Link-Local Multicast Name Resolution (LLMNR) is a protocol used that allowed name resolution without a Domain Name System (DNS) server. Windows uses LLMNR to identify the server of a file-share. Should it receive a reply, it sends the current users credentials directly to that server. If the attacker receives a response, then the Windows service disclosed the user’s credential hash to an untrusted third party. A smart attacker can relay that hash to the intended file server.”]
Source: https://www.csoonline.com/article/3449156/how-to-disable-llmnr-in-windows-server.html