EVSELF~1.EXE
by Various
Summary
Event Self utility (8.3 truncated filename) - truncated name for an event or self-monitoring process.
EVSELF~1.EXE is the 183rd most commonly executed Windows program in EchoTrail's dataset, observed 84,951 times across enterprise environments. It typically runs from C:\....
183rd
most commonly executed Windows program
84,951
observed executions
medium
statistical confidence
Behavior
Top Paths
- C:\...100%
Top Hashes (SHA256)
- 827c1164088155121318d961539a24dc59059a7ad3d96fa83c1008d69ff178f5100%
Process Ancestry
Top Grandparents
- services.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about EVSELF~1.EXE
Rocky answers questions about EVSELF~1.EXE grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.