action_runner.exe

  • File Path: C:\Program Files\PowerToys\action_runner.exe
  • Description: PowerToys ActionRunner

Hashes

Type Hash
MD5 73A6DD5DB7FF6212549F47AF75E007E2
SHA1 131A6FF6484D53536257E12EB70F44F1C02217F0
SHA256 63CA35D2C97520EEB96265A1D90449D2138597F43BACEEE8D3F126A222191C4A
SHA384 88C1DA0A766C002163701A2E159922F247FA7FD490B68833CBEA45AA489898C399BC685562CA8611F7796BAD757BDCEE
SHA512 F6BEBC1BE26EB35E21A05C4AED5B67725E83A8D20D82628B4A16E8EF72552C75FFAEDDA4F6D890D124DEEE5FC86BDFFBA80B81ADE74F8275AB2FB0B6B0231AD6
SSDEEP 6144:3CaEv4q9/eJ2NTlikp0Gbo9coeX8f1053ecSyI+rd11e8CfVGd3yfBkdA+oYOqtW:Tq9/eJAikAcfvayI+B+BfYA+omZaoYn
IMP 7233A0C46408E1C57C4A60564D677521
PESHA1 C6CFA8618F91BA9951D217C5277F4D748268CAB3
PE256 3A70C54111B3D30EED296AE449D6F3C7C64DB636ADA7CFBCB569BE6BFF4127BF

Runtime Data

Loaded Modules:

Path
C:\Program Files\PowerToys\action_runner.exe
C:\Windows\System32\combase.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\shcore.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\System32\win32u.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001864D2175A0D907BE2C000000000186
  • Thumbprint: 8EE1E4E037942BE5BC7E58B061FB559BDC381D82
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: action_runner.exe
  • Product Name: PowerToys
  • Company Name: Microsoft Corporation
  • File Version: 0.23.2.0
  • Product Version: 0.23.2.0
  • Language: English (United States)
  • Legal Copyright: Copyright (C) 2020 Microsoft Corporation
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/63ca35d2c97520eeb96265a1d90449d2138597f43baceee8d3f126a222191c4a/detection/

File Similarity (ssdeep match)

File Score
C:\Users\user\AppData\Local\Temp\action_runner.exe 85

MIT License. Copyright (c) 2020-2021 Strontic.