9750e206bcb6f49682b61b10692d2915314392c93cb0f47a0999b659f3a76efe

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2052-Apr-22 05:55:47
Debug artifacts D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb
CompanyName Microsoft Corporation
FileDescription Store Installer
FileVersion 22412.1210.2.0
InternalName StoreInstaller.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename StoreInstaller.exe
ProductName Store Installer
ProductVersion 22412.1210.02.0+6d95ba5f267bc5310f887034d0b7572710fa93d8
Assembly Version 22412.1210.2.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C# v7.0 / Basic .NET
Info Interesting strings found in the binary: Contains domain names:
  • Resources.Strings.ca
  • Resources.Strings.de
  • Resources.Strings.es
  • Resources.Strings.fr
  • Resources.Strings.it
  • Resources.Strings.nl
  • Resources.Strings.ru
  • Resources.Strings.uk
  • StoreInstaller.Resources.Strings.ca
  • StoreInstaller.Resources.Strings.de
  • StoreInstaller.Resources.Strings.es
  • StoreInstaller.Resources.Strings.fr
  • StoreInstaller.Resources.Strings.it
  • StoreInstaller.Resources.Strings.nl
  • StoreInstaller.Resources.Strings.ru
  • StoreInstaller.Resources.Strings.uk
  • Strings.ca
  • Strings.de
  • Strings.es
  • Strings.fr
  • Strings.it
  • Strings.nl
  • Strings.ru
  • Strings.uk
  • apps.microsoft.com
  • crl.microsoft.com
  • displaycatalog.mp.microsoft.com
  • dsx.mp.microsoft.com
  • http://crl.microsoft.com
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
  • http://schemas.microsoft.com
  • http://schemas.microsoft.com/expression/blend/2008
  • http://schemas.microsoft.com/netfx/2009/xaml/presentation
  • http://schemas.microsoft.com/winfx/2006/xaml
  • http://schemas.microsoft.com/winfx/2006/xaml/presentation
  • http://schemas.openxmlformats.org
  • http://schemas.openxmlformats.org/markup-compatibility/2006
  • http://www.microsoft.com
  • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
  • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
  • http://www.microsoft.com/pkiops/Docs/Repository.htm0
  • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
  • http://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010
  • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
  • http://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010
  • http://www.microsoft.com/pkiops/docs/primarycps.htm0
  • http://www.microsoft.com0
  • https://apps.microsoft.com
  • https://apps.microsoft.com/store/detail/
  • https://displaycatalog.mp.microsoft.com
  • https://displaycatalog.mp.microsoft.com/v7.0/ratings?market
  • https://storesdk.dsx.mp.microsoft.com
  • https://storesdk.dsx.mp.microsoft.com/v8.0/Sdk/products/contentId?market
  • microsoft.com
  • mp.microsoft.com
  • openxmlformats.org
  • schemas.microsoft.com
  • schemas.openxmlformats.org
  • storesdk.dsx.mp.microsoft.com
  • www.microsoft.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Info The PE is digitally signed. Signer: Microsoft Corporation
Issuer: Microsoft Marketplace CA G 027
Safe VirusTotal score: 0/69 (Scanned on 2026-07-16 14:13:13) All the AVs think this file is safe.

Hashes

MD5 18c8ed5b0798250ce6f2b44a36e9c4e5
SHA1 8ff42c12080ecdb95e91bee4c74345219ec725c1
SHA256 9750e206bcb6f49682b61b10692d2915314392c93cb0f47a0999b659f3a76efe
SHA3 3cabf1a9f66ea7e8f51aaebf38db35eced541bfba41d089124be81f06040bd9a
SSDeep 12288:qB613t1V9A+Tac0RDffXJjyYp88oNHSy5viczGMwP2FC1Wf3VfXJjyNpo0:UG1k+2DR7BWYp88o44HP9BWNpo0
Imports Hash f34d5f2d4577ed6d9ceec516c1f5a744

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2052-Apr-22 05:55:47
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 48.0
SizeOfCode 0xf1e00
SizeOfInitializedData 0x12800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000F3C12 (Section: .text)
BaseOfCode 0x2000
BaseOfData 0xf4000
ImageBase 0x400000
SectionAlignment 0x2000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x10a000
SizeOfHeaders 0x200
Checksum 0x111707
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 dbb29f8d705190de48762c6a42bee867
SHA1 a11cf0e1adf2c14d634a6dd2837d04d9e1e70bb6
SHA256 60a27fab4b71bd2d5b7547b57983b1048e2b1fe009c4fcdf23db7b56bf6d4ab5
SHA3 e9752019548c1a8818144702a586e3ee69096d02f0385cd23948525945965646
VirtualSize 0xf1c18
VirtualAddress 0x2000
SizeOfRawData 0xf1e00
PointerToRawData 0x200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.74905

.rsrc

MD5 e3d1504cf71de56b855f8001eba8a3ef
SHA1 234ea834d550631aa22741c70157374738b44722
SHA256 8bbe3535beaeeb5556412d9bd3159e7e8e20d39e315a68c14f37b651c837df12
SHA3 3e5646b3eea213a842878b75f433136e1dbbccf82543605a402ec46626a5cce2
VirtualSize 0x12528
VirtualAddress 0xf4000
SizeOfRawData 0x12600
PointerToRawData 0xf2000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.93566

.reloc

MD5 4f49347970d7f26f344942ad4ed7c2aa
SHA1 974a9d9e44003a116da373445e133b2f12995952
SHA256 559616c48c971d4c98da64a76892a68a34700e614dbef6819a080e56c535f03f
SHA3 6140bb05af976dca6ad8242032b360ccddfa7cef3f9779035f633dddd267e6c2
VirtualSize 0xc
VirtualAddress 0x108000
SizeOfRawData 0x200
PointerToRawData 0x104600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0.10191

Imports

mscoree.dll _CorExeMain

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xd5e7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99126
Detected Filetype PNG graphic file
MD5 8e41232604330e60956a842c25dce187
SHA1 ce9e94b1f0c8f66d76e289694f1d2633ae58a48e
SHA256 5ef637eae0e21955990cdd62c4a504caee13b3425c65ca15f6901f72f819caba
SHA3 3d30d652736b0db931e98dd8b815ab5f64aa7b5419830502f2a6ac2710e8cb56

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1363
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.94256
Detected Filetype PNG graphic file
MD5 81d92613ec2ac50f66e80c0c1b7d1319
SHA1 bb83ecfdadf91ed328c95276490465c56bdb6a61
SHA256 9d4260153ea11cdf1c45cc6528b46a08f2045ec23c96d615bfc31e5c0d0c52b6
SHA3 623064d2ee68e440d7d267c2ff61dd5183538359e446577f7381548bd2aead79

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0xc9d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.92937
Detected Filetype PNG graphic file
MD5 12024de66206724a2e4f4d6a93e57741
SHA1 40e5b9896268d1e1f7b146b7f13e8f56f6198939
SHA256 edd56dd725ffae1ca4f0a5a6b54212c097a917a71620d460e74a278bf143b7e9
SHA3 ca130e0f3b9171a7a1a218af02cf5b575abef3ba3e19d019911e5e6c94284261

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x9da
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.89211
Detected Filetype PNG graphic file
MD5 d7cf9c044654c8ccca17a55b026a3d78
SHA1 0c94984c82c73e841a4f6ca2d1fd53880b3b467a
SHA256 d9bf5837c1697ca7e1f5c3c3275d4b1377eb87e6f6f1bfaa2069a9a913883968
SHA3 d122393d6bad93fe6915024aef59ecda7fc64745ec7a47ef61965a5b474fee45

