Versions

109.0.4.9	1.02%
109.0.2.14	0.08%
109.0.0.107	13.78%
108.1.2.8	0.39%
108.0.0.126	0.08%
107.0.6.4	0.08%
107.0.4.3	0.08%
107.0.0.102	0.08%
106.5.3.6	0.08%
106.5.3.5	0.31%
106.5.2.3	0.08%
106.5.1.6	0.78%
106.5.0.10	0.08%
106.4.0.5	0.08%
106.3.8.4	0.08%
106.3.7.9	0.31%
106.3.3.16	0.08%
106.2.0.21	0.08%
106.1.4.4	0.08%
12.3.3.2	15.27%
12.3.1.2	14.80%
12.2.1.4	9.01%
12.2.0.8	17.15%
12.1.1.5	0.55%
12.1.0.38	3.68%
11.2.3.6	15.74%
11.2.3.6	0.08%
11.2.2.4	0.55%
11.2.1.4	0.47%
11.2.0.9	0.23%
11.1.0.16	2.82%
11.0.0.88	0.31%
10.2.0.7	0.94%
10.1.2.14	0.08%
10.1.0.37	0.55%
10.0.1.8	0.08%
10.0.0.61	0.08%

There are 37 versions of ccSvcHst.exe in the wild, the latest version being 109.0.4.9. It is started as a Windows Service called 'Norton One' with the name 'MCLIENT'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 126.65 KB. The file is a digitally signed and issued to Symantec Corporation by VeriSign. The programs Norton Safe Web Lite, Norton Internet Security and Norton Family have been observed as installing specific variations of ccSvcHst.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0032% including both foreground and background operations, the average private memory consumption is about 22.77 MB with the maximum memory reaching around 46.02 MB. Addionally, typically read and write I/O disk operations is about 4.57 MB per minute for reads and 353.42 KB per minute for writes.

Symantec Service Framework is part of Norton Internet Security, by Symantec Corporation, is a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.