PhotoScreensaver.scr
by Microsoft
Operating System
Summary
Windows Photo screensaver - displays photos from a selected folder.
PhotoScreensaver.scr is the 1126th most commonly executed Windows program in EchoTrail's dataset, observed 1,542 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by winlogon.exe.
1126th
most commonly executed Windows program
1,542
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 8aed70ab1de6d5dff751e8724289376e7a12bdafba13290cfb3663b5d46f532665.74%
- 97bfac3e668bc052e152bc19497490e19d97270bfca2065f2127c5f3d445dc5d34.26%
Process Ancestry
Top Grandparents
Top Parents
- winlogon.exe99.68%
- rundll32.exe0.32%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about PhotoScreensaver.scr
Rocky answers questions about PhotoScreensaver.scr grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.