Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.1.2015.2015 9.68%
12.1.2015.2015 3.23%
12.1.1000.157 29.03%
12.1.1000.157 3.23%
12.1.1000.157 3.23%
12.1.671.4971 3.23%
12.0.122.161 3.23%
11.0.6300.552 3.23%
11.0.6200.530 3.23%
11.0.6200.530 3.23%
11.0.6100.480 3.23%
11.0.6005.440 3.23%
11.0.6005.440 9.68%
11.0.6000.436 3.23%
11.0.5002.301 3.23%
11.0.4014.23 3.23%
11.0.4000.2261 3.23%
11.0.3001.2189 3.23%
11.0.780.980 3.23%

Relationships

Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, IsValidSid, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetSidSubAuthority, LookupPrivilegeValueA, AdjustTokenPrivileges, GetTokenInformation, RegOpenKeyA, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegSetValueExA, RegDeleteValueA, RegEnumKeyExA, RegFlushKey, RevertToSelf, ImpersonateLoggedOnUser, RegDeleteKeyA, RegEnumKeyA, RegEnumValueA, RegQueryInfoKeyA, RegCreateKeyExA, RegisterServiceCtrlHandlerA, OpenSCManagerA, OpenServiceA, ControlService, CloseServiceHandle, SetServiceStatus, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, QueryServiceStatus, ChangeServiceConfigA, StartServiceA, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsA, UnregisterTraceGuids, LookupAccountSidW, QueryServiceConfigA, RegOpenKeyExW, RegNotifyChangeKeyValue, RegQueryValueExW, QueryServiceStatusEx, RegCreateKeyExW, RegSetValueExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, FreeSid, AllocateAndInitializeSid, GetLengthSid, AddAccessAllowedAce, GetAclInformation, DeleteAce, CheckTokenMembership, EqualSid, GetUserNameA, CryptAcquireContextA, CryptReleaseContext, CryptGetProvParam, CryptGetUserKey, CryptCreateHash, CryptHashData, CryptDestroyHash, CryptDeriveKey, CryptGenKey, CryptDestroyKey, SetSecurityInfo, AddAce, GetAce, AddAccessDeniedAce, InitializeAcl, GetSecurityInfo, CreateWellKnownSid, TraceMessage, DuplicateToken, CreateProcessAsUserA, RegDeleteKeyW, LookupAccountNameW, GetUserNameW, ChangeServiceConfig2A, GetFileSecurityA, CreateProcessAsUserW, CreateServiceA, DeleteService
crypt32.dll
CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertFreeCertificateContext, CryptMsgClose, CertCloseStore, CertFindCertificateInStore
gdi32.dll
CreateCompatibleBitmap, CreateCompatibleDC, CreateSolidBrush
kernel32.dll
GetCurrentProcess, CloseHandle, OpenProcess, GetLastError, LocalAlloc, LocalFree, SetWaitableTimer, AttachConsole, FreeConsole, WTSGetActiveConsoleSessionId, GetSystemDirectoryW, GetComputerNameW, FindCloseChangeNotification, GetPrivateProfileSectionA, GetPrivateProfileSectionNamesA, GetPrivateProfileIntA, GetTempPathA, GetTempFileNameA, GetSystemWindowsDirectoryA, GetFileAttributesExA, ExpandEnvironmentStringsW, SetEnvironmentVariableW, GetEnvironmentVariableW, FindFirstChangeNotificationA, FindNextChangeNotification, CreateNamedPipeW, ConnectNamedPipe, lstrlenW, InterlockedIncrement, CreateFileW, SetFileAttributesA, CompareFileTime, GetSystemTime, SystemTimeToFileTime, GetProcessTimes, MultiByteToWideChar, GetSystemInfo, GetDateFormatA, GetModuleFileNameW, GetTimeFormatA, CreateWaitableTimerA, QueryPerformanceCounter, SetThreadPriority, GetExitCodeThread, TerminateThread, GetStartupInfoA, RemoveDirectoryA, GetComputerNameA, lstrcmpA, GetFileTime, RaiseException, InterlockedCompareExchange, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, InterlockedDecrement, WaitForMultipleObjects, WaitForSingleObjectEx, GetTickCount, LoadLibraryExW, FreeLibrary, GetProcAddress, lstrlenA, GetPrivateProfileStringA, WritePrivateProfileStringA, CreateDirectoryA, FindFirstFileA, FindClose, CreateEventA, WaitForMultipleObjectsEx, ResetEvent, GetCurrentThreadId, Sleep, SetEvent, GetVersionExA, WaitForSingleObject, FindNextFileA, DeleteFileA, CreateFileA, GetFileSize, ReadFile, SetFilePointer, WriteFile, SetEndOfFile, MoveFileA, GetFileAttributesA, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetSystemTimeAsFileTime, OutputDebugStringA, FormatMessageW, GetFileAttributesW, LoadLibraryA, GetWindowsDirectoryA, GetSystemDirectoryA, SetLastError, ExpandEnvironmentStringsA, HeapAlloc, GetProcessHeap, HeapFree, FormatMessageA, GetModuleHandleA, FileTimeToLocalFileTime, FileTimeToSystemTime, SizeofResource, LockResource, LoadResource, FindResourceA, DuplicateHandle, ResumeThread, SleepEx, FindResourceExA, CopyFileA, MoveFileExA, CreateToolhelp32Snapshot, Process32First, GetCurrentProcessId, Process32Next, GetModuleFileNameA, OpenEventA, TerminateProcess, GetExitCodeProcess, GetOverlappedResult, CreateFileMappingA, MapViewOfFile, UnmapViewOfFile, GetSystemDefaultLangID, GetLocaleInfoA, GetUserDefaultLangID, GetStdHandle, WideCharToMultiByte, DebugBreak, GetFullPathNameA, CreateMutexA, OpenMutexA, CreateProcessA, OpenFileMappingA, InterlockedExchange, HeapDestroy, HeapReAlloc, HeapSize, SystemTimeToTzSpecificLocalTime, GetThreadLocale, GetACP, GetNumberFormatA, lstrcpynA, GetShortPathNameW, GetSystemPowerStatus, lstrcatA, ExitProcess, SetConsoleCtrlHandler, GetStringTypeExW, GetStringTypeExA, GetEnvironmentVariableA, lstrcmpiW, lstrcmpiA, CompareStringW, CompareStringA, GetVersion, CreatePipe, GlobalAlloc, lstrcpyA, LoadLibraryExA, CreateThread, ProcessIdToSessionId, GlobalFree, DllMain, GetShortPathNameA, WritePrivateProfileSectionA, _lopen, _lclose, SetProcessWorkingSetSize
licenseman.dll
_LicensemanGetDaysUntilExpiration@4, _LicensemanSetLicenseFileA@4, _LicensemanIsEnforcementEnabled@4, _LicensemanRegisterForNotification@4, _LicensemanInitialize@4, _LicensemanCleanup@0, _LicensemanGetProductType@4
mfc80.dll
DllMain
msvcp100.dll
DllMain
msvcp80.dll
DllMain
msvcp90.dll
DllMain
msvcr100.dll
DllMain
msvcr80.dll
DllMain
msvcr90.dll
DllMain
netapi32.dll
Netbios, NetApiBufferFree
ole32.dll
CoInitialize, CoGetObject, StringFromGUID2, CoCreateInstance, CoUninitialize, CoInitializeEx, CoFreeUnusedLibraries
psapi.dll
GetModuleFileNameExA, GetProcessMemoryInfo, EnumProcessModules, EnumProcesses
setupapi.dll
SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, SetupDiGetDeviceInstanceIdA, CM_Get_DevNode_Status, SetupDiGetDeviceRegistryPropertyA, SetupIterateCabinetA, SetupGetStringFieldA, SetupCloseInfFile, SetupFindNextLine, SetupOpenInfFileA, SetupGetLineTextA, SetupFindFirstLineA, SetupGetIntField, SetupDiDestroyDeviceInfoList
shell32.dll
ShellExecuteExA, ShellExecuteA, SHGetFolderPathA, SHGetSpecialFolderPathA, ExtractIconExW
shlwapi.dll
PathAddBackslashW, SHDeleteKeyA, PathRemoveBackslashA, PathAddBackslashA
spnet.dll
UnzipSignatureFile, UnzipFileToFolder
sylink.dll
SyLinkCreateInstance, SyLinkDeleteInstance
user32.dll
DispatchMessageA, LoadStringA, IsRectEmpty, GetDesktopWindow, CharNextA, MessageBoxA, PeekMessageA, TranslateMessage, MsgWaitForMultipleObjects, FindWindowA, GetSystemMetrics, CharUpperW, ExitWindowsEx, SendMessageTimeoutA, EnumWindows, GetWindowTextA, GetClassNameA, wsprintfA, CharLowerA, CharLowerW, CharUpperA, GetWindowThreadProcessId, GetWindowLongA, DrawIconEx, FillRect, EnableWindow
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueW
wininet.dll
InternetCloseHandle, InternetOpenUrlA, InternetSetStatusCallback, InternetOpenA, InternetReadFile
ws2_32.dll
WSASocketA
wtsapi32.dll
WTSSendMessageW, WTSSendMessageA
Export table
BroadcastMessageToGuis
GetInterface
GetPluginHandle
GetSmcPath
GetTechPluginInfo
IsEnforcementEnabled
IsProductTypeSB
IsSepEnabled
IsSnacEnabled
SendMessageToGui
SendMessageToPlugin
SendMessageToService
SmcDebugLog

