Gridinsoft Logo

The MicrosoftStartFeedProvider.exe File Analysis

Updated 6 months ago
Checked by Malaware Check
MicrosoftStartFeedProvider.exe

Technical Analysis

File Name MicrosoftStartFeedProvider.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.197.174
Database Version 2024-11-23 18:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,273,344
File Size (bytes)
2024-11-23
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ee57bc0dd4bbe2978d75bf84095234c8
SHA1
9622606d9e941f31f47d767a36c9b58b7be19e57
SHA256
aa0ba4f3abfc927fb52dca8230e52de0ce20138d1a76ff11cc8cdcb07e398446
SHA512
910f6e17d16efb520e033481aabc3bc984e890d9a865064d0bfce2746c97da8ffe1c1f344ee4ec99f2d7da2d325fbdaa2e4344e320d92cb711b3e6506d94c962
ImpHash
c9fa1478bb774f6bd2655966fdf09fb4

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400af2d0
Compilation Time 2024-11-07 13:15:23
Checksum 0x00000000 (Actual: 0x00146439)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\__w\1\b\x64\MicrosoftStartFeedProvider.pdb
Digital Signature No valid SignedData structure was found.
Imports 29 libraries
Exports 0 functions
Resources 2 Resources
Sections 7 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileVersion 1.1.200.0
InternalName MicrosoftStartFeedProvider.exe
LegalCopyright ©Microsoft Corporation. All rights reserved.
OriginalFilename MicrosoftStartFeedProvider.exe
ProductName Microsoft\MicrosoftStartFeedProvider
ProductVersion 1.1.200.0
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 863,163 bytes 863,232 bytes 6.26 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ BC06B702123977E2FDD772EC31062F54
.rdata 0x000d4000 257,936 bytes 258,048 bytes 4.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1A5B9779F9BB8C1D222C19256BA788D4
.data 0x00113000 112,352 bytes 105,472 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F9682CC92043DFFAB0850045E3D579DC
.pdata 0x0012f000 36,576 bytes 36,864 bytes 5.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 99A10911B061BDCEEAB977B5C0A83FC7
.didat 0x00138000 72 bytes 512 bytes 0.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2750805B524CEB5FEFB0DFDB734B8FDB
.rsrc 0x00139000 1,688 bytes 2,048 bytes 3.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0DAC24818BC916F0892F13AD2AC9FCDE
.reloc 0x0013a000 5,924 bytes 6,144 bytes 5.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0445DA268DFA0A8F41D0FC39B5A8EFAA

Resource Analysis

▼
Total Resources: 2 (1,521 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 840 bytes
55.2%
RT_MANIFEST 1 681 bytes
44.8%

Certificate Chain Analysis

▼
Certificate Information
Product Microsoft\MicrosoftStartFeedProvider
File Version 1.1.200.0
Original Name MicrosoftStartFeedProvider.exe
Internal Name MicrosoftStartFeedProvider.exe
Copyright ©Microsoft Corporation. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware