OneDrive.exe
by Microsoft
Cloud Storage
Sources: 300M+ executions observed in the wild.
Summary
Microsoft OneDrive - cloud file synchronization and storage client.
OneDrive.exe is the 369th most commonly executed Windows program in EchoTrail's dataset, observed 22,637 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by explorer.exe.
Get this in your tools
The same record for onedrive.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/onedrive.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
369th
most commonly executed Windows program
22,637
observed endpoint executions
Behavior
Top Paths
- C:\Users\...94.72%
- C:\Program Files\Microsoft OneDrive5.03%
- C:\Program Files (x86)\Microsoft OneDrive0.25%
Top Hashes (SHA256)
- 1895c0a5b049cc2c9c9ac92af103e1703379ad84766352e83f98a088b5a6612e11.94%
- 9368419f375ce26937ef71c9236daa8d93c75ea87c8d33a1b2ea11ae13a5f1bc6.38%
- 2107ced6d6f46e87315107e59210ead0307f0b9b78b199aa60cc55e780d8fac65.9%
- 9590c024ad656c18992bd2e565bc6227ce8c4c2b89d6d159274726c481cd57594.59%
- ab189636bab5020b671cbb763e245f27f60847405fc14bea6e50285e60dc85ed4.29%
- be7fe39e9232a97359879e83f287754c8328b9766e6d2dea4cf7138abbafe1d22.31%
- a343d94d748f8a2c06ea45566eccce1fcdc7660e0a2dbff92e9741904fe0d5591.51%
- de4bfd8e60ac0222eacca8bac94562ed2b38cbef569f8b927ccd197735655ac01.48%
- dfa000ed22bc88b124e084153ea60b576ab77fee304c3d7c49c4c6a6aed5102e1.48%
- 2ddf8b08dc46fa84c04aad18e7aa73b7e13af07c20a69eff6cc9160e11969acc1.4%
Process Ancestry
Top Grandparents
- userinit.exe82.06%
- OneDriveSetup.exe12.29%
- explorer.exe3.66%
- services.exe1.26%
- KeePass.exe0.25%
- OneDrive.exe0.16%
- updater.exe0.06%
- svchost.exe0.03%
- winlogon.exe0.03%
Top Parents
- explorer.exe80.07%
- OneDriveSetup.exe15.67%
- OneDrive.exe2.43%
- svchost.exe0.85%
- chrome.exe0.58%
- firefox.exe0.2%
- WerFault.exe0.11%
- GROOVE.EXE0.02%
- iexplore.exe0.01%
- cmd.exe<0.01%
Top Children
- OneDriveSetup.exe51.98%
- Microsoft.SharePoint.exe25.42%
- OneDrive.exe14.65%
- wermgr.exe2.14%
- explorer.exe1.76%
- WerFault.exe0.92%
- chrome.exe0.79%
- msedgewebview2.exe0.68%
- EXCEL.EXE0.3%
- POWERPNT.EXE0.3%
Ask Rocky about OneDrive.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for OneDrive.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.