SndSrvc.exe
Symantec Security Drivers by Symantec Corporation (Signed)
Overview
There are 3 versions of sndsrvc.exe in the wild, the latest version being 6.0.11.3. It is started as a Windows Service called 'SNDSrvc' with the name 'SNDSrvc' and described as “Symantec Network Drivers Service”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 206.91 KB. The file is a digitally signed and issued to Symantec Corporation by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0002% including both foreground and background operations, the average private memory consumption is about 1.69 MB with the maximum memory reaching around 2.71 MB.
 Details
|
| File name: | sndsrvc.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec Security Drivers |
| Description: | Network Driver Service |
| Typical file path: | C:\Program Files\common files\symantec shared\sndsrvc.exe |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Monday, November 8, 2004 |
| Expiration date: | Monday, November 21, 2005 |
| Windows Service |
| Service name: | SNDSrvc |
| Display name: | SNDSrvc |
| Description: | “Symantec Network Drivers Service” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of sndsrvc.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- SNDSrvc
- 'SNDSrvc' (Symantec Network Drivers Service)
All file variations of sndsrvc.exe
