ColorPicker.exe

  • File Path: C:\Program Files\PowerToys\modules\ColorPicker\ColorPicker.exe
  • Description: ColorPicker
  • Comments: PowerToys ColorPicker

Hashes

Type Hash
MD5 566AA09D2B171D222A4508F86A9293E7
SHA1 FD921AA6B8E8F9464AB5CE8422638B7B63A6E31D
SHA256 274134813E7DC413B3F70951E89A15B63A83757F72EDDF0FC6F2CDAF42665DC2
SHA384 B06971C91F3FD055FEDB9826C35ABA07183630A7127B10E617835A94285CD48A671959A1D9E5CB66BD1D8915D60205FB
SHA512 B9CD0C1232174E16E50C39C0B7E289E1DAEF2926FB15B8872A143DABCA64E36B531EF0A34E6480582AA4CC4F7E088D2F172F071B52D3211A801D0598B79B8981
SSDEEP 1536:9F3EQTDtR0IxU0idb4++avrQZEOKfeLEz0rkmVcliXF:9F3EQ30IdYzQWOKfeYz0rk8YU
PESHA1 68DEE25E621ED1D9A7BA4EF1E6A8780B06A8AEBB
PE256 253570B49464E6CD3C07A23CB42892569E0A212B53A76243633D4DC2199B3C8C

Runtime Data

Open Handles:

Path Type
(R-D) C:\Program Files\PowerToys\modules\ColorPicker\ManagedCommon.dll File
(R-D) C:\Program Files\PowerToys\modules\ColorPicker\System.Windows.Interactivity.dll File
(R-D) C:\Program Files\PowerToys\modules\ColorPicker\Telemetry.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\netstandard\v4.0_2.0.0.0__cc7b13ffcd2ddd51\netstandard.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll File
(R-D) C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll File
(RW-) C:\xCyclopedia File
...\Cor_SxSPublic_IPCBlock Section
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\Cor_Private_IPCBlock_v4_3840 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme289354956 Section
\Windows\Theme1665484522 Section

Loaded Modules:

Path
C:\Program Files\PowerToys\modules\ColorPicker\ColorPicker.exe
C:\Windows\System32\KERNEL32.dll
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\MSCOREE.DLL
C:\Windows\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001864D2175A0D907BE2C000000000186
  • Thumbprint: 8EE1E4E037942BE5BC7E58B061FB559BDC381D82
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ColorPicker.exe
  • Product Name: PowerToys
  • Company Name: Microsoft Corp.
  • File Version: 0.23.2.0
  • Product Version: 0.23.2.0
  • Language: Language Neutral
  • Legal Copyright: Copyright (C) 2020 Microsoft Corporation
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/71
  • VirusTotal Link: https://www.virustotal.com/gui/file/274134813e7dc413b3f70951e89a15b63a83757f72eddf0fc6f2cdaf42665dc2/detection/

MIT License. Copyright (c) 2020-2021 Strontic.