.dll

ExitThread, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, CreateThread

api-ms-win-core-processthreads-l1-1-1.dll

CreateThread, GetCurrentThreadId, GetCurrentProcessId, ExitThread, TerminateProcess, GetCurrentProcess

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey, RegQueryValueExW, RegOpenKeyExW

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar

api-ms-win-core-synch-l1-1-0.dll

CreateEventW, SetEvent, ResetEvent, WaitForSingleObject

api-ms-win-core-synch-l1-2-0.dll

WaitForSingleObject, ResetEvent, SetEvent, Sleep, CreateEventW

api-ms-win-core-sysinfo-l1-1-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-service-core-l1-1-0.dll

SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

SetServiceStatus

api-ms-win-service-winsvc-l1-1-0.dll

RegisterServiceCtrlHandlerW

api-ms-win-service-winsvc-l1-2-0.dll

RegisterServiceCtrlHandlerW

iphlpapi.dll

IcmpCloseHandle, GetCurrentThreadCompartmentId, IcmpCreateFile, SetCurrentThreadCompartmentId, IcmpSendEcho

kernel32.dll

SetLastError, WaitForMultipleObjects, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, GetLastError, SetEvent, CloseHandle, CreateEventW, DisableThreadLibraryCalls, MultiByteToWideChar, ExitThread, ResetEvent, WaitForSingleObject, CreateThread, InterlockedExchange, Sleep, InterlockedCompareExchange, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess

msvcrt.dll

DllMain

nrpsrv.dll

NrpStopRpcServer, NrpStartRpcServer

ntdll.dll

RtlInitUnicodeString, NtCreateFile, NtDeviceIoControlFile, NtWaitForSingleObject, DbgPrint, NtClose, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, EtwTraceMessage, NtWaitForMultipleObjects, EtwUnregisterTraceGuids, RtlNtStatusToDosError, NtCancelIoFile

ws2_32.dll

GetAddrInfoW, FreeAddrInfoW

lmhsvc.dll

TCPIP NetBios Transport Services DLL by Microsoft

Remove lmhsvc.dll

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	f993a32249b66c9d622ea5592a8b76b8
SHA1:	f1893978dc74d86d7b4b44005d494d9855ea8047
SHA256:	ee64672a990c6145dc5601e2b8cdbe089272a72732f59af9865dcba8b1717e70

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is lmhsvc.dll?

NetBIOS over TCP/IP (NBT, or sometimes NetBT) is a networking protocol that allows legacy computer applications relying on the NetBIOS API to be used on modern TCP/IP networks.

Overview

lmhsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

Details

File name:	lmhsvc.dll
Publisher:	Microsoft Corporation
Product name:	TCPIP NetBios Transport Services DLL
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\lmhsvc.dll
Original name:	lmhsvc.dll.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	23 KB (23,552 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'
Shared name is 'lmhosts'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	50.00%
Windows 7 Ultimate	29.00%
Windows 7 Professional	10.50%
Windows Vista Home Premium	4.00%
Windows 7 Starter	1.50%
Windows 8 Pro	1.50%
Windows 7 Home Basic	1.00%
Windows Seven Black Edition	0.50%
Windows Vista Home Basic	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 7 Enterprise	0.50%
Windows Se7en Titan	0.50%

Distribution by country

United States installs about 44.72% of TCPIP NetBios Transport Services DLL.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	25.37%
ASUS	18.66%
Hewlett-Packard	17.54%
Toshiba	11.94%
Acer	9.33%
GIGABYTE	2.99%
Intel	2.99%
Samsung	2.24%
Lenovo	2.24%
Sony	1.49%
MSI	1.49%
Alienware	1.12%
Medion	0.75%
Gateway	0.75%
NEC	0.75%
Sahara	0.37%

Remove Adware and Spyware Programs, FREE Download!