AXIOMProcess.exe
Summary
Magnet AXIOM Process — digital forensics evidence processing engine
AXIOMProcess.exe is the 1472nd most commonly executed Windows program in EchoTrail's dataset, observed 761 times across enterprise environments. It typically runs from C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process and it is most often launched by explorer.exe.
Behavior
Top Paths
- C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process100%
Top Hashes (SHA256)
- d230dccb490d00b34c53728e2b3d2098ef9527c413a9671850b408e1a931cad413.25%
- 808ba7d94ec8e7ce78f09cff93c4f470c8c3e07d2414dd6e842b4766abdddf348.2%
- 33fbdf107f35acbfd671f90711cdcb8fb9a0ebc4af4aaea5a0a1e0b1b21507417.1%
- 27a2751108301a65f89d5bb1259bd6b6f7ae5225fef96bc81ba098afdea8a44d6.15%
- ac7755ad4f797fe316771ae5d4f4824f03542588476531763fb9f0df5c42b5416.01%
- b098e41ea3c3ae2a0b8ea2c9bebdf0dce7015e37f6f961bbf7c56f35e6f213155.74%
- 21fbf1af677cc453a9f69ed45ff48665288361f97dca3bde656eea3607a966575.6%
- a8bc7689f6f8c4e0cfd19c2631dc94e199974e97d7f0cadf8f664b885dd870675.19%
- 6e4bf126eae3de89de3aae59c992748b8223281af7a45cabfef03a9510e433764.64%
- 2ce1c7a0e778295050a84bb8201ce45aa8b9d8945b385989760b7a47e78732b94.51%
Process Ancestry
Top Grandparents
- winlogon.exe68.97%
- userinit.exe27.59%
- AXIOMProcess.exe3.45%
Top Parents
- explorer.exe78.13%
- AXIOMExamine.exe16.21%
- cmd.exe1.98%
- wyupdate.exe1.19%
- AXIOMProcess.exe0.4%
Top Children
- ffmpeg.exe52.22%
- adb.exe17.06%
- fastboot.exe3.11%
- heimdall.exe3.11%
- magnet_lglaf.exe3.11%
- mtpwn.exe3.11%
- esentutl.exe0.27%
- wyupdate.exe0.02%
- MagnetAI.exe0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about AXIOMProcess.exe
Rocky answers questions about AXIOMProcess.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.