nav.exe
Norton AntiVirus by Symantec Corporation (Signed)
| Version: | 12.11.2.9 | 
| MD5: | a896a6a60ba695cc6082233affdbe38f | 
| SHA1: | 549b1717cdb665c3250d46c73788a94b4d2cf4bb | 
Overview
nav.exe runs as a service under the name Norton AntiVirus (NAV) within the local user context. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).
 Details
Details
| File name: | nav.exe | 
| Publisher: | Symantec Corporation | 
| Product name: | Norton AntiVirus | 
| Typical file path: | C:\Program Files\norton antivirus\engine\21.0.0.58\nav.exe | 
| Original name: | ccSvcHst.exe | 
| File version: | 12.11.2.9 | 
| Product version: | 21.3.0.12 | 
| Size: | 256.8 KB (262,968 bytes) | 
| Build date: | 4/21/2014 2:54 PM | 
| Certificate | 
| Issued to: | Symantec Corporation | 
| Authority (CA): | VeriSign | 
| Effective date: | Monday, August 9, 2010 | 
| Digital DNA | 
| File packed: | No | 
| .NET CLR: | No | 
More details
 Behaviors
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
 Resource utilization
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
| CPU | 
| Total CPU: | 0.00572280% |  | 
| Kernel CPU: | 0.00269180% |  | 
| User CPU: | 0.00303100% |  | 
| Kernel CPU time: | 7,461 ms/min |  | 
| Context switches: | 10/sec |  | 
| Memory | 
| Private memory: | 18.97 MB |  | 
| Private (maximum): | 41.91 MB |  | 
| Private (minimum): | 9.55 MB |  | 
| Non-paged memory: | 18.97 MB |  | 
| Virtual memory: | 208.8 MB |  | 
| Virtual memory (peak): | 461.58 MB |  | 
| Working set: | 10 MB |  | 
| Working set (peak): | 61.53 MB |  | 
| Resource allocations | 
| Threads: | 36 |  | 
| Handles: | 2678 |  | 
| GUI GDI count: | 58 |  | 
| GUI GDI peak: | 70 |  | 
| GUI USER count: | 39 |  | 
| GUI USER peak: | 49 |  | 
 
 Process properties
Process properties
| Integrety level: | High | 
| Platform: | 64-bit | 
| Command lines: | 
"C:\Program Files\norton antivirus\engine\21.3.0.12\nav.exe" /c /a /s usersession2"C:\Program Files\norton antivirus\engine\21.3.0.12\nav.exe" /s "nav" /m "C:\Program Files\norton antivirus\engine\21.3.0.12\dimaster.dll" /prefetcC:1 | 
| Owner: | User | 
| Windows Service | 
| Service name: | NAV | 
| Display name: | Norton AntiVirus | 
| Description: | “Norton AntiVirus” | 
| Type: | Win32OwnProcess | 
| Parent process: | nav.exe (Norton AntiVirus by Symantec Corporation) | 
 Threads
Threads
Averages
 
| wow64.dll | 
| Total CPU: | 0.05351984% |  | 
| Kernel CPU: | 0.03504793% |  | 
| User CPU: | 0.01847191% |  | 
| CPU cycles: | 1,912,996/sec |  | 
| Context switches: | 3/sec |  | 
| Memory: | 292 KB |  | 
| NAV.exe (main module) | 
| Total CPU: | 0.00514732% |  | 
| Kernel CPU: | 0.00196575% |  | 
| User CPU: | 0.00318156% |  | 
| CPU cycles: | 132,418/sec |  | 
| Memory: | 256 KB |  | 
 
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
 Distribution by Windows OS
Distribution by Windows OS
| OS version | distribution | 
| Windows 8.1 Pro | 50.00% |  | 
| Windows 8 Single Language | 50.00% |  | 
 Distribution by country
Distribution by country
Mexico installs about 50.00% of Norton AntiVirus.
 Distribution by PC manufacturer
Distribution by PC manufacturer
| PC Manufacturer | distribution | 
| Dell | 50.00% |  | 
| Toshiba | 50.00% |  |