EchoTrail Insights

Windows Process Directory

Free reference pages for a subset of the data, over 2,500 Windows executables: execution rank, common paths and hashes, process ancestry, and security guidance, built from over 300 million real process executions, growing every day. No account needed. The full dataset, over 40,000 executables, is available by API.

Most-searched processes

svchost.exe powershell.exe rundll32.exe wmiprvse.exe conhost.exe regsvr32.exe mshta.exe certutil.exe wscript.exe lsass.exe explorer.exe cmd.exe msiexec.exe schtasks.exe dllhost.exe werfault.exe

Get this in your tools

Every page here is one API call away, by REST or as an MCP tool. Free key, no card.

Get a free key

curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/svchost.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

#

A

C

D

E

F

G

H

I

J

L

M

N

O

P

Q

R

S

T

U

V

W

X

Y

Z

These pages are a free subset of the data; the dataset holds behavior records for many more executables, all reachable by API. Ask Rocky about anything not listed, or look it up by API: a miss is queued, and new pages are added as the data grows.