Loton.exe

: Genuine system files are usually in C:\Windows\System32 . If it’s in a temp folder or a random user directory, it’s suspicious.

: Right-click the file, go to Properties , and check the Digital Signatures tab. A missing or unknown signer is a red flag. LOTON.exe

did you see this file (e.g., Task Manager, a specific folder, or a download)? : Genuine system files are usually in C:\Windows\System32