egui.exe
by ESET
Endpoint Security
Summary
ESET NOD32 GUI - user interface for ESET endpoint security products.
egui.exe is the 713th most commonly executed Windows program in EchoTrail's dataset, observed 5,090 times across enterprise environments. It typically runs from C:\Program Files\ESET\ESET Endpoint Antivirus and it is most often launched by ekrn.exe.
713th
most commonly executed Windows program
5,090
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\ESET\ESET Endpoint Antivirus82.14%
- C:\Program Files\ESET\ESET Endpoint Security15.64%
- C:\Program Files\ESET\ESET File Security1.18%
- C:\Program Files\ESET\ESET Security1.04%
Top Hashes (SHA256)
- d0371b3cb1697469b0b385e47c1122adb204afdf740dd11c386f08f1e515975849.04%
- b931e171f098119c0eeb28c0172aea5e5e236f01e41f75f20c4526a99e97040846.44%
- 46795130bfb7b249e2a52674821069c60e2ac0e19c5386fe1fb278cea2d5c08a1.55%
- c4a9685b4c0b07df10a2b92ecbe7543542caf26e6a9e8e833237c3d38bbe4cbd1.2%
- af5c9ece94ddfcd418820a9d677bca5939b0dc64e4135595b19d29b4837b0bd81.18%
- 55c152eb5826852c16f9c66893406d1d802742cf5acf0a497c23834b895351cf0.59%
Process Ancestry
Top Grandparents
- services.exe99.82%
- userinit.exe0.18%
Top Parents
- ekrn.exe99.84%
- explorer.exe0.16%
Top Children
- chrome.exe8.7%
- firefox.exe1.45%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about egui.exe
Rocky answers questions about egui.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.