Should I block it?

No, this file is 100% safe to run.

Additional versions

8.1.30.1349	0.97%
8.1.10.1300	0.32%
8.1.0.1281	2.16%
8.1.0.1281	0.54%
8.1.0.1281	0.11%
8.1.0.1281	0.11%
8.1.0.1281	0.54%
8.1.0.1281	0.32%
8.1.0.1281	0.11%
8.1.0.1281	0.11%
8.1.0.1252	10.90%
8.1.0.1252	12.94%
8.1.0.1191	0.11%
8.0.10.1464	0.11%
8.0.10.1464	0.32%
8.0.4.1441	1.83%
8.0.4.1441	0.32%
8.0.3.1427	0.54%
8.0.3.1427	0.32%
8.0.3.1427	1.62%
8.0.2.1410	2.48%
8.0.2.1410	0.76%
8.0.2.1410	0.11%
8.0.1.1399	0.76%
8.0.1.1399	0.65%
View more
8.0.0.1351	3.56%
8.0.0.1351	0.32%
8.0.0.1351	0.22%
7.1.50.1172	0.11%
7.1.30.1154	0.11%
7.1.21.1134	0.11%
7.1.20.1119	1.19%
7.1.13.1088	1.08%
7.1.10.1065	0.32%
7.1.3.1053	2.59%
7.1.2.1043	0.97%
7.1.2.1041	0.11%
7.1.2.1041	0.11%
7.1.1.1039	3.78%
7.0.10.1203	0.11%
7.0.10.1203	0.11%
7.0.4.1197	2.48%
7.0.4.1197	3.56%
7.0.2.1164	7.66%
7.0.2.1164	3.99%
7.0.0.1152	0.11%
7.0.0.1135	2.37%
7.0.0.1135	3.45%
6.2.50.1062	0.11%
6.2.0.1023	0.11%
6.1.0.1061	0.76%
22 other versions

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

uns.exe (Intel Active Management Technology User Notification Service by Intel Corporation)

PE file structure

Show functions

Import table

advapi32.dll

CreateServiceA, RegDeleteKeyA, RegOpenKeyExA, RegQueryValueExA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, SetServiceStatus, RegisterServiceCtrlHandlerExA, StartServiceA, RegDeleteValueA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, RegCreateKeyA, RegSetValueExA, RegCloseKey, OpenSCManagerA, ChangeServiceConfig2A, CloseServiceHandle, StartServiceCtrlDispatcherA, GetUserNameA, LookupAccountNameA, IsValidSid, GetLengthSid, CopySid

crypt32.dll

CryptProtectData, CryptUnprotectData

dnsapi.dll

DnsModifyRecordsInSet_A

iphlpapi.dll

GetExtendedTcpTable, GetAdaptersAddresses, NotifyAddrChange, SetTcpEntry, CancelIPChangeNotify

kernel32.dll

VirtualAlloc, HeapReAlloc, HeapCreate, HeapSize, GetConsoleCP, VirtualFree, GetLastError, WaitForSingleObject, FormatMessageA, GetComputerNameExA, CreateEventA, DuplicateHandle, GetCurrentProcess, CloseHandle, SetEvent, ResetEvent, CreateFileA, GetOverlappedResult, GetConsoleMode, WriteFile, DeviceIoControl, FreeLibrary, GetProcAddress, LoadLibraryA, GetModuleFileNameA, Sleep, GetVersionExA, GetModuleHandleA, SetConsoleCtrlHandler, LocalFree, GlobalFree, GlobalAlloc, GetStdHandle, AllocConsole, GetCurrentProcessId, CreateSemaphoreA, ReleaseSemaphore, GetCurrentThreadId, ResumeThread, GetTickCount, IsValidCodePage, GetOEMCP, GetACP, ExitProcess, GetStartupInfoA, SetHandleCount, FlushFileBuffers, InitializeCriticalSectionAndSpinCount, SetFilePointer, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetProcessHeap, GetSystemTimeAsFileTime, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, GetStringTypeW, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, CompareStringW, SetEnvironmentVariableA, SetEndOfFile, ReadFile, InterlockedIncrement, InterlockedDecrement, WideCharToMultiByte, InterlockedExchange, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, MultiByteToWideChar, RtlUnwind, HeapAlloc, HeapFree, ExitThread, CreateThread, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, SetStdHandle, GetFileType, DeleteFileA, GetCommandLineA, LCMapStringA, LCMapStringW, GetCPInfo, GetModuleHandleW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, HeapDestroy, SetDllDirectoryA, GetStartupInfoW, GetModuleFileNameW, LoadLibraryW, CreateFileW, CancelIo, EncodePointer, DecodePointer, HeapSetInformation, IsProcessorFeaturePresent

