PickerHost.exe
by Microsoft
Operating System
Summary
Windows Picker Host - hosts the file/contact/photo picker UI for UWP applications.
PickerHost.exe is the 677th most commonly executed Windows program in EchoTrail's dataset, observed 5,914 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by svchost.exe.
677th
most commonly executed Windows program
5,914
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 88e97ca051740cf1255973fdd917971ab33aa3204f926fec574d1506f366f23f32.73%
- 540b7d239d686faebf7ac426b5252dd9feebdfdb9a3212d3164ec3be05b4e57917.27%
- 705bbcb05e6efe0a8b6fb142afd40f13beb92e4f51780999cd8305fb300acde815.8%
- 3bd001720fe00b9a561045548fc0748e5080a7ed17c4d4c0028a0090ec3c9e5114.91%
- 5c805ec4b0ed7d93c6a314e195cca4339bd10297d0173643c9f07be95cafea1f8.7%
- 588dc21af079b3914d4cfcbea4de1ceffb66ad078e151caa5e23700ba4571d3f2.54%
- 1daad9a09bc5bc51f41a34cb604106eebe1559d35e8464785601e3e6d98c3f171.97%
- 30f058343faecb1ebd32c078176a8796076f69fd2283aa0efc38df0c82be4bf51.62%
- e3bd7e8ec23840c3d4c256f11872f687d707ae403c49bf1eb71b604b33fc456c1.18%
- 2fe89df706c2b56461d988c1e9b57c1c4fef94353d4e2bf267a99a7eb63846bf0.75%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe99.97%
Top Children
- crashpad_handler.exe78.85%
- WerFault.exe18.27%
- mspaint.exe0.96%
- notepad.exe0.96%
- RarExtLoader.exe0.96%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about PickerHost.exe
Rocky answers questions about PickerHost.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.