Should I block it?

No, this file is 100% safe to run.

Additional versions

8.1.30.1349	0.97%
8.1.10.1300	0.32%
8.1.0.1281	2.16%
8.1.0.1281	0.54%
8.1.0.1281	0.11%
8.1.0.1281	0.11%
8.1.0.1281	0.54%
8.1.0.1281	0.32%
8.1.0.1281	0.11%
8.1.0.1281	0.11%
8.1.0.1252	10.90%
8.1.0.1252	12.94%
8.1.0.1191	0.11%
8.0.10.1464	0.11%
8.0.10.1464	0.32%
8.0.4.1441	1.83%
8.0.4.1441	0.32%
8.0.3.1427	0.54%
8.0.3.1427	0.32%
8.0.3.1427	1.62%
8.0.2.1410	2.48%
8.0.2.1410	0.76%
8.0.2.1410	0.11%
8.0.1.1399	0.76%
8.0.1.1399	0.65%
View more
8.0.0.1351	3.56%
8.0.0.1351	0.32%
8.0.0.1351	0.22%
7.1.50.1172	0.11%
7.1.30.1154	0.11%
7.1.21.1134	0.11%
7.1.20.1119	1.19%
7.1.13.1088	1.08%
7.1.10.1065	0.32%
7.1.3.1053	2.59%
7.1.2.1043	0.97%
7.1.2.1041	0.11%
7.1.2.1041	0.11%
7.1.1.1039	3.78%
7.0.10.1203	0.11%
7.0.10.1203	0.11%
7.0.4.1197	2.48%
7.0.4.1197	3.56%
7.0.2.1164	7.66%
7.0.2.1164	3.99%
7.0.0.1152	0.11%
7.0.0.1135	2.37%
7.0.0.1135	3.45%
6.2.50.1062	0.11%
6.2.0.1023	0.11%
6.1.0.1061	0.76%
22 other versions

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

uns.exe (Intel Active Management Technology User Notification Service by Intel Corporation)

PE file structure

Show functions

Import table

advapi32.dll

CreateServiceA, RegDeleteKeyA, RegOpenKeyExA, RegQueryValueExA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, SetServiceStatus, RegisterServiceCtrlHandlerExA, StartServiceA, RegDeleteValueA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, RegCreateKeyA, RegSetValueExA, RegCloseKey, OpenSCManagerA, ChangeServiceConfig2A, CloseServiceHandle, StartServiceCtrlDispatcherA, GetUserNameA, LookupAccountNameA, IsValidSid, GetLengthSid, CopySid

crypt32.dll

CryptProtectData, CryptUnprotectData

dnsapi.dll

DnsModifyRecordsInSet_A

iphlpapi.dll

GetExtendedTcpTable, GetAdaptersAddresses, NotifyAddrChange, SetTcpEntry, CancelIPChangeNotify

kernel32.dll

VirtualAlloc, HeapReAlloc, HeapCreate, HeapSize, GetConsoleCP, VirtualFree, GetLastError, WaitForSingleObject, FormatMessageA, GetComputerNameExA, CreateEventA, DuplicateHandle, GetCurrentProcess, CloseHandle, SetEvent, ResetEvent, CreateFileA, GetOverlappedResult, GetConsoleMode, WriteFile, DeviceIoControl, FreeLibrary, GetProcAddress, LoadLibraryA, GetModuleFileNameA, Sleep, GetVersionExA, GetModuleHandleA, SetConsoleCtrlHandler, LocalFree, GlobalFree, GlobalAlloc, GetStdHandle, AllocConsole, GetCurrentProcessId, CreateSemaphoreA, ReleaseSemaphore, GetCurrentThreadId, ResumeThread, GetTickCount, IsValidCodePage, GetOEMCP, GetACP, ExitProcess, GetStartupInfoA, SetHandleCount, FlushFileBuffers, InitializeCriticalSectionAndSpinCount, SetFilePointer, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetProcessHeap, GetSystemTimeAsFileTime, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, GetStringTypeW, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, CompareStringW, SetEnvironmentVariableA, SetEndOfFile, ReadFile, InterlockedIncrement, InterlockedDecrement, WideCharToMultiByte, InterlockedExchange, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, MultiByteToWideChar, RtlUnwind, HeapAlloc, HeapFree, ExitThread, CreateThread, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, SetStdHandle, GetFileType, DeleteFileA, GetCommandLineA, LCMapStringA, LCMapStringW, GetCPInfo, GetModuleHandleW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, HeapDestroy, SetDllDirectoryA, GetStartupInfoW, GetModuleFileNameW, LoadLibraryW, CreateFileW, CancelIo, EncodePointer, DecodePointer, HeapSetInformation, IsProcessorFeaturePresent

