fsquirt.exe
by Microsoft
Operating System
Summary
Windows Bluetooth File Transfer Wizard - sends and receives files via Bluetooth.
fsquirt.exe is the 1226th most commonly executed Windows program in EchoTrail's dataset, observed 1,238 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by explorer.exe.
1226th
most commonly executed Windows program
1,238
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- dad2f5414936508fb93fbd2688228f8c316787c28946a40b8379caf97092db5132.1%
- 39d325a03591bc8e67f8a333e0d2f624c646a57da48f65313505daf2bf35d63b25.62%
- 6224e08c0d005dcafa87763eda77cd85e851703e49527fb26713b4eb895502b56.08%
- e4a5748d1dbad3fb14433a76476e560d3acf47c718884b3bfe5e6858510982546.08%
- dd8469e04774826c2f789dc36abd0ebae1dcb94017c31c81b3b64a030ada36f35.91%
- 31c65bf5e16ad128b18326b2a7753072477c06a4eb668a2e0a7643650d8711395.17%
- b088a402467d54206254050a5d754f8b6313a670b350de8f28cab416095c894f4.76%
- 44bab285f7ccdbebacd13ba2b6c007e11186ba6579519dd4eb6811d7a6bcf1984.19%
- 4c99db5c45b7f0e03744c2e6225d207cb697619f4d138f200083544577b283404.02%
- e967007da2930d50deeaf7ca9595485701b11ee9aad31cc9c4a3116791055bd62.63%
Process Ancestry
Top Grandparents
- explorer.exe52.96%
- userinit.exe46.82%
- WerFault.exe0.11%
Top Parents
- explorer.exe56.46%
- rundll32.exe43.46%
- sihost.exe0.08%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about fsquirt.exe
Rocky answers questions about fsquirt.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.