WSCollect.exe

  • File Path: C:\Windows\system32\WSCollect.exe
  • Description: This tool collects Windows Store log files

Hashes

Type Hash
MD5 1C4F7AB2AD0B867487E42F77A637A3F2
SHA1 41E27983E2D168B28F6702F0AD4DB83A5A24C926
SHA256 B9FBB27BE73E23A835B4B8803C82775274BE26339BF68F1F7C0499DE3D330533
SHA384 B7BF141C3EBD28FF94E218AA77F62849030502169893FBE1A69ECBD8E390B28C2A24161396D01E1E9B0BF3E6BAAF521A
SHA512 79CB56DF25C5849D28D72CBA87B1687F91616DC4B9F97C414C2DCE0BB3D83C0EB5E2412D1CD3868F093AD4E8C48132FA3B6CED9D14EEAB170845D120CC123BEC
SSDEEP 768:v7FfBiRLtfp5oscQ5vCJfoDNsn4FOBkStBWO:SRhfp5oscQ5vqfoAg0YO
IMP 9F02A366D38804E1F04B39C5385F776C
PESHA1 08D30935C4EA3BF7F5536A1286AE72B79C6982DA
PE256 51D1594F03092C31639485B0C65A4D7F950EA24CDA964FEE1D11DB446D47E834

Runtime Data

Usage (stdout):

The operation completed successfully.
Done.

Usage (stderr):

ERROR: The system was unable to find the specified registry key or value.

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WSCollect.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WSCollect.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/74
  • VirusTotal Link: https://www.virustotal.com/gui/file/b9fbb27be73e23a835b4b8803c82775274be26339bf68f1f7c0499de3d330533/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\WSCollect.exe 47
C:\Windows\system32\WSCollect.exe 41
C:\Windows\system32\WSCollect.exe 50
C:\Windows\system32\WSCollect.exe 50
C:\WINDOWS\system32\WSCollect.exe 49
C:\Windows\system32\WSReset.exe 41
C:\Windows\system32\WSReset.exe 43
C:\Windows\system32\WSReset.exe 44
C:\WINDOWS\system32\WSReset.exe 44
C:\Windows\system32\WSReset.exe 43
C:\WINDOWS\system32\WSReset.exe 43

MIT License. Copyright (c) 2020-2021 Strontic.