PowerLauncher.exe

  • File Path: C:\Program Files\PowerToys\modules\launcher\PowerLauncher.exe
  • Description: PowerLauncher
  • Comments: PowerToys PowerLauncher

Hashes

Type Hash
MD5 0831705DB7DA6426E602950F1DFF6343
SHA1 6E994E5B21098B2176436281C7A2955E7F041926
SHA256 07F71AF4B32DEF22BBF13A6FC53AC31B17A74AECCE5903F165591E4ABA1637AB
SHA384 F438F70CEF4EDE5E2774E969DCC751683081BE9A7AB4901ED6C8A50FEB52189F84C2949FB9676E49B06A58804FA7A14A
SHA512 938C9EAE0E3329B891B15367512883EA58CF95D6985E432140867C2D83193EF3D72194832A65C64687176759C1A4720D3142CA748AABFD7D86F741906F93FD10
SSDEEP 3072:x8eBqhy5aV5gwqY8sXwoEHXfwaN+M+/ORSs5G2Ms4J6TFZboQ3prme:xhT1sXOfDj+/r6Jqqp1
IMP 7D19699275E08B389D5869DC7132EFBC
PESHA1 BB60C590C3C2CF9120550FF03449A8481B2FD858
PE256 AC79A700484355292BC0237CB9AED459C0FD285C04B52525291AFD0519065378

Runtime Data

Open Handles:

Path Type
(R–) C:\Program Files\PowerToys\modules\launcher\Images\app.dark.png File
(R–) C:\Program Files\PowerToys\modules\launcher\Images\app.light.png File
(R–) C:\Program Files\PowerToys\modules\launcher\Images\app_error.dark.png File
(R–) C:\Program Files\PowerToys\modules\launcher\Images\app_error.light.png File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\Microsoft.Win32.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\Microsoft.Win32.Registry.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\mscorlib.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\netstandard.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Buffers.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Collections.Concurrent.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Collections.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Collections.Immutable.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Collections.NonGeneric.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Collections.Specialized.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.ComponentModel.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.ComponentModel.EventBasedAsync.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.ComponentModel.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.ComponentModel.TypeConverter.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Core.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Data.Common.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.Debug.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.FileVersionInfo.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.Process.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.StackTrace.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.Tools.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.TraceSource.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Diagnostics.Tracing.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Drawing.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.IO.FileSystem.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.IO.FileSystem.Watcher.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.IO.Pipes.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Linq.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Linq.Expressions.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Linq.Parallel.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Memory.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.Mail.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.Requests.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.Sockets.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.WebClient.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Net.WebHeaderCollection.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.ObjectModel.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Private.CoreLib.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Private.Uri.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Private.Xml.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Private.Xml.Linq.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Reflection.Emit.ILGeneration.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Reflection.Emit.Lightweight.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Reflection.Metadata.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Reflection.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Resources.ResourceManager.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.CompilerServices.VisualC.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.Extensions.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.InteropServices.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.InteropServices.WindowsRuntime.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.Loader.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.Numerics.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.Serialization.Formatters.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.Serialization.Primitives.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Runtime.WindowsRuntime.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Security.AccessControl.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Security.Claims.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Security.Cryptography.Algorithms.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Security.Principal.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Security.Principal.Windows.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Text.Encoding.Extensions.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.Overlapped.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.Tasks.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.Thread.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.ThreadPool.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Threading.Timer.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Xml.ReaderWriter.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.NETCore.App\3.1.6\System.Xml.XDocument.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\Accessibility.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\DirectWriteForwarder.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\Microsoft.Win32.SystemEvents.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\PresentationCore.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\PresentationFramework.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\PresentationFramework-SystemData.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\PresentationFramework-SystemXml.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.Configuration.ConfigurationManager.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.Drawing.Common.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.IO.Packaging.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.Windows.Controls.Ribbon.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.Windows.Extensions.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\System.Xaml.dll File
(R-D) C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\3.1.6\WindowsBase.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\ControlzEx.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\MahApps.Metro.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\ManagedCommon.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Microsoft.Extensions.Logging.Abstractions.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Microsoft.Extensions.Logging.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Microsoft.PowerToys.Settings.UI.Lib.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Newtonsoft.Json.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\NLog.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\NLog.Extensions.Logging.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Pinyin4Net.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\PowerLauncher.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\PowerLauncher.Telemetry.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\PowerToysInterop.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Telemetry.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Wox.Core.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Wox.Infrastructure.dll File
(R-D) C:\Program Files\PowerToys\modules\launcher\Wox.Plugin.dll File
(R-D) C:\Windows\System32\en-US\crypt32.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\System32\en-US\msxml6r.dll.mui File
(R-D) C:\Windows\System32\en-US\propsys.dll.mui File
(R-D) C:\Windows\System32\en-US\shell32.dll.mui File
(R-D) C:\Windows\System32\en-US\winnlsres.dll.mui File
(R-D) C:\Windows\System32\WinMetadata\Windows.ApplicationModel.winmd File
(R-D) C:\Windows\System32\WinMetadata\Windows.Foundation.winmd File
(R-D) C:\Windows\System32\WinMetadata\Windows.Management.winmd File
(R-D) C:\Windows\System32\WinMetadata\Windows.Storage.winmd File
(R-D) C:\Windows\System32\WinMetadata\Windows.System.winmd File
(RW-) C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.572_none_fae9a23b76193bbb File
(RW-) C:\xCyclopedia File
(RWD) C:\ProgramData\Microsoft\Windows\Start Menu\Programs File
(RWD) C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs File
(RWD) C:\Users\user\Desktop File
(RWD) C:\Windows\ImmersiveControlPanel\appxmanifest.xml File
(RWD) C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\AppxManifest.xml File
(RWD) C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AppxManifest.xml File
(RWD) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\AppxManifest.xml File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 Section
\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section
\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\BaseNamedObjects\UrlZonesSM_user Section
\Sessions\1\BaseNamedObjects\windows_shell_global_counters Section
\Sessions\1\Windows\Theme289354956 Section
\Windows\Theme1665484522 Section

Loaded Modules:

Path
C:\Program Files\PowerToys\modules\launcher\PowerLauncher.exe
C:\Windows\System32\ADVAPI32.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001864D2175A0D907BE2C000000000186
  • Thumbprint: 8EE1E4E037942BE5BC7E58B061FB559BDC381D82
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: PowerLauncher.dll
  • Product Name: PowerToys
  • Company Name: Microsoft Corporation
  • File Version: 0.23.2.0
  • Product Version: 0.23.2.0
  • Language: Language Neutral
  • Legal Copyright: Copyright (C) 2020 Microsoft Corporation
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/66
  • VirusTotal Link: https://www.virustotal.com/gui/file/07f71af4b32def22bbf13a6fc53ac31b17a74aecce5903f165591e4aba1637ab/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files\PowerToys\SettingsUIRunner\Microsoft.PowerToys.Settings.UI.Runner.exe 82

MIT License. Copyright (c) 2020-2021 Strontic.