wyupdate.exe
by wyBuild
Installer
Summary
WyUpdate - update utility for .NET-based software.
wyupdate.exe is the 1099th most commonly executed Windows program in EchoTrail's dataset, observed 1,646 times across enterprise environments. It typically runs from C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process and it is most often launched by AXIOMProcess.exe.
1099th
most commonly executed Windows program
1,646
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process71.26%
- C:\Program Files (x86)\NOC Logger 202025.52%
- C:\Program Files (x86)\Magnet Acquire2.37%
- C:\Program Files (x86)\NTHA0.85%
Top Hashes (SHA256)
- 2c00cba295b785774418a95004728a8766df8a89edd17dfa0b949d8b3b9ce29498.76%
- aa71c676499260ed07b6b0e54aff155ad8e46b49aee933e90b5ff4dd098aadb61.24%
Process Ancestry
Top Grandparents
- explorer.exe93.94%
- wyupdate.exe6.06%
Top Parents
- AXIOMProcess.exe54.01%
- AXIOMExamine.exe16.65%
- wyupdate.exe0.3%
Top Children
- cmd.exe55.41%
- AXIOMProcess.exe12.16%
- wyupdate.exe6.76%
- conhost.exe2.7%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about wyupdate.exe
Rocky answers questions about wyupdate.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.