LaunchTM.exe

File Path: C:\Windows\SysWOW64\LaunchTM.exe
Description: Task Manager Launcher

Hashes

Type	Hash
MD5	`313CEFC8B9B33FCA706B08B1F5DC46AF`
SHA1	`BFE5D6F4DE77D7E91C272ADD6119660E3A6EF793`
SHA256	`8A2CAAA0CECC14739D42FB9793794B098BAD26C4C4AABC5E4B6E3E8D9B21672E`
SHA384	`F1C6B12DCF8A3A59A3BFA6292B294163175D489609A1C3890A1E0D91F39C66F7C49CB9E9A3493967CC5CFCF1C2D6B9F1`
SHA512	`C869AF761810F7D0A2527AA984437D4C6A1B0179C6E506D9BEE6A65A5F048430177203ACAB29FE0D25240E0D6AED5D41467E3DA5FC349F20D98EBFBB3B25324E`
SSDEEP	`96:Sr8f1kUpDiN0OEusn9ndcp2k3jD02DGjQLRHMizB4MocflJkvcS8DJ+XVpH6b+i1:tkUp7Oru24IMi94MDfbkvB/MWIqayW`
IMP	`E28D1A46BA8C0C2DD607DFE0E3A12845`
PESHA1	`3B76051C15241D94CB332F6532556A1F355E1B46`
PE256	`355C0E4B9F46067A1136C3CBBB087B7795BEB7FFC1B4BBDBC7E67B992E952FC3`

Runtime Data

Child Processes:

Taskmgr.exe

Loaded Modules:

Path
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll
C:\Windows\SysWOW64\LaunchTM.exe

Signature

Status: Signature verified.
Serial: 3300000266BD1580EFA75CD6D3000000000266
Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: LaunchTM.exe
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.19041.1 (WinBuild.160101.0800)
Product Version: 10.0.19041.1
Language: English (United States)
Legal Copyright: Microsoft Corporation. All rights reserved.
Machine Type: 32-bit

File Scan

VirusTotal Detections: 0/71
VirusTotal Link: https://www.virustotal.com/gui/file/8a2caaa0cecc14739d42fb9793794b098bad26c4c4aabc5e4b6e3e8d9b21672e/detection/

File Similarity (ssdeep match)

File	Score
C:\Windows\SysWOW64\LaunchTM.exe	91
C:\Windows\SysWOW64\LaunchTM.exe	97
C:\Windows\SysWOW64\LaunchTM.exe	90

MIT License. Copyright (c) 2020-2021 Strontic.