ssoncom.exe
by Citrix
Remote Access
Summary
Citrix Single Sign-On COM component
ssoncom.exe is the 1402nd most commonly executed Windows program in EchoTrail's dataset, observed 853 times across enterprise environments. It typically runs from C:\Program Files (x86)\Citrix\ICA Client\x64 and it is most often launched by svchost.exe.
1402nd
most commonly executed Windows program
853
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Citrix\ICA Client\x64100%
Top Hashes (SHA256)
- 00a9600d58c1008d903c4d9faee7e39d018321ed1ca714a83be7e27d7c8a093335.76%
- 67ff2c225b949d7a360bf8bbb6536a2ce3deccc7724ca3cbca8c645d43af4dea35.4%
- 319a9ec3ba6619d435bad34ac3fb3328e9a5bd9131c30514d695d977c14babe514.42%
- f5daff15ac668bb15789136349badc9218ab23ebc0e60c646e585660099639a85.04%
- 18ce1cdc80a5cbe4e8958bfa9bfdc5d27949642921ae7630b0de0fb5538953414.92%
- f935211ebf59b7c98cf4f25f2796d0ed3c43001d5fdc257ac8bebc1d5c7b04752.23%
- 10e561ad64bb28f826774fc3eea90db21d6824757c719b800b4521974600137e0.94%
- d74d240cbcedf6a8dbe937d22ed9600ac9cc3d2da9abdf11c536b2561c6b35050.7%
- 5169c680fd32617d2700da41f2c4f6ff0210a9dbf8bf89073047d7bd37090cf90.35%
- e4525b4f05e78d491d64ef89650b665bc36a471df2227538f6ad14da1e3d7e8f0.12%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe100%
Top Children
- ssonsvr.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about ssoncom.exe
Rocky answers questions about ssoncom.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.