getmac.exe
Summary
Displays NIC MAC information
getmac.exe is the 3300th most commonly executed Windows program in EchoTrail's dataset, observed 69 times across enterprise environments. It typically runs from C:\Windows\SysWOW64 and it is most often launched by powershell.exe.
3300th
most commonly executed Windows program
69
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\SysWOW6479.71%
- C:\Windows\System3220.29%
Top Hashes (SHA256)
- 332b44bdcac45ec9845ecba76d1d41fe95c12a3f4224012dfc2aa5542368c35659.02%
- ad0a4e5e7587a6493dd46029b0f7c0990b512e80c08b5d6392938fe0215b89ba8.2%
- 829af8e562511e1d75f8f88ba1a8624f600f65ee26e91023c05704289f520e4c6.56%
- 83a26a068e174e389b9793e93e65b802b6d923cc70ee8afb06b49c885491b4626.56%
- 94256542e235681ba64a20bc50910dd745d52347a89d36be2dd4c1465901c52b6.56%
- a76002e58180cade8dd1e0d1f443b5cd6411f6e77554f961a3036f2890e7485e6.56%
- 910f1dc5c5b9600e75d99e352d9b4acde826b9e7bef43993ef2ff956675926773.28%
- 10a496c92dfdce13697e15c47e2a9ac0c3f04121dfbefdbf7f5067292446e1861.64%
- 3c1e23f407f14c000705556e9051cd315466c0b747dcfee5c1596dda459da14a1.64%
Process Ancestry
Top Grandparents
- jumpcloud-agent.exe77.36%
- explorer.exe3.77%
- svchost.exe3.77%
- Code.exe1.89%
- Unity.exe1.89%
Top Parents
- powershell.exe59.42%
- cmd.exe8.7%
- devenv.exe4.35%
- VSIXAutoUpdate.exe4.35%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about getmac.exe
Rocky answers questions about getmac.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.