Should I block it?

No, this file is 100% safe to run.

Additional versions

14.0.1.27	25.00%
14.0.0.18	50.00%
12.0.0.17	25.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegisterServiceCtrlHandlerW, SetServiceStatus, QueryServiceStatus, ChangeServiceConfig2W, OpenServiceW, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, CloseServiceHandle, CreateServiceW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, ControlService

kernel32.dll

CreateEventW, FindNextFileW, GetQueuedCompletionStatus, GetCurrentProcess, ReadDirectoryChangesW, CreateFileW, PostQueuedCompletionStatus, FindClose, GetCommandLineW, GetModuleHandleW, GetModuleFileNameW, GlobalFree, CompareStringA, SetThreadPriority, Sleep, GetCurrentThread, SetEvent, FindFirstFileW, CreateThread, CloseHandle, ReleaseMutex, GetLastError, FlushFileBuffers, DisconnectNamedPipe, GetFileAttributesW, TerminateThread, WriteFile, CreateNamedPipeW, ConnectNamedPipe, GetLogicalDrives, WaitForSingleObject, CreateDirectoryW, GetDriveTypeW, CreateMutexW, CompareStringW, CreateIoCompletionPort, SetUnhandledExceptionFilter, CreateFileA, ReadFile, GetProcessHeap, SetEndOfFile, LoadLibraryA, TerminateProcess, UnhandledExceptionFilter, SetEnvironmentVariableA, IsDebuggerPresent, GetSystemTimeAsFileTime, HeapFree, RaiseException, RtlUnwind, HeapAlloc, EnterCriticalSection, LeaveCriticalSection, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, GetProcAddress, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, LCMapStringW, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, DeleteCriticalSection, HeapSize, ExitProcess, GetTimeZoneInformation, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, GetStdHandle, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, MultiByteToWideChar, SetFilePointer, LCMapStringA, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, InitializeCriticalSectionAndSpinCount, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW

shell32.dll

SHGetFolderPathW, CommandLineToArgvW

user32.dll

LoadStringW

ArcNameService.exe

ArcNameS Application by Smith Micro Software (Signed)

Remove ArcNameService.exe

Version:	14.0.1.27
MD5:	8ccbe4de7fc348c8374cfcb81a8720a4
SHA1:	6ac704f271e5a5124ba73f4976cbc63bb24e3e2c
SHA256:	2b2f594371d0627277ae8dbdbaecab1a7b80b9dfdc5deab8bd875e68c7a8e7af

Overview

arcnameservice.exe runs as a service under the name Stuffit Archive Name Service with extensive SYSTEM privileges (full administrator access). This is typically installed with the program StuffIt 2010 published by Smith Micro Software Inc.. The file is digitally signed by Smith Micro Software which was issued by the VeriSign certificate authority (CA).

Details

File name:	arcnameservice.exe
Publisher:	Smith Micro Software, Inc.
Product name:	ArcNameS Application
Description:	ArcNameService Application
Typical file path:	C:\Program Files\smith micro\stuffit 2010\arcnameservice.exe
File version:	14.0.1.27
Size:	1.83 MB (1,916,248 bytes)
Build date:	2/7/2010 6:41 PM
Certificate
Issued to:	Smith Micro Software
Authority (CA):	VeriSign
Effective date:	Wednesday, December 3, 2008
Expiration date:	Sunday, January 16, 2011
Digital DNA
PE subsystem:	Windows Console
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

StuffIt 2010

Smith Micro Software Inc.

1% remove

“StuffIt incorporates the functionality of StuffIt Expander, DropStuff, DropZip, and DropTar into one convenient program. Create and access email attachments and downloads, protect data, transfer files. StuffIt’s advanced technology specializes in the compression of MP3, PDF and graphics files with no quality loss. Shrink documents up to 98% of their original size. Use StuffIt to free-up space on your computer and to fit more compressed...”

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'Stuffit Archive Name Service'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00010825%	0.028634%
Kernel CPU:	0.00000815%	0.013761%
User CPU:	0.00010010%	0.014873%
Kernel CPU time:	14,071 ms/min	100,923,805ms/min
CPU cycles:	244,582/sec	17,470,203/sec
Memory
Private memory:	1.88 MB	21.59 MB
Private (maximum):	4.43 MB
Private (minimum):	4.42 MB
Non-paged memory:	1.88 MB	21.59 MB
Virtual memory:	50.97 MB	140.96 MB
Virtual memory (peak):	54.72 MB	169.69 MB
Working set:	4.43 MB	18.61 MB
Working set (peak):	4.48 MB	37.95 MB
Page faults:	1,207/min	2,039/min
I/O
I/O read transfer:	2.38 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	58 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	10.92 KB/sec	448.09 KB/min
I/O other operations:	434/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	80	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\smith micro\stuffit 2010\arcnameservice.exe"
Owner:	SYSTEM
Windows Service
Service name:	Stuffit Archive Name Service
Description:	“StuffIt monitor for archive files”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads