LaunchTM.exe
- File Path:
C:\Windows\system32\LaunchTM.exe
- Description: Task Manager Launcher
Hashes
Type | Hash |
---|---|
MD5 | 1F20DC3E0AA92B3E4A449F65FFAD1A54 |
SHA1 | E43B01CF95FD1FC538C6164D59ECBC4116C5EFD6 |
SHA256 | A80F5DB6CFE14A4A5C4BBEADCDBD8F329C61578FDD6F336C128074DB11421E79 |
SHA384 | 84A8F48E2DD98BFB93E3B2766B17389F30DB45ED2184A1ADBC5B7D7201E14442D6E20469020AF534B55E831B8D1723E9 |
SHA512 | 91F159D27921B1C7BE91C06538FB9ADFA27B8E9157B7541B2039A4DDED5D7031EF6E30B6FCE9A452F5758FAFE104E415561ED1C0DEC897087A903F7C21E83464 |
SSDEEP | 192:JgvRQ0/cEyT/uufqR1MFtG1pd1fskvB0+WIqayW:ARsxT2lLVp/jBpWIqayW |
IMP | AD4CEE994BCE4BEC755FC55C249B5C5F |
PESHA1 | 0FF12155A5781556B5DC49378BBDE0604CE8257E |
PE256 | 80697D91B83A2601D971F85D261F0E3739D703B2A3F5699A2B69A94B15D3EFA6 |
Runtime Data
Child Processes:
Taskmgr.exe
Loaded Modules:
Path |
---|
C:\Windows\System32\advapi32.dll |
C:\Windows\System32\bcryptPrimitives.dll |
C:\Windows\System32\CFGMGR32.dll |
C:\Windows\System32\clbcatq.dll |
C:\Windows\System32\combase.dll |
C:\Windows\system32\edputil.dll |
C:\Windows\System32\GDI32.dll |
C:\Windows\System32\gdi32full.dll |
C:\Windows\System32\IMM32.DLL |
C:\Windows\SYSTEM32\kernel.appcore.dll |
C:\Windows\System32\KERNEL32.DLL |
C:\Windows\System32\KERNELBASE.dll |
C:\Windows\system32\LaunchTM.exe |
C:\Windows\System32\msvcp_win.dll |
C:\Windows\System32\msvcrt.dll |
C:\Windows\SYSTEM32\ntdll.dll |
C:\Windows\System32\ole32.dll |
C:\Windows\System32\OLEAUT32.dll |
C:\Windows\system32\profapi.dll |
C:\Windows\system32\PROPSYS.dll |
C:\Windows\System32\RPCRT4.dll |
C:\Windows\System32\sechost.dll |
C:\Windows\System32\SHCORE.dll |
C:\Windows\System32\SHELL32.dll |
C:\Windows\System32\shlwapi.dll |
C:\Windows\System32\ucrtbase.dll |
C:\Windows\System32\USER32.dll |
C:\Windows\system32\uxtheme.dll |
C:\Windows\System32\win32u.dll |
C:\Windows\SYSTEM32\windows.storage.dll |
C:\Windows\system32\Wldp.dll |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: LaunchTM.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.546 (WinBuild.160101.0800)
- Product Version: 10.0.19041.546
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
- VirusTotal Detections: 0/75
- VirusTotal Link: https://www.virustotal.com/gui/file/a80f5db6cfe14a4a5c4bbeadcdbd8f329c61578fdd6f336c128074db11421e79/detection
File Similarity (ssdeep match)
File | Score |
---|---|
C:\Windows\system32\LaunchTM.exe | 83 |
C:\Windows\system32\LaunchTM.exe | 80 |
C:\Windows\system32\LaunchTM.exe | 80 |
MIT License. Copyright (c) 2020-2021 Strontic.