What’s c2wtshost.exe? Is it safe or a virus?

The file c2wtshost.exe is associated with the Claims to Windows Token Service (C2WTS) in Microsoft Windows environments. This service is primarily utilized in SharePoint and SQL Server Reporting Services (SSRS) configurations to facilitate the conversion of claims-based identities into Windows tokens. This conversion is essential for authenticating and authorizing user access to resources that rely on Windows authentication, especially when integrating with external systems that do not natively support claims-based authentication.

For example, in SharePoint environments configured to use claims-based authentication, services like Excel Services or PerformancePoint Services may need to access external data sources that require Windows authentication. In such cases, C2WTS facilitates the necessary identity translation to allow seamless access to these resources.

It's important to note that the use of C2WTS is typically limited to specific enterprise scenarios involving complex authentication requirements. In standard home or small business Windows setups, encountering this service is uncommon. Therefore if you see this .exe on a home PC it may not be necessary and can probably be disabled or quarantined by SpyShelter.

Researched by Carl @ SpyShelter Labs