HSLoader.exe
Norton Protection Center by Symantec Corporation (Signed)
| Version: | 2008.6.00.18 |
| MD5: | 48c6259ea8600a81b1af0c372d8fc844 |
| SHA1: | 3d8bc6efc663400b2440769d5260f0a956188a64 |
| SHA256: | afbe63725218511c6a1ad6df335cf7bce0ac2255334ca942330919ae0424829d |
Overview
hsloader.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent
ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation). The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows Vista (TM) Home Basic (6.0.6002.131072).
Details
| File name: | hsloader.exe |
| Publisher: | Symantec Corporation |
| Product name: | Norton Protection Center |
| Description: | Norton Protection Center Help and Support Loader |
| Typical file path: | C:\Program Files\common files\symantec shared\npc\2.0\hsloader.exe |
| File version: | 2008.6.00.18 |
| Product version: | 2008.6.00 |
| Size: | 50.37 KB (51,576 bytes) |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, October 30, 2007 |
| Expiration date: | Wednesday, November 24, 2010 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 8.0 |
| .NET CLR: | No |
More details
Network connections
[UDP] listens on port 59560
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.04210642% | |
| Kernel CPU: | 0.02398614% | |
| User CPU: | 0.01812028% | |
| Kernel CPU time: | 827 ms/min | |
| Memory |
| Private memory: | 36.88 MB | |
| Private (maximum): | 12.59 MB | |
| Private (minimum): | 9.28 MB | |
| Non-paged memory: | 36.88 MB | |
| Virtual memory: | 189.33 MB | |
| Virtual memory (peak): | 197.2 MB | |
| Working set: | 9.28 MB | |
| Working set (peak): | 51.32 MB | |
| Resource allocations |
| Threads: | 13 | |
| Handles: | 468 | |
| GUI GDI count: | 56 | |
| GUI USER count: | 31 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\common files\symantec shared\npc\2.0\hsloader.exe" "C:\Program Files\common files\symantec shared\npc\2.0\hsloader.exe" /url "httpC://www-secure.symantec.com/techsupp/servlet/productmessages?error=6&module=3035&a=norton internet security error&b=auto-protect experienced an unexpected error.
0x000003e8&product=nis&version=15.5.0.23&build=retail&language=english&c=6.0&d=service pack 2&e=9.0.8112.16421&f=united states&g=null&h=expired&i=null&j=true&l=en&n=hpq(60)" |
| Owner: | SYSTEM |
| Parent process: | ccSvcHst.exe (Symantec Security Technologies by Symantec Corporation) |
Threads
Averages
| MSVCR80.dll |
| Total CPU: | 0.01901256% | |
| Kernel CPU: | 0.00950628% | |
| User CPU: | 0.00950628% | |
| CPU cycles: | 455,994/sec | |
| Memory: | 620 KB | |
| HSLoader.exe (main module) |
| Total CPU: | 0.01355069% | |
| Kernel CPU: | 0.01174393% | |
| User CPU: | 0.00180676% | |
| CPU cycles: | 301,622/sec | |
| Memory: | 60 KB | |
| ntdll.dll |
| Total CPU: | 0.00362312% | |
| Kernel CPU: | 0.00135867% | |
| User CPU: | 0.00226445% | |
| CPU cycles: | 77,600/sec | |
| Memory: | 1.16 MB | |
| msvcrt.dll (Windows NT CRT DLL by Microsoft) |
| Total CPU: | 0.00317765% | |
| Kernel CPU: | 0.00045395% | |
| User CPU: | 0.00272370% | |
| CPU cycles: | 62,391/sec | |
| Memory: | 680 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows Vista Home Basic |
100.00% |
|
