Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.1.2015.2015 9.68%
12.1.2015.2015 3.23%
12.1.1000.157 29.03%
12.1.1000.157 3.23%
12.1.1000.157 3.23%
12.1.671.4971 3.23%
12.0.122.161 3.23%
11.0.6300.552 3.23%
11.0.6200.530 3.23%
11.0.6200.530 3.23%
11.0.6100.480 3.23%
11.0.6005.440 3.23%
11.0.6005.440 9.68%
11.0.6000.436 3.23%
11.0.5002.301 3.23%
11.0.4014.23 3.23%
11.0.4000.2261 3.23%
11.0.3001.2189 3.23%
11.0.780.980 3.23%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenProcessToken, IsValidSid, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetSidSubAuthority, LookupPrivilegeValueA, AdjustTokenPrivileges, GetTokenInformation, RegOpenKeyA, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegSetValueExA, RegDeleteValueA, RegEnumKeyExA, RegFlushKey, RevertToSelf, ImpersonateLoggedOnUser, RegDeleteKeyA, RegEnumKeyA, RegEnumValueA, RegQueryInfoKeyA, RegCreateKeyExA, RegisterServiceCtrlHandlerA, OpenSCManagerA, OpenServiceA, ControlService, CloseServiceHandle, SetServiceStatus, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, QueryServiceStatus, ChangeServiceConfigA, StartServiceA, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsA, UnregisterTraceGuids, LookupAccountSidW, QueryServiceConfigA, RegOpenKeyExW, RegNotifyChangeKeyValue, RegQueryValueExW, QueryServiceStatusEx, RegCreateKeyExW, RegSetValueExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, FreeSid, AllocateAndInitializeSid, GetLengthSid, AddAccessAllowedAce, GetAclInformation, DeleteAce, CheckTokenMembership, EqualSid, GetUserNameA, CryptAcquireContextA, CryptReleaseContext, CryptGetProvParam, CryptGetUserKey, CryptCreateHash, CryptHashData, CryptDestroyHash, CryptDeriveKey, CryptGenKey, CryptDestroyKey, SetSecurityInfo, AddAce, GetAce, AddAccessDeniedAce, InitializeAcl, GetSecurityInfo, CreateWellKnownSid, TraceMessage, DuplicateToken, CreateProcessAsUserA, RegDeleteKeyW, LookupAccountNameW, GetUserNameW, ChangeServiceConfig2A, GetFileSecurityA, CreateProcessAsUserW, CreateServiceA, DeleteService
crypt32.dll
CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertFreeCertificateContext, CryptMsgClose, CertCloseStore, CertFindCertificateInStore
gdi32.dll
CreateCompatibleBitmap, CreateCompatibleDC, CreateSolidBrush
kernel32.dll
GetCurrentProcess, CloseHandle, OpenProcess, GetLastError, LocalAlloc, LocalFree, SetWaitableTimer, AttachConsole, FreeConsole, WTSGetActiveConsoleSessionId, GetSystemDirectoryW, GetComputerNameW, FindCloseChangeNotification, GetPrivateProfileSectionA, GetPrivateProfileSectionNamesA, GetPrivateProfileIntA, GetTempPathA, GetTempFileNameA, GetSystemWindowsDirectoryA, GetFileAttributesExA, ExpandEnvironmentStringsW, SetEnvironmentVariableW, GetEnvironmentVariableW, FindFirstChangeNotificationA, FindNextChangeNotification, CreateNamedPipeW, ConnectNamedPipe, lstrlenW, InterlockedIncrement, CreateFileW, SetFileAttributesA, CompareFileTime, GetSystemTime, SystemTimeToFileTime, GetProcessTimes, MultiByteToWideChar, GetSystemInfo, GetDateFormatA, GetModuleFileNameW, GetTimeFormatA, CreateWaitableTimerA, QueryPerformanceCounter, SetThreadPriority, GetExitCodeThread, TerminateThread, GetStartupInfoA, RemoveDirectoryA, GetComputerNameA, lstrcmpA, GetFileTime, RaiseException, InterlockedCompareExchange, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, InterlockedDecrement, WaitForMultipleObjects, WaitForSingleObjectEx, GetTickCount, LoadLibraryExW, FreeLibrary, GetProcAddress, lstrlenA, GetPrivateProfileStringA, WritePrivateProfileStringA, CreateDirectoryA, FindFirstFileA, FindClose, CreateEventA, WaitForMultipleObjectsEx, ResetEvent, GetCurrentThreadId, Sleep, SetEvent, GetVersionExA, WaitForSingleObject, FindNextFileA, DeleteFileA, CreateFileA, GetFileSize, ReadFile, SetFilePointer, WriteFile, SetEndOfFile, MoveFileA, GetFileAttributesA, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetSystemTimeAsFileTime, OutputDebugStringA, FormatMessageW, GetFileAttributesW, LoadLibraryA, GetWindowsDirectoryA, GetSystemDirectoryA, SetLastError, ExpandEnvironmentStringsA, HeapAlloc, GetProcessHeap, HeapFree, FormatMessageA, GetModuleHandleA, FileTimeToLocalFileTime, FileTimeToSystemTime, SizeofResource, LockResource, LoadResource, FindResourceA, DuplicateHandle, ResumeThread, SleepEx, FindResourceExA, CopyFileA, MoveFileExA, CreateToolhelp32Snapshot, Process32First, GetCurrentProcessId, Process32Next, GetModuleFileNameA, OpenEventA, TerminateProcess, GetExitCodeProcess, GetOverlappedResult, CreateFileMappingA, MapViewOfFile, UnmapViewOfFile, GetSystemDefaultLangID, GetLocaleInfoA, GetUserDefaultLangID, GetStdHandle, WideCharToMultiByte, DebugBreak, GetFullPathNameA, CreateMutexA, OpenMutexA, CreateProcessA, OpenFileMappingA, InterlockedExchange, HeapDestroy, HeapReAlloc, HeapSize, SystemTimeToTzSpecificLocalTime, GetThreadLocale, GetACP, GetNumberFormatA, lstrcpynA, GetShortPathNameW, GetSystemPowerStatus, lstrcatA, ExitProcess, SetConsoleCtrlHandler, GetStringTypeExW, GetStringTypeExA, GetEnvironmentVariableA, lstrcmpiW, lstrcmpiA, CompareStringW, CompareStringA, GetVersion, CreatePipe, GlobalAlloc, lstrcpyA, LoadLibraryExA, CreateThread, ProcessIdToSessionId, GlobalFree, DllMain, GetShortPathNameA, WritePrivateProfileSectionA, _lopen, _lclose, SetProcessWorkingSetSize
licenseman.dll
_LicensemanGetDaysUntilExpiration@4, _LicensemanSetLicenseFileA@4, _LicensemanIsEnforcementEnabled@4, _LicensemanRegisterForNotification@4, _LicensemanInitialize@4, _LicensemanCleanup@0, _LicensemanGetProductType@4
mfc80.dll
DllMain
msvcp100.dll
DllMain
msvcp80.dll
DllMain
msvcp90.dll
DllMain
msvcr100.dll
DllMain
msvcr80.dll
DllMain
msvcr90.dll
DllMain
netapi32.dll
Netbios, NetApiBufferFree
ole32.dll
CoInitialize, CoGetObject, StringFromGUID2, CoCreateInstance, CoUninitialize, CoInitializeEx, CoFreeUnusedLibraries
psapi.dll
GetModuleFileNameExA, GetProcessMemoryInfo, EnumProcessModules, EnumProcesses
setupapi.dll
SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, SetupDiGetDeviceInstanceIdA, CM_Get_DevNode_Status, SetupDiGetDeviceRegistryPropertyA, SetupIterateCabinetA, SetupGetStringFieldA, SetupCloseInfFile, SetupFindNextLine, SetupOpenInfFileA, SetupGetLineTextA, SetupFindFirstLineA, SetupGetIntField, SetupDiDestroyDeviceInfoList
shell32.dll
ShellExecuteExA, ShellExecuteA, SHGetFolderPathA, SHGetSpecialFolderPathA, ExtractIconExW
shlwapi.dll
PathAddBackslashW, SHDeleteKeyA, PathRemoveBackslashA, PathAddBackslashA
spnet.dll
UnzipSignatureFile, UnzipFileToFolder
sylink.dll
SyLinkCreateInstance, SyLinkDeleteInstance
user32.dll
DispatchMessageA, LoadStringA, IsRectEmpty, GetDesktopWindow, CharNextA, MessageBoxA, PeekMessageA, TranslateMessage, MsgWaitForMultipleObjects, FindWindowA, GetSystemMetrics, CharUpperW, ExitWindowsEx, SendMessageTimeoutA, EnumWindows, GetWindowTextA, GetClassNameA, wsprintfA, CharLowerA, CharLowerW, CharUpperA, GetWindowThreadProcessId, GetWindowLongA, DrawIconEx, FillRect, EnableWindow
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueW
wininet.dll
InternetCloseHandle, InternetOpenUrlA, InternetSetStatusCallback, InternetOpenA, InternetReadFile
ws2_32.dll
WSASocketA
wtsapi32.dll
WTSSendMessageW, WTSSendMessageA
Export table
BroadcastMessageToGuis
GetInterface
GetPluginHandle
GetSmcPath
GetTechPluginInfo
IsEnforcementEnabled
IsProductTypeSB
IsSepEnabled
IsSnacEnabled
SendMessageToGui
SendMessageToPlugin
SendMessageToService
SmcDebugLog