setupapi.dll

SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsA, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailA

user32.dll

RegisterDeviceNotificationA, DestroyWindow, CreateWindowExA, RegisterClassA, UnregisterDeviceNotification, DefWindowProcA

ws2_32.dll

WSAAccept, freeaddrinfo, WSACreateEvent, WSACloseEvent, WSAResetEvent, WSAAddressToStringA, WSASetEvent, getaddrinfo

LMS.exe

Intel Active Management Technology Local Manageability Service by Intel Corporation (Signed)

Remove LMS.exe

Version:	6.1.0.1046
MD5:	23d990150d56b670a62b21b9abdd45ee
SHA1:	db4e5a773ec3a8aa3880b38c30e1454c47cfff56
SHA256:	bb9dbc0d02474976420321162c3ab1fdf975fa0494b1030488b03bc98a65f888

What is LMS.exe?

The Common User Interface is part of Intels Common User Interface for chipsets with integrated graphics controllers which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon.

Overview

lms.exe runs as a service under the name Intel(R) Management and Security Application Local Management Service (LMS) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Intel(R) Management Engine Components published by Intel Corporation, Intel(R) PROSet/Wireless WiFi Software from Intel Corporation and Intel(R) PROSet/Wireless WiFi Software by Intel Corporation. The file is digitally signed by Intel Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	lms.exe
Publisher:	Intel Corporation
Product name:	Intel(R) Active Management Technology Local Manageability Service
Description:	Local Manageability Service
Typical file path:	C:\Program Files\intel\intel(r) management engine components\lms\lms.exe
File version:	6.1.0.1046
Size:	318.02 KB (325,656 bytes)
Certificate
Issued to:	Intel Corporation
Authority (CA):	VeriSign
Expiration date:	Saturday, April 23, 2011
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Intel Management Engine Components

Intel Corporation

10% remove

This program provides the Intel Management Engine Components Driver for supported notebooks with supported operating systems. The Intel management Components monitor the installed Intel hardware, such as chip sets, storage, and other components. They will notify you if there are problems, updated drivers, and other information about those components. These components installed by the computer manufacturer automatically during the OS in...

Intel PROSet/Wireless WiFi Software

Intel Corporation

12% remove

“The Intel PROSet/Wireless software includes a suite of features which IT managers find highly desirable. These features include automatic detection of and connection to wireless access points based on adapter preferences, detection of access point security levels, an enhanced single sign-on system that lets users enter their credentials only once for easy connection to the enterprise network, easy and secure switching between networks, ...”

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'LMS' (Intel(R) Management and Security Application Local Management Service)
LMS

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00633464%	0.028634%
Kernel CPU:	0.00345417%	0.013761%
User CPU:	0.00288047%	0.014873%
Kernel CPU time:	24,685 ms/min	100,923,805ms/min
CPU cycles:	3,064,086/sec	17,470,203/sec
Context switches:	6/sec	284/sec
Memory
Private memory:	2.19 MB	21.59 MB
Private (maximum):	4.7 MB
Private (minimum):	3.9 MB
Non-paged memory:	2.19 MB	21.59 MB
Virtual memory:	35.76 MB	140.96 MB
Virtual memory (peak):	37.8 MB	169.69 MB
Working set:	4.12 MB	18.61 MB
Working set (peak):	4.74 MB	37.95 MB
Page faults:	90,813/min	2,039/min
I/O
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	29.67 KB/sec	448.09 KB/min
I/O other operations:	542/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	102	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\intel\intel(r) management engine components\lms\lms.exe"
Owner:	SYSTEM
Windows Service
Service name:	LMS
Display name:	Intel(R) Management and Security Application Local Management Service
Description:	“Allows applications to access the local Intel(R) Management and Security Application using its locally-available selected network interfaces.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads