StoreAdm.exe

  • File Path: C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\StoreAdm.exe
  • Description: Microsoft .NET Framework Store Admin
  • Comments: Flavor=Retail

Hashes

Type Hash
MD5 85B13A98346827385E170C43C6210B3C
SHA1 61C1A887413783704156BFFEBA52417351031D31
SHA256 246561721BBDAA384EB618093785B56138348D89D42BEC3C44D2DC58A4E4A40F
SHA384 4EBA056FFB76536FB10E3D79DD87EB8831DADF62035AF49E7AF981131C66448038AD3141B5C979166D9EF55E48FB80A3
SHA512 3B3B8A3169A0D2A09CDF2BC5C2B8BB04FD70B705255687779064D930FFA5F0ADD56D2AF9065C764D844132F6194A5AA358890FBF36CCFCE5FA7FC726C57D3A9D
SSDEEP 384:iwPAmUthIeIvBwHK4dfFxvvIKKJ9Yl6dnPU3SERztmbqCJstdMardz/JikPZ+tPl:IgKHK4dnYp6Iq89+jCuIWqW6S9xQ8va
IMP F34D5F2D4577ED6D9CEEC516C1F5A744
PESHA1 16430CFB21E5ECC1482773709E6FE5567237F37C
PE256 41E77088C5A46F9D9EFF0A166D9EE6072C8C5FF64A7732C9CF952855D1E68258

Runtime Data

Usage (stdout):

Microsoft (R) .NET Framework Store Admin 4.8.4084.0
Copyright (C) Microsoft Corporation.  All rights reserved.

Unknown Option --help

Usage    : StoreAdm [options]
options  : [/LIST] [/REMOVE] [/ROAMING | /MACHINE] [/QUIET]
/LIST    : Displays the existing isolated storage for the current user.
/REMOVE  : Removes all existing isolated storage for the current user.
/ROAMING : Select the roaming store.
/QUIET   : Only error messages will be output.
/MACHINE : Select the machine store.

Loaded Modules:

Path
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\StoreAdm.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000001519E8D8F4071A30E41000000000151
  • Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: storeadm.exe
  • Product Name: Microsoft .NET Framework
  • Company Name: Microsoft Corporation
  • File Version: 4.8.4084.0 built by: NET48REL1
  • Product Version: 4.8.4084.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/246561721bbdaa384eb618093785b56138348d89d42bec3c44d2dc58a4e4a40f/detection

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\System.Web.ApplicationServices.dll 47
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework.NETFramework\v4.8\System.Web.DynamicData.Design.dll 66
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe 63
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe 65
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe 63
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe 63
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe 63
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe 65
C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe 65
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe 66
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe 66
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe 63
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe 65
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInProcess32.exe 63
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess32.exe 63
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe 68
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe 63
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_regbrowsers.exe 65
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regbrowsers.exe 65
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe 66
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe 68

MIT License. Copyright (c) 2020-2021 Strontic.