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x691
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.80893
Detected Filetype PNG graphic file
MD5 dec0260c0a053386a0ca81709dd66d70
SHA1 f05e15ea5a4688f04c4916f7caae94eca6668f02
SHA256 22f9cb6b233689139650f5d2461b7acb43a26d82e2be584a814fff20d91c29ee
SHA3 f674cdbf1c4241d09dc66c9ba4272600e5b02cfcd3496eae14215c75b54658a3

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x490
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.76178
Detected Filetype PNG graphic file
MD5 6cf73ed1e416182483de37bbeb5dc6ae
SHA1 ce9f6887c45695a134fd9e24327a04df3a6b9342
SHA256 6e89eca207df1a7f523191bcbf6a364df738ef375b26a9db89a63b5848e5229c
SHA3 debdac993f009fc7867842e6f8a96c843262781000cdb61132104cb4c1d7673f

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x396
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68659
Detected Filetype PNG graphic file
MD5 c4e2955139bc69b781b91224b8c47fe9
SHA1 e8afa6adf2cfa8d51d6d2823a30e83fbab93b105
SHA256 1b5ce88564e5099b6664a69fa566b836d70edc7f96ab95fd7f6eb67fb32d4b95
SHA3 76c38e1e5a5e0ef1ad3dae5eb616802eaa752130a745877738c70ffe8db3a6f9

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x299
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.51668
Detected Filetype PNG graphic file
MD5 a3e0481c00db2602d9a10103a74fde83
SHA1 bef9f837b70b62b21696c4880336290bfb542434
SHA256 5ec8d849406b38a443b80e16e63f7be8bfd0e9cfe7e3c6398c03662bdefef320
SHA3 6d8eb73956c105cf6af3ec47d2219ae7a0713a5b7d48ebd9805830e6dc3f23cb

32512

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.00469
Detected Filetype Icon file
MD5 4a9f16eb56fa02548c03ecf07dfece60
SHA1 6d0234805fb86e2ccad911d33e1d9af4522e98ca
SHA256 31446c4275b597a2038030cb6e40d1a2316ba5ccb3338dd05148045230ad957b
SHA3 558e70e4735f7a81b280cb16263076ba6b3365a3696bf7135928f773b791409b

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3e6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.47919
MD5 a1925aede7b7c5e7982bfe079957caf5
SHA1 0be81ba1e0ad3ea4877efcd4c5a2e3872c4ab241
SHA256 d7e4b0e23575be71b98809e54368dcdbb03a4848494a86563d4ab1626f2668fc
SHA3 ece2a5004287500e0bdda5c0c303dc3932ed9681af447300b63e0502f90e958b

1 (#3)

Type RT_MANIFEST
Language UNKNOWN
Codepage UNKNOWN
Size 0xd21
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.01992
MD5 444f5f23916484f797192ce263cc33ac
SHA1 9b018b1641c4098405e24d0a8e8a1344b5112a52
SHA256 31d8103226217f46a673dfe9eabe89dbd733857c3411f8c24e910da5506eb8be
SHA3 c02fe033f03e2f7d9e9a4d234e416424a4c7125783287af7ebb803a0e1b6a7b1

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 22412.1210.2.0
ProductVersion 22412.1210.2.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName Microsoft Corporation
FileDescription Store Installer
FileVersion (#2) 22412.1210.2.0
InternalName StoreInstaller.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename StoreInstaller.exe
ProductName Store Installer
ProductVersion (#2) 22412.1210.02.0+6d95ba5f267bc5310f887034d0b7572710fa93d8
Assembly Version 22412.1210.2.0
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2069-Sep-28 10:37:12
Version 256.20557
SizeofData 96
AddressOfRawData 0xf3b38
PointerToRawData 0xf1d38
Referenced File D:\a\_work\1\s\src\StoreInstaller\obj\Release\net472\StoreInstaller.pdb

UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 1.0
SizeofData 39
AddressOfRawData 0xf3b98
PointerToRawData 0xf1d98

UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

RICH Header

Errors

Leave a comment

No comments yet.