wsqmcons.exe
Windows SQM Consolidator file version info
Program on Windows 10 known copies with hashes
Is it the real wsqmcons.exe?
C:\Windows\system32\10 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wsqmcons.exe · signed by Microsoft Windows
c54275d41a0f0064588282cdcad216d8c8950c72df67edcf621fcca63006400210.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
4d7ff4545dc15ce1dd21a7bc596ad9c58c851e17e296a0323646dbfeff25176410.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
888730ce9f3b3e325c5746d5455d0404cf1f49d85a863f678c3fe7326834309d10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
b2c302908dcf70ebd1b1112312c702247197254cb7310addfd66184b931b7d2d10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
b78663af2c7177cbb51a1cb62219d8737acc5bd76a0d9c037c949406ff5768cb10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wsqmcons.exe · signed by Microsoft Windows
af15b949d7d153536c56c396ae66d318bc3b18a09cfe1fd74e2bcf2be3504ae510.0.17763.1 (WinBuild.160101.0800) · C:\windows\system32\wsqmcons.exe · signed by Microsoft Windows
4530b5a7aedf53cf8ff57f6237b5015c09deed0b1493662a9b21e3f4b676fe8c10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
c1d4ce55169a1ee0fb5e11dbf907df52ebba5a3914a754f4557cbec96a857c2010.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\wsqmcons.exe · signed by Microsoft Windows
9fd2d9fe6bb0620b8dbdbe1335ce93f508b3cb5cf7f5c053a5c91c2220ad43326.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\wsqmcons.exe · not signed
7313c269bd76053bd3613d04f7fcfb2b1a6a0537806bfe908d6d89eb8d570941From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.