ccmsetup.exe
Summary
SCCM Client Setup - installs and configures the Configuration Manager (SCCM/MECM) client agent on endpoints.
ccmsetup.exe is the 241st most commonly executed Windows program in EchoTrail's dataset, observed 55,901 times across enterprise environments. It typically runs from C:\Windows\ccmsetup\cache and it is most often launched by CcmEval.exe.
Behavior
Top Paths
- C:\Windows\ccmsetup\cache99.04%
- C:\Windows\ccmsetup0.82%
- C:\Windows\ccmcache\10.05%
- C:\Windows\SoftwareDistribution\Download\Install0.04%
- C:\...0.03%
- C:\Windows\ccmsetup\Temp0.01%
Top Hashes (SHA256)
- 04d618d3d08f3054fb9b7f94d901e2b0dcbaebffa83f152451f95809f5b9750c27.13%
- 0589091242c6ab1cbb5982814dad36700ffed3874b91c0d5090792a6ce9b270f22.45%
- 9d66107645aaf93473d7bdc1988a2eb83da5e2e86b7b230c89d6fcc6f347abef18.63%
- 96fd1d60abb3c24406bcab4b901ff86a54ceca70fcd53ff1ebdd2fecde52fb8713.76%
- e78714d3e33fb5e99c0ea3a2d1c2f1e2a5de5cf434b42268e651efc27cb3b6346.57%
- 0fab32162f5246196079e6ca612e0f51a773510cb1eef83de838dcdac41943c85.16%
- e3ba63acafe02baa2b234a612aeded35ffb129944c6ee4e2e3e4d2ea1ea216992.99%
- 036686452d90cac56e9a1cf1012a3e995b36df1e73e53f24e452285833568ced2.21%
- 9b0842fee882a0081b4f442f73c9648ea0497e3f1e82676f9e28465f9d7e18870.41%
- 65640fa021b225e9c2bbd4dc1fa49d2df594652717ac723ea15d8366533063f10.35%
Process Ancestry
Top Grandparents
- svchost.exe97.55%
- taskeng.exe1.72%
- CcmExec.exe0.42%
- wininit.exe0.23%
- explorer.exe0.04%
- userinit.exe0.02%
- services.exe0.01%
Top Parents
- CcmEval.exe98.88%
- CcmExec.exe0.35%
- services.exe0.32%
- wuauclt.exe0.04%
- taskeng.exe0.03%
- cmd.exe0.02%
- svchost.exe0.02%
- explorer.exe0.01%
Top Children
- vcredist_x64.exe32.37%
- vcredist_x86.exe17.99%
- Dism.exe10.07%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about ccmsetup.exe
Rocky answers questions about ccmsetup.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.