LaunchTM.exe

  • File Path: C:\Windows\system32\LaunchTM.exe
  • Description: Task Manager Launcher

Hashes

Type Hash
MD5 1F20DC3E0AA92B3E4A449F65FFAD1A54
SHA1 E43B01CF95FD1FC538C6164D59ECBC4116C5EFD6
SHA256 A80F5DB6CFE14A4A5C4BBEADCDBD8F329C61578FDD6F336C128074DB11421E79
SHA384 84A8F48E2DD98BFB93E3B2766B17389F30DB45ED2184A1ADBC5B7D7201E14442D6E20469020AF534B55E831B8D1723E9
SHA512 91F159D27921B1C7BE91C06538FB9ADFA27B8E9157B7541B2039A4DDED5D7031EF6E30B6FCE9A452F5758FAFE104E415561ED1C0DEC897087A903F7C21E83464
SSDEEP 192:JgvRQ0/cEyT/uufqR1MFtG1pd1fskvB0+WIqayW:ARsxT2lLVp/jBpWIqayW
IMP AD4CEE994BCE4BEC755FC55C249B5C5F
PESHA1 0FF12155A5781556B5DC49378BBDE0604CE8257E
PE256 80697D91B83A2601D971F85D261F0E3739D703B2A3F5699A2B69A94B15D3EFA6

Runtime Data

Child Processes:

Taskmgr.exe

Loaded Modules:

Path
C:\Windows\System32\advapi32.dll
C:\Windows\System32\bcryptPrimitives.dll
C:\Windows\System32\CFGMGR32.dll
C:\Windows\System32\clbcatq.dll
C:\Windows\System32\combase.dll
C:\Windows\system32\edputil.dll
C:\Windows\System32\GDI32.dll
C:\Windows\System32\gdi32full.dll
C:\Windows\System32\IMM32.DLL
C:\Windows\SYSTEM32\kernel.appcore.dll
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\system32\LaunchTM.exe
C:\Windows\System32\msvcp_win.dll
C:\Windows\System32\msvcrt.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\ole32.dll
C:\Windows\System32\OLEAUT32.dll
C:\Windows\system32\profapi.dll
C:\Windows\system32\PROPSYS.dll
C:\Windows\System32\RPCRT4.dll
C:\Windows\System32\sechost.dll
C:\Windows\System32\SHCORE.dll
C:\Windows\System32\SHELL32.dll
C:\Windows\System32\shlwapi.dll
C:\Windows\System32\ucrtbase.dll
C:\Windows\System32\USER32.dll
C:\Windows\system32\uxtheme.dll
C:\Windows\System32\win32u.dll
C:\Windows\SYSTEM32\windows.storage.dll
C:\Windows\system32\Wldp.dll

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: LaunchTM.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.546 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.546
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/75
  • VirusTotal Link: https://www.virustotal.com/gui/file/a80f5db6cfe14a4a5c4bbeadcdbd8f329c61578fdd6f336c128074db11421e79/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\LaunchTM.exe 83
C:\Windows\system32\LaunchTM.exe 80

MIT License. Copyright (c) 2020-2021 Strontic.