CptHost.exe
by Various
Application Support
Sources: 300M+ executions observed in the wild.
Summary
CPT Host - control panel or platform host process.
CptHost.exe is the 661st most commonly executed Windows program in EchoTrail's dataset, observed 6,336 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by Zoom.exe.
Get this in your tools
The same record for cpthost.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/cpthost.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
661st
most commonly executed Windows program
6,336
observed endpoint executions
Behavior
Top Paths
- C:\Users\...99.04%
- C:\Program Files\Zoom\bin0.6%
- C:\Program Files (x86)\Zoom\bin0.36%
Top Hashes (SHA256)
- 785a8e1f6e82e1daa5b9e5e99ca81efdd9cfb7ae4d96b98c326a3bfa123b15eb17.36%
- 41630a9dcb3e60658dbd3263bcce72828c42e2c7c244c3c2553213f4d5ac608810.51%
- 0223b0312d3a663378691bd0cf71a0b95030cfcc26cd57defd1dd6cf6be612c59.03%
- 1dbdb4392d0b423f072eb8d2c62f87fffb5f1389ddc0be7e704263b88a18c71a7.96%
- 82588a62ebc42b18a4c59ac4c2641dce30c04dcbd90863f1a0f5a9d13a1592127.54%
- e1808a34d57ff8c3a529b5d73afc3686d14c80696af16ebfd862fb6d7ccff63a5.3%
- 7b72be8da1c6208f9d3c011f59df8789823f54f50761f53d2a79ca639d2039f65.29%
- 3854f8aae93470f3890d4ad38316c3e1442d273c16b50192788bcf8a284aa0c13.19%
- fdf91b877de9e84fdaa9a39019e483c69e244af3a2d2d2fb063e96ccb6eec8f82.08%
- 1757d18f52f44e612f94b778e6a5d10f69e110f5666ba5681ef3c2287e73bccd1.84%
Process Ancestry
Top Grandparents
- Zoom.exe98.79%
Top Parents
- Zoom.exe60.45%
- RingCentralMeetings.exe39.52%
- TrustedInstaller.exe0.02%
Ask Rocky about CptHost.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for CptHost.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.