7zFM.exe
by Igor Pavlov
Application
Summary
7-Zip File Manager
7zFM.exe is the 1574th most commonly executed Windows program in EchoTrail's dataset, observed 608 times across enterprise environments. It typically runs from C:\Program Files\7-Zip and it is most often launched by explorer.exe.
1574th
most commonly executed Windows program
608
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\7-Zip97.22%
- C:\Program Files (x86)\7-Zip2.29%
- C:\...0.49%
Top Hashes (SHA256)
- a1fd2b0a4abd671b7ce903ba5be7cdbc57ec3e3a7a4ac5c05c4ecf250dd3796a70.38%
- 61eb1a1a7543cd12f4fca6aaeb5f63ccdf4dbec4f819cd64d821123d896bbb8910.98%
- 0562bf17f694871bc57d76fd5aa7dedcd1fac40d101fbb924d4b4be9ba35803d6.99%
- e81b44ee7381ae3b630488b6fb7e3d9ffbdd9ac3032181d4ccaaff3409b573164.99%
- 847246b352f341c2acdaaff67794103f9c22b770abd365ea06486043a96109e02%
- e1581a1a15ba8277c7f5f1584d924d676d356450effb88dbb68b642afd53b64b1.16%
- b9e88e0dfd06558f395cc3c809ca55b2a4efefe620808b74779dadc54fcdd2a50.83%
- 018d74ff917692124dee0a8a7e6302aecd219d79b049ad95f2f4eedea41b4a450.5%
- dc4fdcd96efe7b41e123c4cba19059162b08449627d908570b534e7d6ec7bf580.5%
- f9c5b475285e44f975807452d9178d1c6d2c04b4d10fb68809769af9f55273f40.5%
Process Ancestry
Top Grandparents
- userinit.exe55.02%
- explorer.exe30.96%
- svchost.exe4.81%
- KeePass.exe3.14%
- chrome.exe2.3%
- OUTLOOK.EXE1.46%
- RuntimeBroker.exe0.63%
- WerFault.exe0.21%
- winlogon.exe0.21%
Top Parents
- explorer.exe64.81%
- chrome.exe19.97%
- OUTLOOK.EXE9.33%
- RuntimeBroker.exe2.95%
- iexplore.exe0.65%
- OpenWith.exe0.65%
- firefox.exe0.49%
- lync.exe0.33%
- 7zFM.exe0.16%
- bomgar-rep.exe0.16%
Top Children
- notepad.exe30.91%
- Illustrator.exe8.2%
- Photoshop.exe7.26%
- FoxitReader.exe6.94%
- 7zG.exe6.31%
- chrome.exe3.47%
- WINWORD.EXE3.47%
- setup.exe2.84%
- rundll32.exe2.52%
- Acrobat.exe2.21%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about 7zFM.exe
Rocky answers questions about 7zFM.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.