Smc.exe
Symantec Client Management Component by Symantec Corporation (Signed)
| Version: | 11.0.6005.440 |
| MD5: | 0dc94380be7d36ae241029c72807692e |
| SHA1: | 3e9005dad9f19520dfad3442f161af3cc2755f0b |
| SHA256: | 93a8281660d274ad4455714dbaa87b2528a8e4b54f5c9f24fdfca53ee82f0202 |
Overview
smc.exe runs as a service under the name SmcService (SmcService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).
Details
| File name: | smc.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec Client Management Component |
| Description: | Symantec CMC Smc |
| Typical file path: | C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\smc.exe |
| File version: | 11.0.6005.440 |
| Size: | 1.79 MB (1,881,368 bytes) |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, September 8, 2010 |
| Expiration date: | Sunday, November 24, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 9.0 |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- SmcService
- 'SmcService' (Symantec Management Client)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe'
- Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe'
Network connections
Access through an approved Windows firewall exception
[UDP] listens on port 52835
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00043222% | |
| Kernel CPU: | 0.00033781% | |
| User CPU: | 0.00009441% | |
| Kernel CPU time: | 1,224,311 ms/min | |
| CPU cycles: | 30,190,967/sec | |
| Memory |
| Private memory: | 12.2 MB | |
| Private (maximum): | 20.46 MB | |
| Private (minimum): | 1.08 MB | |
| Non-paged memory: | 12.2 MB | |
| Virtual memory: | 139.23 MB | |
| Virtual memory (peak): | 140.66 MB | |
| Working set: | 9.05 MB | |
| Working set (peak): | 20.49 MB | |
| Page faults: | 8,145,392/min | |
| I/O |
| I/O read transfer: | 42.53 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 4.77 KB/sec | |
| I/O write operations: | 127/sec | |
| I/O other transfer: | 223.24 KB/sec | |
| I/O other operations: | 11,718/sec | |
| Resource allocations |
| Threads: | 35 | |
| Handles: | 677 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\symantec\symantec endpoint protection\smc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SmcService |
| Display name: | SmcService |
| Description: | “Provides communication with the Symantec Endpoint Protection Manager. It also provides network threat protection and application and device control for the client.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| MSVCR80.dll |
| Total CPU: | 0.11465479% | |
| Kernel CPU: | 0.08786542% | |
| User CPU: | 0.02678936% | |
| CPU cycles: | 2,795,454/sec | |
| Context switches: | 53/sec | |
| Memory: | 620 KB | |
| Smc.exe (main module) |
| Total CPU: | 0.08616998% | |
| Kernel CPU: | 0.07471985% | |
| User CPU: | 0.01145013% | |
| CPU cycles: | 1,955,181/sec | |
| Context switches: | 2/sec | |
| Memory: | 1.8 MB | |
| ntdll.dll |
| Total CPU: | 0.01737093% | |
| Kernel CPU: | 0.00869313% | |
| User CPU: | 0.00867780% | |
| CPU cycles: | 141,570/sec | |
| Memory: | 1.23 MB | |
| sechost.dll |
| Total CPU: | 0.00171730% | |
| Kernel CPU: | 0.00134931% | |
| User CPU: | 0.00036799% | |
| CPU cycles: | 223,864/sec | |
| Context switches: | 2/sec | |
| Memory: | 100 KB | |
| WININET.dll |
| Total CPU: | 0.00015339% | |
| Kernel CPU: | 0.00012272% | |
| User CPU: | 0.00003068% | |
| CPU cycles: | 11,785/sec | |
| Memory: | 1.11 MB | |
| avpluginimpl.dll (Symantec AntiVirus by Symantec) |
| Total CPU: | 0.00004600% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00004600% | |
| CPU cycles: | 10,374/sec | |
| Memory: | 416 KB | |
| LuMan.plg |
| Total CPU: | 0.00001533% | |
| Kernel CPU: | 0.00001533% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 5,126/sec | |
| Memory: | 388 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
50.00% |
|
| Windows 7 Home Premium |
20.00% |
|
| Windows 7 Home Basic |
6.67% |
|
| Windows 7 Enterprise |
6.67% |
|
| Windows 7 Starter |
6.67% |
|
| Windows 7 Ultimate |
3.33% |
|
| Windows Vista Ultimate |
3.33% |
|
| Windows 7 Professional |
3.33% |
|
Distribution by country
United States installs about 51.72% of Symantec Client Management Component.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
42.86% |
|
| Hewlett-Packard |
17.86% |
|
| ASUS |
14.29% |
|
| Lenovo |
7.14% |
|
| Toshiba |
7.14% |
|
| Intel |
7.14% |
|
| Acer |
3.57% |
|
