Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 1.70%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.11%
6.3.9600.16384 (winblue_rtm.130821-1623) 1.75%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.16%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.05%
6.2.9200.16384 (win8_rtm.120725-1247) 2.71%
6.2.9200.16384 (win8_rtm.120725-1247) 10.03%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.11%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.11%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.05%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.11%
6.1.7600.16385 (win7_rtm.090713-1255) 27.53%
6.1.7600.16385 (win7_rtm.090713-1255) 2.65%
6.1.7600.16385 (win7_rtm.090713-1255) 3.13%
6.1.7600.16385 (win7_rtm.090713-1255) 20.00%
6.1.7600.16385 (win7_rtm.090713-1255) 2.02%
6.1.7600.16385 (win7_rtm.090713-1255) 0.69%
6.1.7600.16385 (win7_rtm.090713-1255) 0.16%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16385 (win7_rtm.090713-1255) 0.05%
6.1.7600.16385 (win7_rtm.090713-1255) 0.16%
6.0.6000.16386 (vista_rtm.061101-2205) 0.90%
6.0.6000.16386 (vista_rtm.061101-2205) 0.42%
6.0.6000.16386 (vista_rtm.061101-2205) 6.10%
6.0.6000.16386 (vista_rtm.061101-2205) 0.48%
View more

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetFileSecurityW, GetFileSecurityW, IsValidSecurityDescriptor, LsaOpenPolicy, LsaFreeMemory, LsaClose, LsaQueryInformationPolicy, OpenServiceW, QueryServiceStatus, StartServiceW, RegisterServiceCtrlHandlerExW, ConvertStringSecurityDescriptorToSecurityDescriptorW, I_ScSetServiceBitsW, SetServiceStatus, QueryServiceConfigW, CreateWellKnownSid, GetSecurityDescriptorDacl, GetLengthSid, AddAccessAllowedAceEx, GetAclInformation, EqualSid, GetAce, CloseServiceHandle, RegDeleteValueW, RegSetValueExW, RegEnumValueW, RegOpenKeyExW, RegQueryInfoKeyW, RegQueryValueExW, RegCloseKey, GetSecurityDescriptorLength, ImpersonateSelf, RevertToSelf, RegNotifyChangeKeyValue, OpenSCManagerW
api-ms-win-core-console-l1-1-0.dll
SetConsoleCtrlHandler
api-ms-win-core-debug-l1-1-0.dll
IsDebuggerPresent, DebugBreak
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
GetLastError, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, GetLastError, RaiseException, UnhandledExceptionFilter, SetLastError
api-ms-win-core-file-l1-1-0.dll
CreateFileW, GetVolumePathNameW, GetDriveTypeW
api-ms-win-core-file-l1-2-0.dll
FindNextVolumeW, GetVolumePathNamesForVolumeNameW, FindVolumeClose, CreateFileW, GetDriveTypeW, FindFirstVolumeW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-2-0.dll
HeapFree, GetProcessHeap, HeapAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree, LocalAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedIncrement, InterlockedCompareExchange, InterlockedDecrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedExchange, InterlockedCompareExchange, InterlockedIncrement
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
FreeLibrary, GetProcAddress, LoadLibraryExA
api-ms-win-core-libraryloader-l1-1-1.dll
LoadStringW, LoadLibraryExW, GetModuleHandleW, GetModuleHandleExW, GetProcAddress, FreeLibrary
api-ms-win-core-localization-l1-2-0.dll
FormatMessageW
api-ms-win-core-localregistry-l1-1-0.dll
RegEnumValueW, RegOpenKeyExW, RegSetValueExW, RegDeleteValueW, RegNotifyChangeKeyValue, RegCloseKey
api-ms-win-core-misc-l1-1-0.dll
LocalFree, Sleep, lstrcmpW, LocalAlloc, FormatMessageW
api-ms-win-core-processthreads-l1-1-0.dll
CreateThread, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, TerminateProcess, GetCurrentThreadId, OpenThreadToken
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentThread, OpenThreadToken, GetCurrentProcess, GetCurrentProcessId, CreateThread, GetCurrentThreadId, TerminateProcess, CreateProcessW
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegCloseKey, RegNotifyChangeKeyValue, RegOpenKeyExW, RegEnumValueW, RegDeleteValueW, RegSetValueExW
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar, CompareStringW, CompareStringOrdinal
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrcmpW
api-ms-win-core-synch-l1-1-0.dll
SetEvent, CreateEventW, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, WaitForSingleObject, DeleteCriticalSection
api-ms-win-core-synch-l1-2-0.dll
WaitForMultipleObjectsEx, Sleep, CreateEventW, SetEvent, DeleteCriticalSection, EnterCriticalSection, WaitForSingleObject, LeaveCriticalSection, InitializeCriticalSection
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemTime, GetSystemInfo, GetComputerNameExW, GetSystemTimeAsFileTime, GetVersionExW, GetTickCount
api-ms-win-core-sysinfo-l1-2-0.dll
GetTickCount, GetSystemTime, GetSystemWindowsDirectoryW, GetVersionExW, GetSystemTimeAsFileTime, GetSystemInfo, GetComputerNameExW
api-ms-win-core-threadpool-l1-2-0.dll
TrySubmitThreadpoolCallback
api-ms-win-core-timezone-l1-1-0.dll
GetTimeZoneInformation
api-ms-win-devices-config-l1-1-0.dll
CM_Get_Device_Interface_ListW, CM_Unregister_Notification, CM_Get_Device_Interface_List_SizeW
api-ms-win-eventing-provider-l1-1-0.dll
EventRegister, EventWrite, EventUnregister
api-ms-win-security-base-l1-1-0.dll
GetFileSecurityW, IsValidSecurityDescriptor, RevertToSelf, ImpersonateSelf, GetSecurityDescriptorLength, GetAce, EqualSid, GetAclInformation, AddAccessAllowedAceEx, GetLengthSid, GetSecurityDescriptorDacl, CreateWellKnownSid, CheckTokenMembership, SetFileSecurityW
api-ms-win-security-base-l1-2-0.dll
AccessCheck, CheckTokenMembership, ImpersonateSelf, RevertToSelf, GetFileSecurityW, SetFileSecurityW, CreateWellKnownSid, GetSecurityDescriptorDacl, IsValidSecurityDescriptor, GetLengthSid, GetAce, EqualSid, GetAclInformation, AddAccessAllowedAceEx
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-management-l1-1-0.dll
OpenServiceW, OpenSCManagerW, CloseServiceHandle
api-ms-win-service-management-l2-1-0.dll
QueryServiceStatusEx, QueryServiceConfigW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus
browser.dll
I_BrowserServerEnumForXactsrv
cfgmgr32.dll
CMP_RegisterNotification, CMP_UnregisterNotification, CM_MapCrToWin32Err, CMP_Register_Notification
dsrole.dll
DsRoleFreeMemory, DsRoleGetPrimaryDomainInformation
iphlpapi.dll
GetAdaptersAddresses, CancelMibChangeNotify2, NotifyUnicastIpAddressChange, GetUnicastIpAddressEntry, ConvertInterfaceLuidToGuid, ConvertInterfaceIndexToLuid, GetIfEntry2
kernel32.dll
LoadLibraryW, WaitForMultipleObjects, DnsHostnameToComputerNameW, GetTimeZoneInformation, SetConsoleCtrlHandler, DelayLoadFailureHook, VerifyVersionInfoW, GetVolumeNameForVolumeMountPointW, VerSetConditionMask, WaitForSingleObject, SetEvent, CreateThread, CreateEventW, GetComputerNameExW, RaiseException, InterlockedIncrement, LeaveCriticalSection, EnterCriticalSection, InterlockedDecrement, lstrcmpW, FormatMessageW, GetVersionExW, GetSystemInfo, DeleteCriticalSection, InitializeCriticalSection, GetProcAddress, GetSystemTime, MultiByteToWideChar, ExitThread, SetThreadPriority, GetCurrentThread, InterlockedExchange, InterlockedCompareExchange, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, FreeLibrary, CreateFileW, DeviceIoControl, CloseHandle, Sleep, LocalAlloc, LocalFree, SetLastError, GetLastError, GetTickCount, GetDriveTypeW
msvcrt.dll
DllMain
netapi32.dll
NetpAccessCheckAndAuditEx, NetpDeleteSecurityObject, NetpCreateSecurityObject, I_NetPathType, NetpGetComputerName, NetpwNameCompare, NetpGetPrivilege, NetUnregisterDomainNameChangeNotification, NetRegisterDomainNameChangeNotification, NetpLocalTimeZoneOffset, NetMessageBufferSend, NetApiBufferAllocate, NetApiBufferFree, DsGetSiteNameW, NetpReleasePrivilege, NetpwPathType, NetpwPathCanonicalize, NetpwPathCompare, NetpwNameValidate, NetpwNameCanonicalize, NetpNtStatusToApiStatus
nsi.dll
NsiFreeTable, NsiAllocateAndGetTable
ntdll.dll
RtlFreeHeap, RtlInitAnsiString, RtlAnsiStringToUnicodeString, RtlAdjustPrivilege, RtlInitString, NtQuerySystemTime, RtlTimeToSecondsSince1970, WinSqmSetDWORD, NtWaitForSingleObject, NtLoadDriver, NtUnloadDriver, RtlUpcaseUnicodeString, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, EtwUnregisterTraceGuids, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, RtlUpcaseUnicodeChar, RtlDosPathNameToNtPathName_U, NtQueryVolumeInformationFile, NtQueryInformationFile, RtlNewSecurityObjectEx, NtOpenSymbolicLinkObject, NtQuerySymbolicLinkObject, RtlSetDaclSecurityDescriptor, RtlMakeSelfRelativeSD, NtOpenKey, NtQueryValueKey, NtCreateEvent, NlsMbOemCodePageTag, RtlDeleteSecurityObject, NtClose, RtlxUnicodeStringToOemSize, RtlUnicodeStringToOemString, RtlCopyUnicodeString, NtOpenFile, RtlUpcaseUnicodeStringToOemString, RtlGetNtProductType, RtlDeleteRegistryValue, RtlCreateEnvironment, RtlSetEnvironmentVariable, RtlIntegerToUnicodeString, RtlDestroyEnvironment, NtQuerySystemInformation, RtlLengthSecurityDescriptor, RtlQueryEnvironmentVariable_U, RtlFreeUnicodeString, RtlValidSecurityDescriptor, RtlQueryRegistryValues, RtlCheckRegistryKey, RtlCreateRegistryKey, RtlWriteRegistryValue, VerSetConditionMask, RtlInitializeResource, RtlNtStatusToDosError, RtlAcquireResourceShared, RtlDeleteResource, RtlAcquireResourceExclusive, RtlReleaseResource, NtCreateFile, NtFsControlFile, NtAccessCheckAndAuditAlarm, RtlCopySid, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlNewSecurityObject, NtOpenProcessToken, RtlCompareMemoryUlong, NtSetInformationThread, NtAdjustPrivilegesToken, NtDuplicateToken, RtlUnicodeStringToInteger, RtlInitUnicodeString, EtwTraceMessage, RtlValidRelativeSecurityDescriptor, RtlCopySecurityDescriptor, RtlCreateSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlSetGroupSecurityDescriptor, NtOpenThreadToken, RtlOemStringToUnicodeString, RtlUnicodeToOemN, RtlSetSecurityObject, RtlNtStatusToDosErrorNoTeb, NtCompleteConnectPort, NtAcceptConnectPort, NtListenPort, NtCreatePort, NtRequestPort, NtReplyPort, NtImpersonateClientOfPort, NtReplyWaitReceivePortEx, WinSqmSetDWORD64, WinSqmIncrementDWORD, RtlVerifyVersionInfo, NtQueryInformationToken, RtlStringFromGUID, RtlAppendUnicodeStringToString, RtlFreeOemString, RtlQueryRegistryValuesEx
ole32.dll
CoInitialize, CoCreateInstance, CoUninitialize
rpcrt4.dll
RpcServerInqCallAttributesW, RpcEpUnregister, RpcBindingVectorFree, RpcEpRegisterW, RpcServerInqBindings, RpcAsyncCompleteCall, RpcRevertToSelfEx, RpcAsyncAbortCall, RpcServerTestCancel, NdrServerCall2, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIf, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingFree, NdrAsyncServerCall, RpcRevertToSelf, RpcImpersonateClient, UuidCreate, RpcStringFreeW
secur32.dll
LsaCallAuthenticationPackage, LsaDeregisterLogonProcess, LsaFreeReturnBuffer, LsaRegisterLogonProcess, LsaConnectUntrusted, LsaLookupAuthenticationPackage
slc.dll
SLGetWindowsInformationDWORD
userenv.dll
RegisterGPNotification, UnregisterGPNotification
winnsi.dll
NsiRpcRegisterChangeNotification, NsiRpcDeregisterChangeNotification, NsiConnectToServer, NsiDisconnectFromServer
wmiclnt.dll
WmiOpenBlock, WmiNotificationRegistrationW, WmiCloseBlock, WmiQuerySingleInstanceW
ws2_32.dll
GetAddrInfoW, FreeAddrInfoW
Export table
ServiceMain
SvchostPushServiceGlobals

