protectionutilsurrogate.exe
Symantec AntiVirus by Symantec Corporation (Signed)
| Version: | 11.0.6200.513 |
| MD5: | f134e353039c77be2f699ac52562b1be |
| SHA1: | 83b72707a3841faa5a41efac7759936ad960cc6d |
| SHA256: | 8606fc54eafadd66816db790df0f85c8f0dcf3844ceb20a8129d0c4e19de3a26 |
Overview
protectionutilsurrogate.exe executes as a process with the local user's privileges typically within the context of its parent
svchost.exe (Host Process for Windows Services by Microsoft Corporation). This is typically installed with the program Symantec Endpoint Protection published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).
Details
| File name: | protectionutilsurrogate.exe |
| Publisher: | Symantec Corporation |
| Product name: | Symantec AntiVirus |
| Typical file path: | C:\Program Files\symantec\symantec endpoint protection\protectionutilsurrogate.exe |
| File version: | 11.0.6200.513 |
| Size: | 49.36 KB (50,544 bytes) |
| Build date: | 11/8/2010 8:24 PM |
| Certificate |
| Issued to: | Symantec Corporation |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, October 30, 2007 |
| Expiration date: | Wednesday, November 24, 2010 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“Customers have embraced Symantec Endpoint Protection 12 faster than any previous release. In Symantec Endpoint Protection 12.1.2, we've worked hard to further the Unrivaled Security, Blazing Performance and support for Virtual Environments. By layering technologies like Insight and SONAR, antivirus scans are reduced and maximum performance is achieved while stopping cyber-criminals and even zero-day threats in their tracks. Endpoint pro...”
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00022896% | |
| Kernel CPU: | 0.00013160% | |
| User CPU: | 0.00009737% | |
| Kernel CPU time: | 18,642 ms/min | |
| CPU cycles: | 2,337,821/sec | |
| Context switches: | 30/sec | |
| Memory |
| Private memory: | 4.09 MB | |
| Private (maximum): | 6.79 MB | |
| Private (minimum): | 4.09 MB | |
| Non-paged memory: | 4.09 MB | |
| Virtual memory: | 97.57 MB | |
| Virtual memory (peak): | 101.57 MB | |
| Working set: | 4.4 MB | |
| Working set (peak): | 13.05 MB | |
| Page faults: | 331,596/min | |
| I/O |
| I/O read transfer: | 19.3 KB/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 13 Bytes/sec | |
| I/O other operations: | 365/sec | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 319 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 10 | |
| GUI USER count: | 6 | |
| GUI USER peak: | 7 | |
Process properties
Threads
Averages
| wow64.dll (Win32 Emulation on NT64 by Microsoft) |
| Total CPU: | 0.02408814% | |
| Kernel CPU: | 0.01412813% | |
| User CPU: | 0.00996001% | |
| CPU cycles: | 1,970,341/sec | |
| Context switches: | 4/sec | |
| Memory: | 252 KB | |
| ProtectionUtilSurrogate.exe (main module) |
| Total CPU: | 0.00003836% | |
| Kernel CPU: | 0.00001279% | |
| User CPU: | 0.00002557% | |
| CPU cycles: | 107,438/sec | |
| Memory: | 44 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
25.00% |
|
| Windows 7 Enterprise |
25.00% |
|
| Windows 7 Home Premium |
25.00% |
|
| Windows Vista Ultimate |
25.00% |
|
Distribution by country
United States installs about 100.00% of Symantec AntiVirus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
40.00% |
|
| Dell |
40.00% |
|
| Acer |
20.00% |
|
