log-collector.exe
Summary
Log Collector - collects and forwards log data for monitoring/management platforms.
log-collector.exe is the 748th most commonly executed Windows program in EchoTrail's dataset, observed 4,521 times across enterprise environments. It typically runs from C:\Program Files (x86)\Msp Agent\components\log-collector\0.4.7 and it is most often launched by msp-agent-core.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Msp Agent\components\log-collector\0.4.769.9%
- C:\Program Files (x86)\Msp Agent\components\log-collector\0.4.419%
- C:\Program Files (x86)\Msp Agent\components\log-collector\0.4.66.46%
- C:\Program Files (x86)\Msp Agent\components\log-collector\0.4.54.64%
Top Hashes (SHA256)
- 504b1cd4325bd66e88a16e8b1e330be71a8c2314a046cc5a0ecba442e7f8fd6a69.9%
- 9919ad48775ab9d0cc1794109e8331729d985c186f639b4d85a5435e31fb897a19%
- 5b478f423c73cb0a75e5a65e9303b205e1efcbb27c80be60e2baefef9b9255d16.46%
- 253e863643c499eb330de917ccd177b7d17b802d8b2dc2c7a78bba4b626454004.64%
Process Ancestry
Top Parents
Top Children
- conhost.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about log-collector.exe
Rocky answers questions about log-collector.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.