LaunchTM.exe

  • File Path: C:\WINDOWS\SysWOW64\LaunchTM.exe
  • Description: Task Manager Launcher

Hashes

Type Hash
MD5 27475E20D02C089F1A46117A7934689F
SHA1 7C0AD124AB9DD397AF4C9CDDE75C38CA083780D1
SHA256 EEE2B651203713144AE6C8976CE33AEA34E8EFFF37BAAC8E2CBC920C43DE84E3
SHA384 FE6D2CCFA34E8AD300C4E93A5A947D4315F34341D11AE6920832302F2C887DEB7866A7C078C9CBEE47DD22D4C21046E8
SHA512 2AF042EEFFC139F7E6D08E43674AD0AAD427D412BEC422582AD9B5166CAA6E23BC1D38EEF64FD8409B78E160C8E966C3228DC7D8F665CCDA90AE605C9D9EB932
SSDEEP 192:0pgWmCWRRnUUT1o9N9Mbga1QhvBcwW8qayWtEAF:p17RnUUhozaaBrW8qayWt
IMP E28D1A46BA8C0C2DD607DFE0E3A12845
PESHA1 7737E92FCEAC5BA5B48A2C4BDD685CDCDD9A6E3B
PE256 52B4FE220EEF75C4ACD8DDF6011B0967CCD49809A833819B17289A75FC4D4B3B

Runtime Data

Child Processes:

Taskmgr.exe

Loaded Modules:

Path
C:\WINDOWS\SYSTEM32\ntdll.dll
C:\WINDOWS\System32\wow64.dll
C:\WINDOWS\System32\wow64base.dll
C:\WINDOWS\System32\wow64con.dll
C:\WINDOWS\System32\wow64cpu.dll
C:\WINDOWS\System32\wow64win.dll
C:\WINDOWS\SysWOW64\LaunchTM.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: LaunchTM.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.65 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.65
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/eee2b651203713144ae6c8976ce33aea34e8efff37baac8e2cbc920c43de84e3/detection

MIT License. Copyright (c) 2020-2021 Strontic.