ccSvcHst.exe
Symantec Security Technologies by Symantec Corporation (Signed)
| Version: | 12.1.0.38 |
| MD5: | 8d11da92f83d8c8281689739bef05fd5 |
| SHA1: | a4b3a00be7a68da676c360f3a5bb38eaba736683 |
| SHA256: | ad1d95ce084d1bd8310f6aa1cb27bea98d9354e334aec448ad6e6f68b52eebc7 |
What is ccSvcHst.exe?
Symantec Service Framework is part of Norton Internet Security, by Symantec Corporation, is a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.
About ccSvcHst.exe (from Symantec Corporation)
“Norton Internet Security lets you email, chat and surf the Web without worrying about cybercriminals ripping you off. It delivers protection from online dangers without sacrificing performance. It g”
Details
| File name: | ccSvcHst.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec Security Technologies |
| Description: | Symantec Service Framework |
| Typical file path: | C:\Program Files\norton internet security\engine\19.0.0.128\ccsvchst.exe |
| File version: | 12.1.0.38 |
| Size: | 140.55 KB (143,928 bytes) |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Expiration date: | Saturday, November 23, 2013 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 9.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“Norton Family gives you insight into where your kids go and what they do online. So you can keep them safe and teach them good Internet habits. An easy-to-read activity report shows you at a glance ALL the web sites your kids visit, or attempt to visit. You can visit the sites your kids have been to and block specific sites or types of sites. You can set limits on your kids’ computer time to help ensure they aren’t spending too much ti...”
“Norton ™ Identity Safe is a password manager that makes logging into your favorite web sites easier, faster and more secure. Never again forget a user name or password. Ever. Stop filling in the same forms over and over. Warns you of unsafe sites right in your search results and blocks them. Stores your passwords and more in a secure, cloud-based vault that only you can access. Stop filling in the same forms over and over. Identity Saf...”
“Norton Anti-Theft helps you quickly lock and find your PC laptop, MacBook, tablet or smartphone - and protect the invaluable information contained on it - if it's ever lost or stolen. And you can use any browser, anywhere, anytime to find out where it is and who has it and to remotely lock it. Tracks and maps the location of your device when anyone uses it to go online so you will know if it is lost or stolen. Securely locks your device...”
“Norton Management lets you manage all of your Norton products and Norton product keys from one location. You can add your devices such as personal computers and laptops to Norton Management and remotely install and manage your Norton products on the device. You can view the security status of each of your devices and resolve the security issues by using the Norton Management website from any location around the world. After you install ...”
“Basic antivirus protection that stops viruses and spyware, so you can safely go online and share. Five patented layers of protection quickly and accurately detect and eliminate viruses and spyware. Protects your privacy and prevents your passwords and identity from being stolen when you surf the Web. Deep clean your PC – our powerful Threat-Removal Layer targets and scrubs out aggressive, hard-to-remove infections that less sophisticate...”
Norton Internet Security, developed by Symantec Corporation, is a computer program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses. Other features include a personal firewall, email spam filtering, and phishing protection. Symantec distributes the product as a download, a boxed copy, and as OEM software.
Norton 360, developed by Symantec, is marketed as an "all-in-one" computer security suite. The package includes an antivirus, a personal firewall, a phishing protection program and a backup program. What distinguishes this suite from Norton Internet Security is the inclusion of file backup and PC maintenance capabilities.
“With Norton One you get a new membership that makes it easy to protect multiple computers and devices. Secure any combination of five Macs, PCs, iPhones, iPads and Android devices with always up-to-date Norton software. And always reach dedicated experts 24/7/365 in two minutes or less (estimated). With Norton One, you get a single membership that covers multiple devices. It starts with the most up-to-date versions of Norton security p...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
- 'MCLIENT' (Norton One)
- 'SsPaAdm' (Symantec.cloud Cloud Agent)
- 'ssPaSetMgr' (Symantec.cloud Scheduler)
- 'NIS' (Endpoint Protection.cloud)
- 'NOF' (Norton Online)
- 'NSM' (Norton Family)
- 'NSL' (Norton Safe Web Lite)
- 'ccEvtMgr' (Symantec Event Manager)
- 'SepMasterService' (Symantec Endpoint Protection)
- 'PCCUJobMgr' (Common Client Job Manager Service)
- 'NAV' (Norton AntiVirus)
- 'N360' (Norton Security Suite)
- 'NAT' (Norton Anti-Theft)
- 'NCO' (Norton Identity Safe)
- NCO
Network connections
[TCP] 143.127.93.100:80
[TCP] 143.127.93.108:80
