logagent.exe
Windows Media Player Logagent file version info
Program on Windows 12 known copies with hashes
Is it the real logagent.exe?
C:\Windows\system32\C:\Windows\SysWOW64\12 known copies
12.0.22000.1 · C:\WINDOWS\SysWOW64\logagent.exe · signed by Microsoft Windows
ef20b599f349de3eac7b3aaad53c4247c49713de9a4213d1864b660379697e6c12.0.22000.1 · C:\WINDOWS\system32\logagent.exe · signed by Microsoft Windows
fe4ef67c815b2c1ea7582ab2d1449c05f0abeb9cfee2b75736f27c9343add8a912.0.19041.746 · C:\Windows\SysWOW64\logagent.exe · signed by Microsoft Windows
058e1a4389ae837fafc6a7bdfca2abf33ceb6915410edbc4b2ebca052e4f13a612.0.19041.746 · C:\Windows\system32\logagent.exe · signed by Microsoft Windows
8400f2674892cdfff27b0dfe98a2a77673ce5e76b06438ac6110f0d76845994212.0.19041.1 · C:\Windows\system32\logagent.exe · signed by Microsoft Windows
4f77afec77ab4c42f274bfb3f1fd5fcf58f6fcf73c93cda0f50721af34bd94c112.0.19041.1 · C:\Windows\SysWOW64\logagent.exe · signed by Microsoft Windows
e8b7a1dbcfbbfc948beb96f4e716ce243bddb6a2e643c6c180ba54ce529adef412.0.18362.1 · C:\WINDOWS\SysWOW64\logagent.exe · signed by Microsoft Windows
7cb449a8fe09dc0a29476ba0f37a6986fb2b15f9c2b6225157c76e2d5a94917a12.0.18362.1 · C:\WINDOWS\system32\logagent.exe · signed by Microsoft Windows
bc298d38ee0c58c0474ec629ac38d5b97a97364357ceece99aea036d6c0b493012.0.17763.1 · C:\Windows\system32\logagent.exe · signed by Microsoft Windows
ec86199b43a0c82a06365ebedbd6396bf93a418b18fb9fc4f6c8bc8b3a83d07912.0.17763.1 · C:\Windows\SysWOW64\logagent.exe · signed by Microsoft Windows
f100f9542a3d3b48868adfca2a5ca4c48960c66d5c0ea1b5d28f994a3b0d373912.0.14393.0 · C:\Windows\system32\logagent.exe · signed by Microsoft Windows
19d88cdace7d668d56ec843a4ec09b5f140ab2decdbad340d2c565e7b62e333512.0.14393.0 · C:\Windows\SysWOW64\logagent.exe · signed by Microsoft Windows
9e860cfb66256c2598721f01d42bc12f81a9d39f353592645f405fa5de90466fFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.