Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

nat.exe

Norton Anti-Theft by Symantec Corporation (Signed)

Remove nat.exe
Version:   12.10.0.42
MD5:   8fa07af404bc705fdec03493644970b2
SHA1:   237140338aa561793fbce868417f02cb335d8db9

Overview

nat.exe runs as a service under the name Norton Anti-Theft (NAT) within the local user context. This is typically installed with the program Norton Anti-Theft published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

DetailsDetails

File name:nat.exe
Publisher:Symantec Corporation
Product name:Norton Anti-Theft
Typical file path:C:\Program Files\norton anti-theft\engine\1.10.0.9\nat.exe
Original name:ccSvcHst.exe
File version:12.10.0.42
Product version:1.10.0.9
Size:226.98 KB (232,424 bytes)
Build date:8/7/2013 8:38 PM
Certificate
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Tuesday, September 7, 2010
Expiration date:Saturday, November 23, 2013
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Norton Anti-Theft
 Symantec Corporation
7% remove
“Norton Anti-Theft helps you quickly lock and find your PC laptop, MacBook, tablet or smartphone - and protect the invaluable information contained on it - if it's ever lost or stolen. And you can use any browser, anywhere, anytime to find out where it is and who has it and to remotely lock it. Tracks and maps the location of your device when anyone uses it to go online so you will know if it is lost or stolen. Securely locks your device...”

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'NAT' (Norton Anti-Theft)
Network connections
  • [TCP] 143.127.93.104:80

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00012080%
    0.028634%
    Kernel CPU:0.00005835%
    0.013761%
    User CPU:0.00006245%
    0.014873%
    Kernel CPU time:26,653 ms/min
    100,923,805ms/min
    CPU cycles:688,121/sec
    17,470,203/sec
    Memory
    Private memory:8.09 MB
    21.59 MB
    Private (maximum):12.05 MB
    Private (minimum):212 KB
    Non-paged memory:8.09 MB
    21.59 MB
    Virtual memory:101.32 MB
    140.96 MB
    Virtual memory (peak):104.75 MB
    169.69 MB
    Working set:4.4 MB
    18.61 MB
    Working set (peak):17.3 MB
    37.95 MB
    Page faults:476,880/min
    2,039/min
    I/O
    I/O read transfer:6.26 KB/sec
    1.02 MB/min
    I/O read operations:8/sec
    343/min
    I/O write transfer:960 Bytes/sec
    274.99 KB/min
    I/O write operations:3/sec
    227/min
    I/O other transfer:2.49 KB/sec
    448.09 KB/min
    I/O other operations:32/sec
    1,671/min
    Resource allocations
    Threads:15
    12
    Handles:532
    600
    GUI GDI count:20
    103
    GUI GDI peak:24
    142
    GUI USER count:15
    49
    GUI USER peak:17
    71

    BehaviorsProcess properties

    Integrety level:High
    Platform:64-bit
    Command lines:
    • "C:\Program Files\norton anti-theft\engine\1.10.0.9\nat.exe" /c /a /s usersession
    • "C:\Program Files\norton anti-theft\engine\1.10.0.9\nat.exe" /s "nat" /m "C:\Program Files\norton anti-theft\engine\1.10.0.9\dimaster.dll" /prefetcC:1
    Owner:User
    Windows Service
    Service name:NAT
    Display name:Norton Anti-Theft
    Description:“Norton Anti-Theft”
    Type:Win32OwnProcess
    Parent processes:

    ResourcesThreads

    Averages
     
    ntdll.dll
    Total CPU:0.00238405%
    0.272967%
    Kernel CPU:0.00120798%
    0.107585%
    User CPU:0.00117607%
    0.165382%
    CPU cycles:161,305/sec
    5,741,424/sec
    Memory:1.66 MB
    1.16 MB
    NAT.exe (main module)
    Total CPU:0.00012570%
    Kernel CPU:0.00009074%
    User CPU:0.00003496%
    CPU cycles:8,987/sec
    Memory:228 KB
    wow64.dll
    Total CPU:0.00001789%
    Kernel CPU:0.00001193%
    User CPU:0.00000596%
    CPU cycles:348/sec
    Memory:252 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 100.00%

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Toshiba 100.00%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE