unpack200.exe
by Oracle
Runtime
Summary
Java Unpack200 - decompresses Java Pack200 compressed JAR files.
unpack200.exe is the 1108th most commonly executed Windows program in EchoTrail's dataset, observed 1,611 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by installer.exe.
1108th
most commonly executed Windows program
1,611
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Users\...16.7%
- C:\Program Files (x86)\Java\jre1.8.0_171\bin11.17%
- C:\Program Files\Java\jre1.8.0_171\bin10.86%
- C:\Program Files (x86)\Java\jre1.8.0_161\bin9.56%
- C:\Program Files\Java\jre1.8.0_161\bin7.14%
- C:\...4.84%
- C:\Program Files (x86)\Java\jre1.8.0_191\bin4.78%
- C:\Program Files (x86)\Java\jre1.8.0_211\bin4.78%
- C:\Program Files\Java\jre1.8.0_191\bin3.91%
- C:\Program Files\Java\jre1.8.0_211\bin3.48%
Top Hashes (SHA256)
- 97549869ef43070189d11ad1b4cfea9263ed4e5d1de8bf708b4d77a3001d840720.17%
- c230a9e349135c2fbf12bf2fd7b5561e002499beaa7cd6f484159e249c9f0e9911.52%
- 6d20350bffb47ac84626095b8bab40590f595d6e4afc7ac416d36621ad0e4e6411.19%
- f4a173a12fa609600dd8231b1ba25e7c00e2dc84f5f2a111ed1b79d9d8f46fe99.79%
- d9c480c691531e9aaa4ec469328dea6b51bbfa8026294cf171c07cdcfd8ed9857.19%
- dbec210d8cb3da15bd62089ce7fc744adaba777c72c6fc130658f0823d001f3b4.66%
- 28134850f87cbde65cb912b592e556780f76fca3daf1427e3e2f1919b8ef0d0e4.19%
- 49d40fe080862e656f7bb150152897db728f222679bea0c0de58be96705662194.19%
- 0b5bed11988b8b886683b6c6b738658ef2e7d90b2c741ca1d9a53f201164e9a73.73%
- 2f79529c927464d6320892bfb75f880c5ad5ecdded7dc9717bf75ced89d111652.8%
Process Ancestry
Top Grandparents
- msiexec.exe96.44%
- chrome.exe1.33%
- explorer.exe1.33%
Top Parents
- installer.exe74.8%
- msiexec.exe1.86%
- launcher.exe1.12%
- javaw.exe0.68%
- cmd.exe0.06%
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about unpack200.exe
Rocky answers questions about unpack200.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.