KeePass.exe
by KeePass
Security Tool
Summary
KeePass - open-source local password manager with encrypted database storage.
KeePass.exe is the 522nd most commonly executed Windows program in EchoTrail's dataset, observed 10,588 times across enterprise environments. It typically runs from C:\Program Files (x86)\KeePass Password Safe 2 and it is most often launched by explorer.exe.
522nd
most commonly executed Windows program
10,588
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\KeePass Password Safe 296.94%
- C:\Program Files\KeePass Password Safe 22.36%
- C:\Program Files (x86)\KeePass Password Safe0.68%
- C:\...0.01%
- C:\Users\...0.01%
Top Hashes (SHA256)
- ad0f513e6fecb0b82d3416b31e3727c834c1c0f5f70342ce86dd310da6f8bca932.68%
- 58f6fa75fbc510394342ea7c5f7241337f7ae51c422644fe9e9969f86ad8e46912.97%
- af095fca5a84cec9fb78c016cb68b657c927160351a7b7fc97cb8bd84fee1e6612.33%
- a6e929cf62d9ce3a7e1909b64829a678c60bc94fad4fdaa0178d28fc932f722b9.81%
- 0cdc9ba56e024a8a805fce34412aac0bac0b773a3b312b505cab550e2f0657798.41%
- 3fdb6303a4353a5fd2a2a5fe702b421ee4d2fd881feee8d685fea82e94eb4f4c6.69%
- cabc3b4b3c6d435a02db6c3ca639d2136945cb8460a657c299893b6363e8fa344.68%
- c7a035def233670f7a04d04ea5fb3db20263ae3257bb85479a6cc2f5309b3a8d3.8%
- a76fc4dfb1e9bfe0b920c78e36c1e77d4aa2224d37a26b26ad843d60949d22143.77%
- cdc5d044b0e5f877ee60401107955d5695f40c37a6eae79a42c2b725171a82551.21%
Process Ancestry
Top Grandparents
- explorer.exe50.56%
- userinit.exe48.4%
- svchost.exe0.16%
- winlogon.exe0.16%
- KeePass.exe0.12%
- OneDrive.exe0.06%
- powershell.exe0.06%
- WerFault.exe0.04%
- updater.exe0.03%
Top Parents
- explorer.exe52.03%
- runonce.exe46.42%
- cmd.exe0.79%
- chrome.exe0.23%
- RuntimeBroker.exe0.12%
- firefox.exe0.1%
- KeePass.exe0.05%
- OneDrive.exe0.02%
- OUTLOOK.EXE0.01%
Top Children
- chrome.exe82.93%
- firefox.exe16.34%
- msedge.exe0.39%
- iexplore.exe0.28%
- KeePass.exe0.03%
- csc.exe0.01%
- rundll32.exe0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about KeePass.exe
Rocky answers questions about KeePass.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.