setupapi.dll

SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsA, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailA

user32.dll

RegisterDeviceNotificationA, DestroyWindow, CreateWindowExA, RegisterClassA, UnregisterDeviceNotification, DefWindowProcA

ws2_32.dll

WSAAccept, freeaddrinfo, WSACreateEvent, WSACloseEvent, WSAResetEvent, WSAAddressToStringA, WSASetEvent, getaddrinfo

LMS.exe

Intel Active Management Technology Local Manageability Service by Intel Corporation (Signed)

Remove LMS.exe

Version:	6.0.30.1211
MD5:	3d23191672d83e90d1cf63927ee98136
SHA1:	e3cae38890f328126efa4a1fbbae3733a68bd5be
SHA256:	90ec8e0e0fcc838b7d258c76a5c92335a2f2b7ae36bd87b3bb4bcf187770b6de

What is LMS.exe?

The Common User Interface is part of Intels Common User Interface for chipsets with integrated graphics controllers which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon.

Overview

lms.exe runs as a service under the name Intel(R) Management and Security Application Local Management Service (LMS) with extensive SYSTEM privileges (full administrator access). This is typically installed with the program Intel(R) Management Engine Components published by Intel Corporation. The file is digitally signed by Intel Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	lms.exe
Publisher:	Intel Corporation
Product name:	Intel(R) Active Management Technology Local Manageability Service
Description:	Local Manageability Service
Typical file path:	C:\Program Files\intel\intel(r) management engine components\lms\lms.exe
File version:	6.0.30.1211
Size:	262.52 KB (268,824 bytes)
Certificate
Issued to:	Intel Corporation
Authority (CA):	VeriSign
Expiration date:	Saturday, April 23, 2011
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Intel Management Engine Components

Intel Corporation

10% remove

This program provides the Intel Management Engine Components Driver for supported notebooks with supported operating systems. The Intel management Components monitor the installed Intel hardware, such as chip sets, storage, and other components. They will notify you if there are problems, updated drivers, and other information about those components. These components installed by the computer manufacturer automatically during the OS in...

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'LMS' (Intel(R) Management and Security Application Local Management Service)
LMS

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00086086%	0.028634%
Kernel CPU:	0.00034873%	0.013761%
User CPU:	0.00051213%	0.014873%
Kernel CPU time:	7,301 ms/min	100,923,805ms/min
CPU cycles:	1,396,441/sec	17,470,203/sec
Context switches:	4/sec	284/sec
Memory
Private memory:	2.68 MB	21.59 MB
Private (maximum):	4.27 MB
Private (minimum):	3.7 MB
Non-paged memory:	2.68 MB	21.59 MB
Virtual memory:	38.82 MB	140.96 MB
Virtual memory (peak):	40.92 MB	169.69 MB
Working set:	3.93 MB	18.61 MB
Working set (peak):	4.99 MB	37.95 MB
Page faults:	10,218/min	2,039/min
I/O
I/O read transfer:	97 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	18.66 KB/sec	448.09 KB/min
I/O other operations:	532/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	106	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\intel\intel(r) management engine components\lms\lms.exe"
Owner:	SYSTEM
Windows Service
Service name:	LMS
Display name:	Intel(R) Management and Security Application Local Management Service
Description:	“Allows applications to access the local Intel(R) Management and Security Application using its locally-available selected network interfaces.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads