setuphost.exe
by Microsoft
Operating System
Sources: 300M+ executions observed in the wild.
Summary
Windows Setup Host — manages Windows feature updates
setuphost.exe is the 1616th most commonly executed Windows program in EchoTrail's dataset, observed 563 times across enterprise environments. It typically runs from C:\... and it is most often launched by WindowsUpdateBox.exe.
Get this in your tools
The same record for setuphost.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/setuphost.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
1616th
most commonly executed Windows program
563
observed endpoint executions
Behavior
Top Paths
- C:\...100%
Top Hashes (SHA256)
- be04cbe6a367123fc36f675359683b9713f7ff354987ecf28540a780faaa7f0324.8%
- f7ab66ebd23e0d404069a495a5ab0faee11c1a80de790430d714e6483e93b44010.15%
- 5cecd235e4ec288e01e117b689d0a5ffba8a5192d8ed697540b8e94b1675f5fb8.83%
- abf9aeeabb064dc9aa3c063812cfe44b4f16aabb6c7e3494b9721fb65e5a88ee6.44%
- b5bd5557869512f74a92bfc6847e6d27860436714642bf136b47348ef9abd3896.18%
- 3c4a52ef0718c19183daa74ff92f435a3f7b276c1ee63a40e4ee8a9287858a043.88%
- bbbaf512e3d15fa0f87fd9441b97feda958766bc5396725c97e9966bdb6dced73.8%
- 1711ecb52c708589c8af6d32be904cfe1620aef7f6456b31905ba8ef54de70942.74%
- b5e4cf9962c82a6265f8ed9a70c82dcd6265c88bbe823a25121df6ada8494e582.56%
- 1b06913b1a516372f0351885dec53c1acbd4efb4475de62441743971059571bc2.38%
Process Ancestry
Top Grandparents
- wuauclt.exe36.44%
- svchost.exe26.95%
- setup.exe21.19%
- chrome.exe2.71%
- explorer.exe1.86%
- setupplatform.exe0.85%
- WindowsUpdateBox.exe0.85%
- browser_broker.exe0.34%
- runonce.exe0.17%
Top Parents
- WindowsUpdateBox.exe65.82%
- setupplatform.exe14.81%
Top Children
- mighost.exe81.48%
- DismHost.exe15.74%
- wimserv.exe1.22%
- GatherOsState.exe0.85%
- rundll32.exe0.58%
- powershell.exe0.08%
- setup.exe0.01%
- WerFault.exe0.01%
Ask Rocky about setuphost.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for setuphost.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.