34246dac1670fc54914410c3f7404350a2dfdeca6aaf968390b3d0378585cace

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2052-Apr-07 00:13:50
Debug artifacts D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb
CompanyName Microsoft Corporation
FileDescription Store Installer
FileVersion 22609.1501.4.0
InternalName StoreInstaller.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename StoreInstaller.exe
ProductName Store Installer
ProductVersion 22609.1501.4.0+2ee876db97d84a09e734c9def92bfc09c32ab513
Assembly Version 22609.1501.4.0

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentControlSet\Services
 Contains domain names:
  • apps.microsoft.com
  • bat.bing.com
  • displaycatalog.mp.microsoft.com
  • dsx.mp.microsoft.com
  • http://schemas.microsoft.com
  • http://schemas.microsoft.com/expression/blend/2008
  • http://schemas.microsoft.com/netfx/2009/xaml/presentation
  • http://schemas.microsoft.com/winfx/2006/xaml
  • http://schemas.microsoft.com/winfx/2006/xaml/presentation
  • http://schemas.openxmlformats.org
  • http://schemas.openxmlformats.org/markup-compatibility/2006
  • https://apps.microsoft.com
  • https://apps.microsoft.com/?client
  • https://apps.microsoft.com/store/detail/
  • https://bat.bing.com
  • https://bat.bing.com/action/0?ti
  • https://displaycatalog.mp.microsoft.com
  • https://displaycatalog.mp.microsoft.com/v7.0/ratings?market
  • https://sfdataservice.microsoft.com
  • https://sfdataservice.microsoft.com/package-retrieval/Packages
  • https://sfdataservice.microsoft.com/package-retrieval/Packages?productId
  • https://storeedge.microsoft.com
  • https://storeedge.microsoft.com/v9.0/pages/home?market
  • https://storesdk.dsx.mp.microsoft.com
  • https://storesdk.dsx.mp.microsoft.com/v8.0/Sdk/products/contentId?market
  • microsoft.com
  • mp.microsoft.com
  • openxmlformats.org
  • schemas.microsoft.com
  • schemas.openxmlformats.org
  • sfdataservice.microsoft.com
  • storeedge.microsoft.com
  • storesdk.dsx.mp.microsoft.com
Info The PE is digitally signed. Signer: Microsoft Corporation
Issuer: Microsoft Marketplace CA G 023
Safe VirusTotal score: 0/69 (Scanned on 2026-11-05 13:12:21) All the AVs think this file is safe.

Hashes

MD5 1068a2195587674a2a30eedccf5d7cbd 🔍
SHA1 1c9a48f01956ec1687e23942216dc452995a53be 🔍
SHA256 34246dac1670fc54914410c3f7404350a2dfdeca6aaf968390b3d0378585cace 🔍
SHA3 2a6bb630e74f5e1f4cc3024f48596e47f8a5a1f3f2defdc5bd8288b741040116 🔍
SSDeep 12288:dVFH26FQk+k+De/3JTTKR0SkhNcp3IGx/YMC9+Xy34l1OsfzGPnx:xIwcpYGJYF92y3w1O06Pnx 🔍
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2052-Apr-07 00:13:50
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0xb0a00
SizeOfInitializedData 0xea00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000B28AA (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xb4000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xc6000
SizeOfHeaders 0x200
Checksum 0xc43d5
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8b601f14241990bf584476fbf1388519 🔍
SHA1 beafe2af447a99f687be398f011a8597bb753cf1 🔍
SHA256 caf54252773097aa44f0e1ee3f9f7684669d7b4f5b3fec0b3791912bfc1d456c 🔍
SHA3 4b729bb70294a50a93730c57836e4e56f926100eb80f86bc974d9740da095ba3 🔍
VirtualSize 0xb08d0
VirtualAddress 0x2000
SizeOfRawData 0xb0a00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.80981

.rsrc

MD5 ece13d6f8c7f7cd8fbf8eb5a4639c693 🔍
SHA1 75e03b556cc772cfad3ffc489a9b5d047506efed 🔍
SHA256 78d52bd8e6e9c1c4350c31951d73947307502f4b67f8a9bfee7d8cdc9cbc9abd 🔍
SHA3 5fc81e6ea831bf9384336feeec027e5484499db65e33a8d33eb8ee76e22ae077 🔍
VirtualSize 0xe72c
VirtualAddress 0xb4000
SizeOfRawData 0xe800
PointerToRawData 0xb0c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.92181

.reloc

MD5 5873b4892de386cd3880bfaa2a5a0c5b 🔍
SHA1 5c7ef2065ea2e94d346c549283dd1d446f0f7253 🔍
SHA256 a772236714e28a954ad335151be64fe53792f3a656e5488c1b6491b5c16429c4 🔍
SHA3 849b5590c9c226c22471e1192c9f06cd350cccd990b57c6836a96f173d9009d0 🔍
VirtualSize 0xc
VirtualAddress 0xc4000
SizeOfRawData 0x200
PointerToRawData 0xbf400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xa8be
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98622
Detected Filetype PNG graphic file
MD5 e1920b2d2c32e5fd9de1996223af1b86 🔍
SHA1 c2ff30c0335162ec41ce79041317a67580a2227b 🔍
SHA256 b3c2a1444d2e675822bedde154c84496c7aac4bd09111ca27db724f03dce32ce 🔍
SHA3 00e9e4f4adef554f2ddd92ca1db75de2de64c6451a248103371e1430bd3c846b 🔍

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.92954
Detected Filetype PNG graphic file
MD5 da8e3e80c3aeaeb40dfb975721c7e5f1 🔍
SHA1 8e5816f9b64d1c06503fc19cad937f757d60b8b3 🔍
SHA256 35132f70b7efed596bfceb50ba22bc9818755562ad01757a70906047575ac629 🔍
SHA3 fe81cc3f91968b6228b021eccb44230a39c2ebc069692289e0f43d029c480cc6 🔍

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xb1d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87134
Detected Filetype PNG graphic file
MD5 f1462b94ae6ecee09348ebf67c9abc2d 🔍
SHA1 2b668ba76d02532900aecc7279e1c4d793417323 🔍
SHA256 f16fc0e4d4c0cc2a229ed3ef56d76307ee6eed8beb91b4200f5a45f535e6b75f 🔍
SHA3 ac1fca33d3f4974f603c4ec15eaa593a74ea6e697784a9788da17809eec555f8 🔍

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x8a6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.83827
Detected Filetype PNG graphic file
MD5 7c74cc4f7aa204d18d173d8eb13df1ef 🔍
SHA1 4df08ea8d55d7905fd345a8aa43f6b4643155327 🔍
SHA256 cc5302c98d91a1adabd26b366025e724326b62885d3ecc498383f9d47b37821e 🔍
SHA3 7314786a7a7366bd16ecff7ecfbc12502f13128237897f0113e69ba5f37e3033 🔍

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x604
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.7652
Detected Filetype PNG graphic file
MD5 52f19b6a6037ecfe89165f6d1db58293 🔍
SHA1 3419496554326cf45450eadb63fee7d3fe346eeb 🔍
SHA256 e00b2e694d6f130866723df09075eeebb64c7643dc2f9fac888eb4eddb0e83ad 🔍
SHA3 61d6500c416a0255ceb1ad4f53e7cd4b4f891304cb2ccc6da3337c1d56aef285 🔍

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x41d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.62317
Detected Filetype PNG graphic file
MD5 02230dc49d5acdc7272b03d67b58a262 🔍
SHA1 02b7461bfe9af73fd04f62a4090d9615fdc40f93 🔍
SHA256 bef4e63981b44a29694ad23e6535f6924ba33ae6ddd4923cbaec6f04507be0a9 🔍
SHA3 572160b6c85d7c807f88b8453cd63459f1636ee89b9787ac1051d6c5bd3d990a 🔍

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x338
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.6268
Detected Filetype PNG graphic file
MD5 e630a12af57b2182dfd1702a89b37119 🔍
SHA1 4bb2221effaef02339d6c3c21aa69950f0c4d5b8 🔍
SHA256 68009bc47c108c92ff6b1f709ddba349bf787870b4a5e44f0fe40fec616288f7 🔍
SHA3 56b07a570a77eb66bf47fcc8336930d2240046094f7e16b2d4ef60cd42de24e1 🔍

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.4057
Detected Filetype PNG graphic file
MD5 e9469e7ee9736b85222533448e06624d 🔍
SHA1 3a608c306d778a322f74d165d04bddef7c82cc78 🔍
SHA256 3446a65994584932fff8ca47afe9d78e85a34384f7e758cb68ed50dfe2511f27 🔍
SHA3 9782b7f3cf21541d4cb0b5e42e5ec4654b0852f2c7c8d39ec1984175ae7e776e 🔍

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.9177
Detected Filetype Icon file
MD5 2153ee5e6942dd2478c68c9966f15ab7 🔍
SHA1 562a9df2a878487928dcc464d6c30b3532d741d9 🔍
SHA256 a1c9128cb07351f7ad154ce70d01ec05d5bc1f427157116e118295f3951ab077 🔍
SHA3 d6bee9f6fd2087030ab77e6ec8c7d597f80c0177bb061257ff723a88a5e0e147 🔍

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.4902
MD5 cd87b2812c76621f67bf1313b5b28757 🔍
SHA1 4e0b29e830b353ed1e5c380df67579f3dfa51471 🔍
SHA256 363e3af26bdf22777d2c768389e97d4984ce9d0d84febc7f0d6741c09266e7fe 🔍
SHA3 4f8a60ee1c557e5c037fc6ddf3e6c5b8d65ec110ec81003608c2a3e734d3091d 🔍

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0x2fa
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.27243
MD5 b60ae02ef2f22d7edd5c14f4d6f91ec6 🔍
SHA1 47508833f43f4abb2152c2361af06f010e4d4b1d 🔍
SHA256 eb9c33360d0f85d35d0bf5b7114c76766836ba50e3067cdb25ae43c39a183489 🔍
SHA3 094996d8aec3c6641357b9cbd83762c73bdfce0b8dda9c0a7ecd0332423c6541 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 22609.1501.4.0
ProductVersion 22609.1501.4.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName Microsoft Corporation
FileDescription Store Installer
FileVersion (#2) 22609.1501.4.0
InternalName StoreInstaller.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename StoreInstaller.exe
ProductName Store Installer
ProductVersion (#2) 22609.1501.4.0+2ee876db97d84a09e734c9def92bfc09c32ab513
Assembly Version 22609.1501.4.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2039-Jan-21 12:10:04
Version 256.20557
SizeofData 96
AddressOfRawData 0xb27d0
PointerToRawData 0xb09d0
Referenced File D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0xb2830
PointerToRawData 0xb0a30

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.