WSCollect.exe

  • File Path: C:\Windows\system32\WSCollect.exe
  • Description: This tool collects Windows Store log files

Hashes

Type Hash
MD5 74352E0225658E9AAE9A0D7AB4BF3885
SHA1 6F191545CBFB25F9F32FBF915DF07FECFEE46F39
SHA256 BDFC7A603625FC50D9FBB92F2FEA5E4395B5E93A27C9BC1287221E3124CE8F77
SHA384 B9A96B1202FCE865F59FD39026914421A80761E276C9ADC1AD15619C8BE4FA028962BFDED6F367ACB93669FC4C326828
SHA512 40C176957B37522149DA9AD7E438DA6EFF81A86F10E4D065921F8EF0378FAE0A680969640A8A0976BE2E9B4A981618F6AD8DECFE10385AB9188346A8DCF235ED
SSDEEP 768:Tz7uRLFy0ZCVlvdGkLRqkf31DNsn4FOBkStBWw:0xyXVlvdGklf31Ag0Yw
IMP 9F02A366D38804E1F04B39C5385F776C
PESHA1 0AFC76C5D848B126926C51ACA0846F7B7E8F9050
PE256 905769F3BD8DA351952F08DF9C2464FF8BAB4F46A86B4811ACDE27C23DB11AE5

Runtime Data

Usage (stdout):

The operation completed successfully.
Done.

Usage (stderr):

ERROR: The system was unable to find the specified registry key or value.

Loaded Modules:

Path
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\system32\WSCollect.exe

Signature

  • Status: Signature verified.
  • Serial: 33000002EC6579AD1E670890130000000002EC
  • Thumbprint: F7C2F2C96A328C13CDA8CDB57B715BDEA2CBD1D9
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WSCollect.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/bdfc7a603625fc50d9fbb92f2fea5e4395b5e93a27c9bc1287221e3124ce8f77/detection

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\WSCollect.exe 49
C:\Windows\system32\WSCollect.exe 50
C:\Windows\system32\WSCollect.exe 38
C:\Windows\system32\WSCollect.exe 46
C:\WINDOWS\system32\WSCollect.exe 50
C:\Windows\system32\WSReset.exe 50
C:\Windows\system32\WSReset.exe 44
C:\Windows\system32\WSReset.exe 43
C:\WINDOWS\system32\WSReset.exe 47
C:\Windows\system32\WSReset.exe 43
C:\WINDOWS\system32\WSReset.exe 44

MIT License. Copyright (c) 2020-2021 Strontic.