Smc.exe

Symantec Client Management Component by Symantec Corporation (Signed)

Remove Smc.exe
Version:   12.1.671.4971
MD5:   c9ee967406d9d5429c53718918164e8a
SHA1:   684b868791ed2914f30afe43c83e59019394124e
SHA256:   d2699b62a9211535a58d0efe99f542b1855f073cc67695b4f4824b73ea9bddb8

Overview

smc.exe runs as a service under the name SmcService (SmcService) with extensive SYSTEM privileges (full administrator access). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:smc.exe
Publisher:Symantec Corporation
Product name:Symantec Client Management Component
Description:Symantec CMC Smc
Typical file path:C:\Program Files\symantec\symantec endpoint protection\12.1.1000.157.105\bin\smc.exe
File version:12.1.671.4971
Size:2.47 MB (2,591,232 bytes)
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Wednesday, September 8, 2010
Expiration date:Sunday, November 24, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 9.0
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SmcService
  • 'SmcService' (Symantec Management Client)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1000.157.105\Bin\Smc.exe'
  • Firewall exception for 'C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00230033%
0.028634%
Kernel CPU:0.00111576%
0.013761%
User CPU:0.00118457%
0.014873%
Kernel CPU time:361,657 ms/min
100,923,805ms/min
Memory
Private memory:15.64 MB
21.59 MB
Private (maximum):33.3 MB
Private (minimum):7.98 MB
Non-paged memory:15.64 MB
21.59 MB
Virtual memory:155.7 MB
140.96 MB
Virtual memory (peak):157.98 MB
169.69 MB
Working set:10.15 MB
18.61 MB
Working set (peak):33.36 MB
37.95 MB
Resource allocations
Threads:30
12
Handles:659
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\symantec\symantec endpoint protection\12.1.671.4971.105\bin64\smc.exe" /prefetcC:1
Owner:SYSTEM
Windows Service
Service name:SmcService
Display name:SmcService
Description:“Provides communication with the Symantec Endpoint Protection Manager. It also provides network threat protection and application and device control for the client.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
MSVCR90.dll
Total CPU:0.18125862%
0.272967%
Kernel CPU:0.13615949%
0.107585%
User CPU:0.04509913%
0.165382%
CPU cycles:4,727,792/sec
5,741,424/sec
Context switches:17/sec
79/sec
Memory:652 KB
1.16 MB
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:0.00321117%
Kernel CPU:0.00221724%
User CPU:0.00099393%
CPU cycles:449,461/sec
Context switches:2/sec
Memory:124 KB
Smc.exe (main module)
Total CPU:0.00053517%
Kernel CPU:0.00022936%
User CPU:0.00030581%
CPU cycles:8,582/sec
Memory:2.48 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 50.00%
Windows 7 Home Premium 20.00%
Windows 7 Home Basic 6.67%
Windows 7 Enterprise 6.67%
Windows 7 Starter 6.67%
Windows 7 Ultimate 3.33%
Windows Vista Ultimate 3.33%
Windows 7 Professional 3.33%

Distribution by countryDistribution by country

United States installs about 51.72% of Symantec Client Management Component.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 42.86%
Hewlett-Packard 17.86%
ASUS 14.29%
Lenovo 7.14%
Toshiba 7.14%
Intel 7.14%
Acer 3.57%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE