PlacesServer.exe
Summary
Places Server - location/network places management component.
PlacesServer.exe is the 1190th most commonly executed Windows program in EchoTrail's dataset, observed 1,370 times across enterprise environments. It typically runs from C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy100%
Top Hashes (SHA256)
- 1fe994b216d05dc0aa41270cf33298cf9351e0ea0a405032d2a253c1b9e9818826.08%
- 776d7f5cd930e883b178bd2eef53060d91e14637c1d0ef28fefa694af7d5454d17.12%
- a3483264053c9a3db6d6acf6c45115f4ac9f0ad7fdebc563edfc11bbd1084eb29.48%
- c823d733fa812af089d2deb3761785c6c16b6e58a619eb88cfd1ff9e8d79c3309.04%
- 3054dc2d63d7704a30d1a0e7ad94fd77e37d54de709b9a7a358e64e5e8f59e6b6.58%
- 33990afab093082fe83f54cad4ea6bb35df54a864089fb015c6eec6ece50f4c96.32%
- 476cb27090d1b04ce86c5eeec8217c44a26de47b7647b78847371ac11e0e6cd45.09%
- 6edd46fb359446babf141fb320351fece8177e1eb6c4c52bfd9536db4e0e3add4.39%
- fc8d89bef4c5827194fa51f405d9f6197c561e0d81e410ba373b07f8ca5c1d4b3.78%
- a2ecf4a9314b7be1ab8f13c275818c06ea287de47c53e1e9635dc9149185eda92.99%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe100%
Top Children
- WerFault.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about PlacesServer.exe
Rocky answers questions about PlacesServer.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.