DiagnosticsHub.StandardCollector.Service.exe
Microsoft (R) Diagnostics Hub Standard Collector file version info
Program on Windows 8 known copies with hashes
Is it the real DiagnosticsHub.StandardCollector.Service.exe?
C:\Windows\system32\DiagSvcs\8 known copies
11.00.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
80e48fe4e6b5f610a252d929b7825f7741caed77c21ccdb3e439fc11cdb80e5c11.00.19041.928 (WinBuild.160101.0800) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
f4306705ab7722eb68cf4e24ffa1353b3d36b475b57f90b9e9ae8d16cf64e6b211.00.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
468ba4278b1a99387a91b2652aa0fac39784ab0460e52b2bd885f74b79a6e5a411.00.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
af2cf6b7de3a16048b65992dfc4fe15222da9ed597adff081290fb4f0358107711.00.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
170b85c15c3439cd8e6e309470f8d419a5586af6f55aa23c4af882432f1aa2b311.00.18362.719 (WinBuild.160101.0800) · C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
0aecf381f62f10cc5298c11e080cb7cc6eb2a24382031448ec0e4c0081e686da11.00.17763.503 (WinBuild.160101.0800) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
f1f299ef5a2d463e5860a3d26ad33ca3bb7ed3c55bce156e4245c35a857a2c4611.00.14393.3564 (rs1_release.200303-1942) · C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe · signed by Microsoft Windows
e05f044ffbb27e878764228504f5642023e729f98cc414be723b4f77fbff4cc8From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.