pwlauncher.exe
Windows To Go Startup Options Command Line Tool file version info
Program on Windows 5 known copies with hashes Command pwlauncher
Is it the real pwlauncher.exe?
C:\Windows\system32\5 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\pwlauncher.exe · signed by Microsoft Windows
96119c55a9552b815c826492f2a1f8a7840ea16b31be6a1d12849349a809139310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\pwlauncher.exe · signed by Microsoft Windows
20bd575e31804c52d7edc3a6298aba504878d31df549d3fc82fe7a99ee9a966e10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\pwlauncher.exe · signed by Microsoft Windows
9ac4cb523107ce4fc5dc9a122124ba51b053fe6ff572b169701a69ac46939a0b10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\pwlauncher.exe · signed by Microsoft Windows
1c8227150762b47731dd6b99304d3e5647824f9c1b4d7fb8cd755b29f00bc93b10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\pwlauncher.exe · signed by Microsoft Windows
c329f508d87b5bc8c791c2a9b6e261bffeb49eeb3fa56821cd655926d01d2e5fFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.