Evernote.exe
by Evernote
Productivity
Summary
Evernote note-taking application
Evernote.exe is the 2287th most commonly executed Windows program in EchoTrail's dataset, observed 216 times across enterprise environments. It typically runs from C:\Program Files (x86)\Evernote\Evernote and it is most often launched by explorer.exe.
2287th
most commonly executed Windows program
216
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\Evernote\Evernote93.98%
- C:\Users\...6.02%
Top Hashes (SHA256)
- 24398b92e235def8cafb34f11c511effc444d8a4f260cf3198da77a98e6c4ec741.2%
- b0be5e9216bfd59cd4a5dedf635302e93268e64adc92846b9359d2a321aad4c820.83%
- 5f2bc8f943fad3a073db19b332140cc7a2b1dfae66c770c812b495a5ffc1685219.44%
- bf100e68e8b983cf7b7b3bc33c149736d7e4b2de7431469de7fd14f4f43a0c6e12.04%
- 13ac51024a59f4071a49abe8776c2c6b55490fd23312245e047b7f176eb9c10d6.02%
- cb92683e50e8abfa8615ab3000e501a8ea2a9cf68c097c838f0094b5aecd78c50.46%
Process Ancestry
Top Grandparents
- userinit.exe91.46%
- Evernote.exe3.66%
- OneDrive.exe2.44%
- chrome.exe1.22%
- winlogon.exe1.22%
Top Parents
- explorer.exe93.98%
- Evernote.exe3.7%
Top Children
- EvernoteSubprocess.exe82.22%
- EvernoteTray.exe9.12%
- EvernoteClipper.exe6.08%
- Evernote.exe0.45%
- cmd.exe0.23%
- powershell.exe0.17%
- splwow64.exe0.11%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about Evernote.exe
Rocky answers questions about Evernote.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.