logviewer.exe
Win32 API Log Viewer file version info
Program on Windows 2 known copies with hashes
Is it the real logviewer.exe?
Installed in
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\ProductLogging/Debugging Tools for Windows(R), Microsoft Corporation
DescriptionWin32 API Log Viewer
2 known copies
4.02 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\logviewer.exe · not signed
634935e2c023e287ed583e45804e89ee8d5f8f095e442b2083cd1e9b49f7060c4.02 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\logviewer.exe · not signed
cae4e16b99e45ed28ee96e5749b0d279fd754b559be91b6ec238fd7b7186327dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.