CmdID

CmdID / Files

LaunchTM.exe

Task Manager Launcher file version info

Program on Windows 18 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real LaunchTM.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTask Manager Launcher

18 known copies

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\system32\LaunchTM.exe · signed by Microsoft Windows

ae0584d483399e591b254d067020f37112a3c44d03cf99929f52ab78fdbae86f

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

eee2b651203713144ae6c8976ce33aea34e8efff37baac8e2cbc920c43de84e3

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

ef9c0384fb695452851506713577e617c330f5f814e3ff6438088f13c52781ad

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

f8f394a721883d69f845859db1b02c167b6efab121632f1265912b94ce007c39

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

41ee06df3c85d1c06207ad97be3d0c52e2415b179622777ac6d73d1d93da9074

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

a80f5db6cfe14a4a5c4bbeadcdbd8f329c61578fdd6f336c128074db11421e79

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

4c33064aba75b0fc716743d62f9a80cfd9182da0cd427c7330e21afe01e60eff

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

b8543d3aceec5a754292393f6602eeb966dbf9e198c94e3d74a9e9260e5f9870

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

0dee6b54087ea0982a3cd515e64c66b7670bf86dca0a0df742b8c00f17bf54e0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

8a2caaa0cecc14739d42fb9793794b098bad26c4c4aabc5e4b6e3e8d9b21672e

10.0.18362.693 (WinBuild.160101.0800) · C:\WINDOWS\system32\LaunchTM.exe · signed by Microsoft Windows

871edef7ac29aa2c0ca2ee9a4acef2645faa58196465efcc32c81e0f3986f7c3

10.0.18362.693 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

9cd50064f7159fd5d1ed9c53366707cd819d7fd5812b018ad5df0cae35d3d130

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

397fefbe33ff0677250c856b28b12080f2c0eb22a939e53b4a74ae464f43eb17

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

61261391d8f4283d539ba4cd19bed875296ba8e1aadceab272c9353f90a22df4

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\LaunchTM.exe · signed by Microsoft Windows

028e02a7f698150dd9f2cf8a98143f9c67268d1494efe3aef0b950d02a4a58de

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\LaunchTM.exe · signed by Microsoft Windows

e3420a825d476f8c544bb5d88871bc4f88846bf0b353cb279ca1c35a3749f507

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\LaunchTM.exe · not signed

c708ed1d07678ff314a88b65f840dab14fab99589c164ea2e96f4afc612dd9b7

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\LaunchTM.exe · not signed

edc42f89043d7a58bb782e4078236b67fa859e6d4babd86d6de6c86c016f40d6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.