Should I block it?

No, this file is 100% safe to run.

Additional versions

104.0.19.5	25.00%
104.0.13.2	25.00%
103.5.4.3	25.00%
103.0.11.4	25.00%

Relationships

PE file structure

Show functions

Import table

kernel32.dll

TerminateProcess, GetCurrentProcess, GetProcAddress, FreeLibrary, InterlockedIncrement, InterlockedDecrement, LoadLibraryExA, lstrcatA, Sleep, GetFileAttributesA, lstrlenA, lstrcpynA, GetShortPathNameA, GetVersionExA, GetLastError, InitializeCriticalSection, DeleteCriticalSection, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetModuleHandleA, ExitProcess, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetSystemTimeAsFileTime, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, SizeofResource, LockResource, LoadResource, FindResourceA, FindResourceExA, WideCharToMultiByte, LoadLibraryA, GetSystemDirectoryA, RaiseException, LocalAlloc, LeaveCriticalSection, EnterCriticalSection

msvcp71.dll

DllMain

msvcr71.dll

DllMain

ole32.dll

CoUninitialize, CoInitialize

shlwapi.dll

PathAddBackslashA, PathAppendA

user32.dll

LoadStringA, wsprintfA, GetDesktopWindow, PostMessageA, CharUpperBuffA, RegisterClassExA, SetWindowLongA, PostQuitMessage, GetWindowLongA, DefWindowProcA, CreateWindowExA, LoadCursorA, ShowWindow, UpdateWindow

ccApp.exe

Client and Host Security Platform by Symantec Corporation (Signed)

Remove ccApp.exe

Version:	104.0.13.2
MD5:	ae0f500ea5e01afef0bb9051969804b2
SHA1:	3d30e6408fdf8c90fb34f8fe9fc97dc5680ee185
SHA256:	758905f49287b1e96327c1b26c8660bfe645a354b07fc4c8ea31ce98e1e67109

Overview

ccapp.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges). It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	ccapp.exe
Publisher:	Symantec Corporation
Product name:	Client and Host Security Platform
Description:	Symantec User Session
Typical file path:	C:\Program Files\common files\symantec shared\ccapp.exe
File version:	104.0.13.2
Size:	51.6 KB (52,840 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Monday, November 8, 2004
Expiration date:	Monday, November 21, 2005
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'ccApp' → "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00016268%	0.028634%
Kernel CPU:	0.00013376%	0.013761%
User CPU:	0.00002893%	0.014873%
Kernel CPU time:	578,125 ms/min	100,923,805ms/min
Context switches:	13/sec	284/sec
Memory
Private memory:	4.41 MB	21.59 MB
Private (maximum):	7.27 MB
Private (minimum):	6.88 MB
Non-paged memory:	4.41 MB	21.59 MB
Virtual memory:	35 MB	140.96 MB
Virtual memory (peak):	37.2 MB	169.69 MB
Working set:	7.23 MB	18.61 MB
Working set (peak):	7.28 MB	37.95 MB
Resource allocations
Threads:	9	12
Handles:	265	600
GUI GDI count:	8	103
GUI USER count:	10	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\common files\symantec shared\ccapp.exe"
Owner:	SYSTEM
Parent process:	Explorer.EXE (by Microsoft)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	100.00%

Distribution by country

Turkey installs about 25.00% of Client and Host Security Platform.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	66.67%
Hewlett-Packard	33.33%

Remove Adware and Spyware Programs, FREE Download!