actionuriserver.exe
Summary
Action URI Server - handles action URI protocol dispatching.
actionuriserver.exe is the 669th most commonly executed Windows program in EchoTrail's dataset, observed 6,196 times across enterprise environments. It typically runs from C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy100%
Top Hashes (SHA256)
- 545cc1cfe2dc4bb5755e2767f8687f950a648f15331f26a27a48cad6a60d528e50.96%
- 68febfbdc951e7a9ebf44265c595684b1c749cdc034baed139fe9d47aa74894219.12%
- 067b2cc5d42fa87aea45c8fe0cf9808d431d5258f081ddd829b3f7980d23e23a11.18%
- b41a02682e7f64b1c2ecb043c542bb0c48da2830a447147914159ed2100616965.22%
- 11870f7cc84e60c66885c4f37d1e8b7b1fec63cfc9e318b90e534ac2abd427834.22%
- 5a44934f72e1521fe3a663e3d81816863fb269420d06ea6ec116f0a6622e85a62.52%
- fb573b8fa57637bb9a7f2ff9506505012d6a558598d0bf617fc97438d01de2c42.41%
- c616a9f04f931e8e1947a0e47fc255bfcbd8c70f8c0f49af73534234a77da8d51.93%
- e6aa8d2eb501794a9859c521b16539d5858f02c9871b4925182bc53eb334a6261.42%
- 7acf5d8d74453734874d042e686137b99073f2149649dea885d8ca7d61d193440.8%
Process Ancestry
Top Grandparents
- services.exe100%
Top Parents
- svchost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about actionuriserver.exe
Rocky answers questions about actionuriserver.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.