SccmRdpsystem.exe
by Microsoft
Remote Access
Summary
SCCM Remote Desktop System - SCCM remote control session handler.
SccmRdpsystem.exe is the 893rd most commonly executed Windows program in EchoTrail's dataset, observed 2,866 times across enterprise environments. It typically runs from C:\Windows\CCM\RemCtrl and it is most often launched by CmRcService.exe.
893rd
most commonly executed Windows program
2,866
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\CCM\RemCtrl99.83%
- C:\...0.17%
Top Hashes (SHA256)
- 589253927304e74520952a204cf5a3a2874f130e54aa41244213ffa0c670815444.7%
- 4d6917a30852faf2b48226feeb9c34955831b1cccfa8c38a6d4a6554cc828ae621.31%
- 4e21a029625ffe925774511ef3f843f15a8d47b5c28ff3000ea49642b6b4f32917.55%
- a849acefc0147a51c6a36178de6ed610b6d17ebfe90c73018e02b88beae2233316.22%
- 465348898d0df03f964cd46d781e873bd659f003eefb3d8a693e4deb2c1e43bf0.11%
- 467f2953c4de5858bb628341e7c4ad1ecbd085c5b037f061b3ab696f09282a580.11%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- CmRcService.exe99.58%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about SccmRdpsystem.exe
Rocky answers questions about SccmRdpsystem.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.