srvsvc.dll

Server Service DLL by Microsoft

Remove srvsvc.dll
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   8f6bf790d3168224c16f2af68a84438c
SHA1:   2af684d21504f2337e036d94244f9e94b2789562
SHA256:   ceea0e38b746163a4110e157dab50cc35a689a5bbc9b3691f2b9d3ae49b0d95e
This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

srvsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). This version is designed to run on Windows 7.

DetailsDetails

File name:srvsvc.dll
Publisher:Microsoft Corporation
Product name:Server Service DLL
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\srvsvc.dll
Original name:SRVSVC.DLL.MUI
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:164.5 KB (168,448 bytes)
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'
  • Shared name is 'LanmanServer'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 51.50%
Windows 7 Ultimate 28.00%
Windows 7 Professional 10.50%
Windows 7 Home Basic 2.50%
Windows 8 Pro 2.00%
Windows 7 Starter 1.50%
Windows 7 Enterprise 1.00%
Windows Vista Home Premium 0.50%
Windows 8 Enterprise Evaluation 0.50%
Windows Se7en Titan 0.50%
Windows 8 Pro with Media Center 0.50%
Windows 8 0.50%
Windows Vista Business 0.50%

Distribution by countryDistribution by country

United States installs about 39.80% of Server Service DLL.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 23.08%
Hewlett-Packard 16.54%
ASUS 16.15%
Acer 12.69%
Toshiba 6.92%
Sony 5.38%
Lenovo 3.85%
Intel 3.08%
GIGABYTE 2.69%
Samsung 2.31%
Medion 1.54%
MSI 1.54%
Alienware 0.77%
Gateway 0.77%
NEC 0.77%
Compaq 0.77%
American Megatrends 0.77%
Sahara 0.38%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE