WSCollect.exe

  • File Path: C:\WINDOWS\system32\WSCollect.exe
  • Description: This tool collects Windows Store log files

Hashes

Type Hash
MD5 C471046B92D04242ED85AB1522E90012
SHA1 5F51D805EFDF2F99DB15092199BE08F1F6005BFF
SHA256 2D0016951F7AF6F5F9758B7592D03107909026BBE7CBEF7F95559933012D7C72
SHA384 33E7F584E4DFB52F7DF3D6F97FDCA2C771924936580BC23C18FB1159EECA35EDE4565C96DD2F24F9891D199D0D8585A5
SHA512 8F05F0B4578B718641C5198530D2CA15DC252E08EBBE9F2C9AB36C9048D19868A923DF8C7232CD9D6D4243DE62BA82CE36D9D65AFE189700B849D19104FA20F6
SSDEEP 768:ZBGa73KuCoCduwEs4QppGOp1fgDNsn4FOBkStBWz:j7auCoCduwEs4efgAg0Yz

Runtime Data

Usage (stdout):

Error: 0x8007007b

Child Processes:

conhost.exe

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WSCollect.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.18362.1 (WinBuild.160101.0800)
  • Product Version: 10.0.18362.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\WINDOWS\system32\WSCollect.exe 43
C:\Windows\system32\WSCollect.exe 49
C:\Windows\system32\WSCollect.exe 40
C:\Windows\system32\WSCollect.exe 50
C:\Windows\system32\WSCollect.exe 50
C:\Windows\system32\WSReset.exe 44
C:\Windows\system32\WSReset.exe 41
C:\Windows\system32\WSReset.exe 44
C:\WINDOWS\system32\WSReset.exe 40
C:\Windows\system32\WSReset.exe 40
C:\WINDOWS\system32\WSReset.exe 43

MIT License. Copyright (c) 2020-2021 Strontic.