notepad++.exe
Summary
Notepad++ - open-source advanced text editor with syntax highlighting and plugin support.
notepad++.exe is the 774th most commonly executed Windows program in EchoTrail's dataset, observed 4,177 times across enterprise environments. It typically runs from C:\Program Files (x86)\Notepad++ and it is most often launched by explorer.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Notepad++58.07%
- C:\Program Files\Notepad++40.62%
- C:\...1.29%
- C:\Users\...0.02%
Top Hashes (SHA256)
- 02f2cee4118a8f8d732d736e1758a38abdceea6470ba63ea224ae56b27e4983c7.65%
- eecb0830e714c5eecbb92093f34695c5780629c9e868a988bb55b28a6fec12827.3%
- cf45dc3efb09309f4a2f7275a8d011a0d0cf65b3dd69a867a708a78a1076bbb76.39%
- cfe60c8f1ee2e24e85c0db158389661c607cd6e2ed4aa65513d677afae44c43a6.27%
- 2b50feddac0e4ad2fc3fe8626f717027116db782fc7826392cbd0e1951850fde6.06%
- 44e3b542da9d6684561deb186752fd13caa0f05099ac43d5cc5f72f6229801615.36%
- bef8e0c7ec65242c0555967501fd2f76bc1179af25c207d16ad6bd70719941ba5.21%
- a559ec6a8b7951551b1e10943326a9a7c585181acf91cf4ef267b2bde9b8173c4.86%
- ee99040d5f1ec24b3cfe073c1aec5a27517880213dd8fde7d79f73ff1b9a7d314.86%
- afdf7e9308c8023504addd81afda146ca0b7549d8b6cf4662506c3d7d4d2b9da3.77%
Process Ancestry
Top Grandparents
- userinit.exe85.55%
- svchost.exe5.12%
- explorer.exe4.92%
- winlogon.exe1.27%
- GUP.exe1.03%
- notepad++.exe0.52%
- chrome.exe0.48%
- powershell.exe0.24%
- WerFault.exe0.2%
- googledrivesync.exe0.16%
Top Parents
- explorer.exe92.25%
- cmd.exe2.01%
- OpenWith.exe1.43%
- notepad++.exe0.69%
- chrome.exe0.31%
- dllhost.exe0.31%
- OUTLOOK.EXE0.26%
- RuntimeBroker.exe0.26%
- firefox.exe0.14%
- 7zFM.exe0.07%
Top Children
- GUP.exe84.16%
- chrome.exe5.13%
- notepad++.exe4.25%
- splwow64.exe1.32%
- OUTLOOK.EXE0.59%
- firefox.exe0.44%
- crashpad_handler.exe0.29%
- WerFault.exe0.29%
- iexplore.exe0.15%
- msedge.exe0.15%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about notepad++.exe
Rocky answers questions about notepad++.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.