download.exe
Summary
Firefox
download.exe is the 3974th most commonly executed Windows program in EchoTrail's dataset, observed 36 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by setup-stub.exe.
3974th
most commonly executed Windows program
36
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Users\...100%
Top Hashes (SHA256)
- c7625a033ac40cd96210e68ff02e114a5fdd3b08de345f98ea8f221c4ebc02c220%
- 7e6b55819c99bf6ed1421302695d745d0e28ef9a87e37c6c98edb558e859a9bd11.43%
- 509b75c6fcf4a201b13c2ca6f84fcdeaf0ea6a5ba3cca7b9039d2da8a41740de8.57%
- 6fda0ca5aeca95b72df87e46fcf8fc97c169718ea3490f9533993fa8d38af76d8.57%
- ad4e276517874b1bf030d0457c8c7be835f0d3ef5e6c57db885f9805ae8d05058.57%
- 7d356736ac94242d9417318dcc0bcc0a0a4fe3c0504da46981a2c7791b6522885.71%
- 0448ada5ed1edbe968eb95370e841c7f1a9b5887b258787a531138eaba66adc82.86%
- 0eac6b401d361149957b1d58748b5ee52a68ef0800ef45a018a9db50caa810162.86%
- 2017221c33db34153ebe4c4ecb565bf8764c6937c8090218c016fcdd42fa16642.86%
- 30ce0aa99c8d01e819aeb66e57f9074bcbc5a010a961560fafc87a631251454d2.86%
Process Ancestry
Top Grandparents
- setup-stub.exe93.94%
Top Parents
- setup-stub.exe100%
Top Children
- setup.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about download.exe
Rocky answers questions about download.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.