FUSLOGVW.exe
Microsoft .Net Framework Assembly Binding Log Viewer file version info
Program on Windows 2 known copies with hashes
Is it the real FUSLOGVW.exe?
Installed in
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\Signed byMicrosoft Corporation
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionMicrosoft .Net Framework Assembly Binding Log Viewer
2 known copies
4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\FUSLOGVW.exe · signed by Microsoft Corporation
2d9d36ac3355acbbe17a3afabc2889054ed69b7b1d688b195db923bfbba172b04.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\FUSLOGVW.exe · signed by Microsoft Corporation
5787c302e38cbbc067eaa81bb0e6b13478873d9ad69d1ab570e8319b6169077aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.