AVAgent.exe
Symantec Endpoint Protection.cloud by Symantec Corporation (Signed)
| Version: | 4.3.0.4 |
| MD5: | f72ed4b76fbcd70079b5e6b87a2fe61e |
| SHA1: | 767102aea1c0420559b9a0ce1c8758414349223d |
Overview
avagent.exe runs as a service under the name Symantec.cloud Endpoint Protection (ssSpnAv) with extensive SYSTEM privileges (full administrator access) as a shared service. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).
Details
| File name: | avagent.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec Endpoint Protection.cloud |
| Description: | Hosted Endpoint Protection Service |
| Typical file path: | C:\Program Files\symantec.cloud\antivirus\avagent.exe |
| File version: | 4.3.0.4 |
| Product version: | 4.3 |
| Size: | 404.89 KB (414,608 bytes) |
| Build date: | 3/27/2013 7:20 PM |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, September 7, 2010 |
| Expiration date: | Saturday, November 23, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
- 'ssSpnAv' (Symantec.cloud Endpoint Protection)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00022074% | |
| Kernel CPU: | 0.00007551% | |
| User CPU: | 0.00014524% | |
| Kernel CPU time: | 1,170 ms/min | |
| CPU cycles: | 1,291,927/sec | |
| Memory |
| Private memory: | 4.68 MB | |
| Private (maximum): | 10.47 MB | |
| Private (minimum): | 10.22 MB | |
| Non-paged memory: | 4.68 MB | |
| Virtual memory: | 76.97 MB | |
| Virtual memory (peak): | 79.72 MB | |
| Working set: | 10.39 MB | |
| Working set (peak): | 10.5 MB | |
| Page faults: | 4,260/min | |
| I/O |
| I/O read transfer: | 1.01 KB/sec | |
| I/O read operations: | 3/sec | |
| I/O write transfer: | 731 Bytes/sec | |
| I/O write operations: | 2/sec | |
| I/O other transfer: | 9.6 KB/sec | |
| I/O other operations: | 603/sec | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 284 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\symantec.cloud\antivirus\avagent.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | ssSpnAv |
| Display name: | Symantec.cloud Endpoint Protection |
| Description: | “Symantec.cloud Endpoint Protection” |
| Type: | Win32ShareProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ntdll.dll |
| Total CPU: | 0.00083196% | |
| Kernel CPU: | 0.00065635% | |
| User CPU: | 0.00017561% | |
| CPU cycles: | 383,914/sec | |
| Context switches: | 3/sec | |
| Memory: | 1.66 MB | |
| AVAgent.exe (main module) |
| Total CPU: | 0.00005542% | |
| Kernel CPU: | 0.00005542% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,934/sec | |
| Memory: | 416 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| ASUS |
100.00% |
|
