FoxitPhantomPDF.exe
by Foxit Software
Productivity
Summary
Foxit PhantomPDF - advanced PDF editor and creator.
FoxitPhantomPDF.exe is the 1216th most commonly executed Windows program in EchoTrail's dataset, observed 1,281 times across enterprise environments. It typically runs from C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF and it is most often launched by OUTLOOK.EXE.
1216th
most commonly executed Windows program
1,281
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF83.45%
- C:\Program Files (x86)\Foxit PhantomPDF16.55%
Top Hashes (SHA256)
- 98406de49a5c6fb073e02273de5e71cf0af8bfa74af56bf50b41210b76be067966.35%
- d9a258d66e8bd9a8f508cb11031860c9cca041596c1f470289d69a6d3617615916.47%
- 802a8ea11928e3cd44068ea792654a0998f76c787e2f542d90e20794085d979b10.69%
- 36bf35ddae57cfeb2f088058f7a077bf3ace3249e5adab7c0b3db970af07f80a5.85%
- f864d3767b42b998535d53fcc14b3318c635f4bdf5ad5f17f4ba51df3cc95e8f0.39%
- 9d816d3a798a73e6bb84abf1965074618f71d054a1e73e1168a1d66c6ba8ca2a0.16%
- 6ffbd50fe73a4ec6b8ba08addbf257848f574aba0fd16d6e2a7ba9416e3db2040.08%
Process Ancestry
Top Grandparents
- explorer.exe54.68%
- userinit.exe22.12%
- svchost.exe12.92%
- cmd.exe3.89%
- OUTLOOK.EXE1.24%
- OfficeC2RClient.exe1.16%
- g2mlauncher.exe0.91%
- WerFault.exe0.66%
- winlogon.exe0.66%
- services.exe0.5%
Top Parents
- OUTLOOK.EXE55.04%
- explorer.exe35.44%
- WINWORD.EXE5.15%
- EXCEL.EXE1.25%
- WinRAR.exe1.25%
- FXC_ProxyProcess.exe0.39%
- MSPUB.EXE0.39%
- POWERPNT.EXE0.39%
- msiexec.exe0.31%
- RuntimeBroker.exe0.16%
Top Children
- splwow64.exe22.74%
- WerFault.exe10.9%
- chrome.exe1.56%
- iexplore.exe0.31%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about FoxitPhantomPDF.exe
Rocky answers questions about FoxitPhantomPDF.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.