kpatch.exe
by Various
Endpoint Management
Summary
K Patch - patching utility for KACE or Kaspersky.
kpatch.exe is the 1013th most commonly executed Windows program in EchoTrail's dataset, observed 1,995 times across enterprise environments. It typically runs from C:\Program Files (x86)\Quest\KACE and it is most often launched by KPlugins.exe.
1013th
most commonly executed Windows program
1,995
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Quest\KACE80.55%
- C:\Program Files (x86)\Dell\KACE19.45%
Top Hashes (SHA256)
- 1518ec8c779ec5945c688e81ae60a2e2352a328c74c797b0ebaf4339157f4d0280.55%
- c326f14c02cf717cd80e0f3b67bf910d26abc325a5b71cebffe132183910cc8418.25%
- c77c85d84d1fb2ff12fc93b583773d6690324aba576e1151c0566011ef64f2b41.2%
Process Ancestry
Top Grandparents
- powershell.exe100%
Top Parents
- KPlugins.exe100%
Top Children
- conhost.exe33.59%
- cabarc.exe32.64%
- cmd.exe32.57%
- LM.Detection_x64.exe0.91%
- cscript.exe0.17%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about kpatch.exe
Rocky answers questions about kpatch.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.