[TCP] sapi.norton.com (63.245.197.112:80)
[TCP] 143.127.93.101:80
[TCP] 166.98.7.14:80
[TCP] 166.98.7.18:80
[TCP] 166.98.7.15:80
[TCP] 143.127.102.25:443
[UDP] listens on port 53293
[UDP] listens on port 50365
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.02199286% | |
| Kernel CPU: | 0.00306576% | |
| User CPU: | 0.01892710% | |
| Kernel CPU time: | 116,685,507 ms/min | |
| CPU cycles: | 746,405/sec | |
| Context switches: | 36/sec | |
| Memory |
| Private memory: | 17.48 MB | |
| Private (maximum): | 34.43 MB | |
| Private (minimum): | 15.49 MB | |
| Non-paged memory: | 17.48 MB | |
| Virtual memory: | 138.39 MB | |
| Virtual memory (peak): | 179.68 MB | |
| Working set: | 13.15 MB | |
| Working set (peak): | 44.5 MB | |
| Page faults: | 1,142,373/min | |
| I/O |
| I/O read transfer: | 425.29 KB/sec | |
| I/O read operations: | 164/sec | |
| I/O write transfer: | 93.09 KB/sec | |
| I/O write operations: | 77/sec | |
| I/O other transfer: | 23.74 KB/sec | |
| I/O other operations: | 191/sec | |
| Resource allocations |
| Threads: | 20 | |
| Handles: | 833 | |
| GUI GDI count: | 48 | |
| GUI GDI peak: | 39 | |
| GUI USER count: | 25 | |
| GUI USER peak: | 29 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command lines: |
- "C:\Program Files\norton identity safe\engine\2013.1.0.32\ccsvchst.exe" /c /a /s usersession
- "C:\Program Files\norton identity safe\engine\2013.1.0.32\ccsvchst.exe" /s "nco" /m "C:\Program Files\norton identity safe\engine\2013.1.0.32\dimaster.dll" /prefetcC:1
- "C:\Program Files\norton anti-theft\engine\1.6.0.17\ccsvchst.exe" /s "nat" /m "C:\Program Files\norton anti-theft\engine\1.6.0.17\dimaster.dll" /prefetcC:1
- "C:\Program Files\norton anti-theft\engine\1.6.0.17\ccsvchst.exe" /c /a /s usersession2
- "C:\Program Files\norton internet security\engine\20.1.0.24\ccsvchst.exe" /c /a /s usersession
- "C:\Program Files\norton internet security\engine\20.1.0.24\ccsvchst.exe" /s "nis" /m "C:\Program Files\norton internet security\engine\20.1.0.24\dimaster.dll" /prefetcC:1
- "C:\Program Files\norton family\engine\2.6.0.71\ccsvchst.exe" /s "nsm" /m "C:\Program Files\norton family\engine\2.6.0.71\dimaster.dll" /prefetcC:1
- (12 more)
|
| Owner: | SYSTEM |
| Windows Service |
| Service name: | MCLIENT |
| Display name: | Norton One |
| Description: | “Norton One” |
| Type: | Win32OwnProcess |
| Parent processes: |
|
Threads
Averages
| ntdll.dll |
| Total CPU: | 1.20090767% | |
| Kernel CPU: | 1.09824016% | |
| User CPU: | 0.10266751% | |
| CPU cycles: | 32,272,883/sec | |
| Context switches: | 28/sec | |
| Memory: | 1.23 MB | |
| MSVCR100.dll |
| Total CPU: | 0.13312405% | |
| Kernel CPU: | 0.05340140% | |
| User CPU: | 0.07972264% | |
| CPU cycles: | 3,627,435/sec | |
| Context switches: | 2/sec | |
| Memory: | 764 KB | |
| bhengine.dll (BHEngine by Symantec) |
| Total CPU: | 0.06914870% | |
| Kernel CPU: | 0.06914870% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,775,005/sec | |
| Context switches: | 2/sec | |
| Memory: | 1.82 MB | |
| ipsplug.dll (Symantec Intrusion Detection by Symantec) |
| Total CPU: | 0.04688498% | |
| Kernel CPU: | 0.03586767% | |
| User CPU: | 0.01101730% | |
| CPU cycles: | 997,667/sec | |
| Memory: | 128 KB | |
| sechost.dll |
| Total CPU: | 0.02768544% | |
| Kernel CPU: | 0.02076408% | |
| User CPU: | 0.00692136% | |
| CPU cycles: | 707,820/sec | |
| Memory: | 100 KB | |
| wow64.dll |
| Total CPU: | 0.00665104% | |
| Kernel CPU: | 0.00420292% | |
| User CPU: | 0.00244812% | |
| CPU cycles: | 133,840/sec | |
| Memory: | 276 KB | |
| ccSvcHst.exe (main module) |
| Total CPU: | 0.00181091% | |
| Kernel CPU: | 0.00122365% | |
| User CPU: | 0.00058726% | |
| CPU cycles: | 42,629/sec | |
| Memory: | 144 KB | |
| ADVAPI32.dll |
| Total CPU: | 0.00149760% | |
| Kernel CPU: | 0.00068073% | |
| User CPU: | 0.00081688% | |
| CPU cycles: | 27,241/sec | |
| Memory: | 792 KB | |
| wow64cpu.dll |
| Total CPU: | 0.00131639% | |
| Kernel CPU: | 0.00075825% | |
| User CPU: | 0.00055813% | |
| CPU cycles: | 59,479/sec | |
| Memory: | 32 KB | |
| mswsock.dll |
| Total CPU: | 0.00027325% | |
| Kernel CPU: | 0.00027325% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,359/sec | |
| Memory: | 236 KB | |
| ole32.dll |
| Total CPU: | 0.00013642% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00013642% | |
| CPU cycles: | 1,905/sec | |
| Memory: | 1.27 MB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
45.50% |
|
| Windows 8 |
18.00% |
|
| Windows 7 Ultimate |
8.00% |
|
| Windows 8.1 |
6.00% |
|
| Windows Vista Home Premium |
5.00% |
|
| Microsoft Windows XP |
4.00% |
|
| Windows 7 Home Basic |
3.00% |
|
| Windows Developer Preview |
3.00% |
|
| Windows 7 Professional |
2.50% |
|
| Windows 8 Pro |
2.00% |
|
| Windows 8.1 Pro |
1.50% |
|
| Windows Se7en Titan |
1.50% |
|
Distribution by country
United States installs about 72.08% of Symantec Security Technologies.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
35.00% |
|
| Hewlett-Packard |
22.50% |
|
| Dell |
13.57% |
|
| Acer |
10.00% |
|
| ASUS |
7.14% |
|
| GIGABYTE |
4.29% |
|
| MSI |
3.57% |
|
| American Megatrends |
2.14% |
|
| Samsung |
1.79% |
|
