Should I block it?

No, this file is 100% safe to run.

Additional versions

9.0.2 build-1031769	4.17%
9.0.1 build-894247	37.50%
9.0.0 build-812388	25.00%
8.0.0 build-471780	4.17%
8.0.0 build-471780	4.17%
7.1.4 build-385536	4.17%
7.0.1 build-227600	4.17%
7.0.0 build-203739	12.50%
10.0.0 build-1295980	4.17%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegQueryValueExW, RegEnumKeyExW, RegOpenKeyExW, ReportEventW, DeregisterEventSource, RegisterEventSourceA, SetServiceStatus, RegisterServiceCtrlHandlerA, RegCloseKey, StartServiceCtrlDispatcherA

kernel32.dll

GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, SetEvent, ExitProcess, CloseHandle, GetLastError, CreateEventA, SetConsoleCtrlHandler, WaitForSingleObject, WaitForMultipleObjects, DeviceIoControl, WriteFile, ReadFile, SetLastError, GetProcAddress, GetModuleFileNameW, GetFullPathNameW, CreateFileW, GetTickCount, MoveFileExW, GetFileAttributesW, GetTempPathW, ExpandEnvironmentStringsW, LocalFree, FormatMessageW, OutputDebugStringW, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, GetFileAttributesA, WideCharToMultiByte, GetACP, GetVersionExA, MultiByteToWideChar, VirtualQuery, GetModuleHandleA, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, CreateFileA, QueryPerformanceCounter, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange

msvcr90.dll

DllMain

user32.dll

MessageBoxW

vmnetdhcp.exe

VMware Workstation by VMware (Signed)

Remove vmnetdhcp.exe

Version:	10.0.0 build-1295980
MD5:	5dc2da538ff0806950b73f798a2444ed
SHA1:	8f54a4b8b5ac4bdeb0dbfb4dba7ed722fc58c1ff

What is vmnetdhcp.exe?

VMware VMnet DHCP service for VMware Workstation is a hypervisor that enables users to set up multiple virtual machines (VMs) and use them simultaneously along with the actual machine. Each virtual machine can execute its own operating system, such as Microsoft Windows. VMware Workstation allows one physical machine to run multiple operating systems simultaneously.

About vmnetdhcp.exe (from VMware)

“VMware Workstation provides a seamless way to access all of the virtual machines you need, regardless of where they are running. Remotely connect to virtual machines running on VMware vSphere, ESXi or”

Details

File name:	vmnetdhcp.exe
Publisher:	VMware, Inc.
Product name:	VMware Workstation
Description:	VMware VMnet DHCP service
Typical file path:	C:\windows\syswow64\vmnetdhcp.exe
File version:	10.0.0 build-1295980
Size:	350.08 KB (358,480 bytes)
Build date:	8/27/2013 8:59 PM
Certificate
Issued to:	VMware
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows Console
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

VMnetDHCP
'VMnetDHCP' (VMware DHCP Service)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00003037%	0.028634%
Kernel CPU:	0.00001882%	0.013761%
User CPU:	0.00001155%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
Memory
Private memory:	7.45 MB	21.59 MB
Private (maximum):	10.17 MB
Private (minimum):	10.14 MB
Non-paged memory:	7.45 MB	21.59 MB
Virtual memory:	34.65 MB	140.96 MB
Virtual memory (peak):	35.91 MB	169.69 MB
Working set:	10.14 MB	18.61 MB
Working set (peak):	10.17 MB	37.95 MB
Resource allocations
Threads:	3	12
Handles:	51	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\windows\syswow64\vmnetdhcp.exe
Owner:	SYSTEM
Windows Service
Service name:	VMnetDHCP
Display name:	VMnetDHCP
Description:	“DHCP service for virtual networks.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads