c2wtshost.exe
Microsoft Windows Operating System by Microsoft Corporation (Signed)
| Version: | 6.1.7600.16394 |
| MD5: | dfc3095a2149e457b509e9e139a1cdc9 |
| SHA1: | 9bb644415f3a68c6e0a9f2199d61c60515bede78 |
| SHA256: | 6c4c48e48b8056d8711def0eb28a9dc566f63da7fae60d2773d0d558a1a559c0 |
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Overview
c2wtshost.exe runs as a service under the name Claims to Windows Token Service (c2wts) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Microsoft Corporation.
Details
| File name: | c2wtshost.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Microsoft (R) Windows (R) Operating System |
| Typical file path: | C:\Program Files\windows identity foundation\v3.5\c2wtshost.exe |
| File version: | 6.1.7600.16394 |
| Size: | 15.4 KB (15,768 bytes) |
| Certificate |
| Issued to: | Microsoft Corporation |
| Authority (CA): | Microsoft Corporation |
| Effective date: | Tuesday, July 14, 2009 |
| Expiration date: | Thursday, October 14, 2010 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'c2wts' (Claims to Windows Token Service)
- c2wts
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00003879% | |
| Kernel CPU: | 0.00003503% | |
| User CPU: | 0.00000375% | |
| Kernel CPU time: | 140 ms/min | |
| Memory |
| Private memory: | 27.19 MB | |
| Private (maximum): | 25.03 MB | |
| Private (minimum): | 8.65 MB | |
| Non-paged memory: | 27.19 MB | |
| Virtual memory: | 538.72 MB | |
| Virtual memory (peak): | 545.19 MB | |
| Working set: | 11.99 MB | |
| Working set (peak): | 25.11 MB | |
| Page faults: | 7,536/min | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 200 | |
Process properties
| Integrety level: | Undefined |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\windows identity foundation\v3.5\c2wtshost.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | c2wts |
| Display name: | Claims to Windows Token Service |
| Description: | “Service to convert claims based identities to windows identities” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| c2wtshost.exe (main module) |
| Total CPU: | 0.00009368% | |
| Kernel CPU: | 0.00009368% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,643/sec | |
| Memory: | 32 KB | |
| clr.dll |
| Total CPU: | 0.00006245% | |
| Kernel CPU: | 0.00006245% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 969/sec | |
| Memory: | 9.37 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 Pro |
22.22% |
|
| Windows 7 Ultimate |
22.22% |
|
| Windows 8 Pro |
22.22% |
|
| Windows 8.1 |
11.11% |
|
| Windows 7 Professional |
11.11% |
|
| Windows 7 Home Premium |
11.11% |
|
Distribution by country
United States installs about 33.33% of Microsoft (R) Windows (R) Operating System.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
28.57% |
|
| ASUS |
28.57% |
|
| Hewlett-Packard |
28.57% |
|
| Samsung |
14.29% |
|
