Greenshot.exe
by Greenshot
Productivity
Summary
Greenshot open-source screenshot tool
Greenshot.exe is the 1725th most commonly executed Windows program in EchoTrail's dataset, observed 467 times across enterprise environments. It typically runs from C:\Program Files\Greenshot and it is most often launched by explorer.exe.
1725th
most commonly executed Windows program
467
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files\Greenshot100%
Top Hashes (SHA256)
- fdc3900da9cf5b4b7f4b461eb54f2f7abf2af104de8bfdd0b7f6a46f092f9cc674.95%
- 094c9943e9ddec778b1a3f69e26abfb5425cf07867f50174923c8b4e5c077b4c25.05%
Process Ancestry
Top Grandparents
- userinit.exe98.88%
- winlogon.exe0.28%
Top Parents
- explorer.exe99.14%
Top Children
- GreenshotOCRCommand.exe97.95%
- explorer.exe1.14%
- mspaint.exe0.91%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about Greenshot.exe
Rocky answers questions about Greenshot.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.