Smc.exe

Symantec Client Management Component by Symantec Corporation (Signed)

Remove Smc.exe
Version:   11.0.780.980
MD5:   3c65996a5b566fb3e9217795d8147ce2
SHA1:   73168a9e2110576a7001143809184d332e4e05ae

Overview

smc.exe runs as a service under the name SmcService (SmcService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:smc.exe
Publisher:Symantec Corporation
Product name:Symantec Client Management Component
Description:Symantec CMC Smc
Typical file path:C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\smc.exe
File version:11.0.780.980
Size:2.42 MB (2,532,736 bytes)
Build date:9/8/2007 12:02 AM
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Wednesday, September 8, 2010
Expiration date:Sunday, November 24, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SmcService
  • 'SmcService' (Symantec Management Client)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe'
  • Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 1036

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00036074%
    0.028634%
    Kernel CPU:0.00022587%
    0.013761%
    User CPU:0.00013487%
    0.014873%
    Kernel CPU time:11,984 ms/min
    100,923,805ms/min
    Context switches:220/sec
    284/sec
    Memory
    Private memory:16.62 MB
    21.59 MB
    Private (maximum):9.45 MB
    Private (minimum):576 KB
    Non-paged memory:16.62 MB
    21.59 MB
    Virtual memory:108.42 MB
    140.96 MB
    Virtual memory (peak):114.61 MB
    169.69 MB
    Working set:7.67 MB
    18.61 MB
    Working set (peak):23.36 MB
    37.95 MB
    Page faults:6,502,131/min
    2,039/min
    I/O
    I/O read transfer:20.46 KB/sec
    1.02 MB/min
    I/O read operations:11/sec
    343/min
    I/O write transfer:6.45 KB/sec
    274.99 KB/min
    I/O write operations:184/sec
    227/min
    I/O other transfer:335.62 KB/sec
    448.09 KB/min
    I/O other operations:4,678/sec
    1,671/min
    Resource allocations
    Threads:33
    12
    Handles:539
    600
    GUI GDI count:16
    103
    GUI USER count:15
    49

    BehaviorsProcess properties

    Integrety level:Undefined
    Platform:32-bit
    Command line:"C:\Program Files\symantec antivirus\smc.exe"
    Owner:SYSTEM
    Windows Service
    Service name:SmcService
    Display name:SmcService
    Description:“Provides communication with the Symantec Endpoint Protection Manager. It also provides network threat protection and application and device control for the client.”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    ResourcesThreads

    Averages
     
    MSVCR80.dll
    Total CPU:0.00216696%
    0.272967%
    Kernel CPU:0.00079620%
    0.107585%
    User CPU:0.00137075%
    0.165382%
    Context switches:31/sec
    79/sec
    Memory:620 KB
    1.16 MB
    ADVAPI32.dll
    Total CPU:0.00048122%
    Kernel CPU:0.00018228%
    User CPU:0.00029894%
    Context switches:4/sec
    Memory:620 KB
    wgxman.dll (Symantec Network Access Control by Symantec)
    Total CPU:0.00047030%
    Kernel CPU:0.00032082%
    User CPU:0.00014947%
    Context switches:4/sec
    Memory:104 KB
    Smc.exe (main module)
    Total CPU:0.00043750%
    Kernel CPU:0.00034757%
    User CPU:0.00008993%
    Context switches:2/sec
    Memory:2.43 MB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Microsoft Windows XP 50.00%
    Windows 7 Home Premium 20.00%
    Windows 7 Home Basic 6.67%
    Windows 7 Enterprise 6.67%
    Windows 7 Starter 6.67%
    Windows 7 Ultimate 3.33%
    Windows Vista Ultimate 3.33%
    Windows 7 Professional 3.33%

    Distribution by countryDistribution by country

    United States installs about 51.72% of Symantec Client Management Component.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 42.86%
    Hewlett-Packard 17.86%
    ASUS 14.29%
    Lenovo 7.14%
    Toshiba 7.14%
    Intel 7.14%
    Acer 3.57%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE