convertstore.exe

  • File Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\convertstore.exe
  • Description: Symbol Store Conversion Utility

Hashes

Type Hash
MD5 47A94D2F58F4C4E6D08A74B0FEDC89A5
SHA1 F62136A19985E7C221C33CF94066EC6844307AE9
SHA256 0F72BA15E5B4D2165442A2E5067112CA39DBC662D6AACD39DEF798C0B611A79B
SHA384 5CCED5772EB87A84CF21BCB8641EEF89DC2A6B77ABB9C5005E84775763D15382DD343F31022CF85BF622993FB642459B
SHA512 DAC463B25F11B156E8333FC8D9152FF91B1398A8B1A79527EFC7C91DBCE03FCB73E8917AE47433237A639FCB5A4D9A66BFF21A45C42BC7B45FE33AAE973E3A7A
SSDEEP 384:VedjTrRcEAkitxblnH//rJQMeMo8EQL/ehZm2FWA9W0wGywvGzIwS+klTxs:VeNrOvPH6MeMv/Um2Zv9vgdOs
IMP 6E4B288FAC76E6107FB6FC0F6D9BA9D6
PESHA1 0EF6221F6EB8C591A309630B7C22B5518F46213E
PE256 F5167BBC1E049327D6BFACC823EB6BBBF1F16903064AF777896BBCE5B95131B6

Runtime Data

Usage (stdout):

convertstore.exe -s <StoreToConvert>
 Converts <StoreToConvert> from a 2-tiered symbol store
 to a 3-tiered symbol store.

Loaded Modules:

Path
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\convertstore.exe
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ConvertStore.exe
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: Unknown

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Smart Tag\SmartTagInstall.exe 32
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\pvk2pfx.exe 36
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\KernelDumpDecrypt.exe 40
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\api-ms-win-core-handle-l1-1-0.dll 32
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\api-ms-win-crt-math-l1-1-0.dll 35
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\api-ms-win-crt-runtime-l1-1-0.dll 33
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\api-ms-win-core-console-l1-2-0.dll 38
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\api-ms-win-core-libraryloader-l1-1-0.dll 35
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\api-ms-win-crt-runtime-l1-1-0.dll 36
C:\Windows\system32\downlevel\api-ms-win-core-errorhandling-l1-1-0.dll 33
C:\Windows\system32\downlevel\api-ms-win-core-localization-l1-2-0.dll 27
C:\Windows\system32\downlevel\api-ms-win-core-registry-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-core-timezone-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-crt-environment-l1-1-0.dll 29
C:\Windows\system32\downlevel\api-ms-win-shcore-stream-l1-1-0.dll 32
C:\Windows\system32\kd.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-core-delayload-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-fibers-l1-1-1.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-processenvironment-l1-1-0.dll 32
C:\Windows\SysWOW64\downlevel\api-ms-win-core-realtime-l1-1-0.dll 33
C:\Windows\SysWOW64\downlevel\api-ms-win-core-version-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-filesystem-l1-1-0.dll 30
C:\Windows\SysWOW64\downlevel\api-ms-win-crt-stdio-l1-1-0.dll 32
C:\Windows\SysWOW64\fltLib.dll 33
C:\Windows\SysWOW64\IME\IMETC\IMTCTRLN.DLL 29

MIT License. Copyright (c) 2020-2021 Strontic.