scrutil.exe
by Various
Application Support
Sources: 300M+ executions observed in the wild.
Summary
Screen Utility - screen management or capture utility.
scrutil.exe is the 1173rd most commonly executed Windows program in EchoTrail's dataset, observed 1,412 times across enterprise environments. It typically runs from C:\Users\... and it is most often launched by g2mui.exe.
Get this in your tools
The same record for scrutil.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/scrutil.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
1173rd
most commonly executed Windows program
1,412
observed endpoint executions
Behavior
Top Paths
- C:\Users\...100%
Top Hashes (SHA256)
- c4593c699188d686ce8109d93cc03ea7acb9575dcf92b61cf7bcdcb0e5564cd553.19%
- 15ea0fcdbe5476eefe7774fe0d297e7f15c780a228cb1d34ace4b77401967f2e9.45%
- bca841e81df0da669d258e07b3a097a04d754334cec112ee1fd1232c7cd5835c6.99%
- 5851894b2e19ae0ef540024b8898543857b7b9ab4beeeffffb97663f6ead26bc3.38%
- c9fce1f0a718058aa7c857d37c12c0f2adb6a4e17a33b2384e1cb1929f9affa23.23%
- aacc632bbd9d790eb8d3d1bfa598ec0afaadf751f5a86f76e4d5f2c71480a3933.07%
- 958901da53b17300cc28d660aef04e08178fbd728a872617157c11c7e0c35a182.61%
- 9b7b16ba78bf9bfed521ced09284825f7e457128556412dd55897122ba85e2492.46%
- 4dd9fe5d8a577d4eec8bbe4c3011f3af39e1a83192884ac14f886f0087a190942.15%
- 6a54c91eb8259f437bc8f52ffef0b2cf99804a8b9f57803bf9afb331e79a7f242.15%
Process Ancestry
Top Grandparents
- g2mcomm.exe58.08%
- g2mstart.exe41.92%
Top Parents
- g2mui.exe57.37%
- g2mcomm.exe42.63%
Ask Rocky about scrutil.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for scrutil.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.