Why is the Microsoft Store delivering downloads with different hashes?

5 pointsnilslindemann5 comments

I just noticed that the Microsoft Store delivers an EXE with a different hash sum, every time I download an installer from its Store.

For example, try downloading the Windows Calculator twice, you will see that the files have different hashes (It may be necessary to close the browser and delete all browsing data in-between):

https://apps.microsoft.com/detail/9wzdncrfhvn5

For example, I get these two hashes for the "same" installer downloaded there:

73D31DE1B708204FC97D77EFEC7C82EA9FEDF03F 6F3BC3056F30566D0E1A1F4E268976C64C847B5A

And here two different scans for the "same" installer.

https://www.virustotal.com/gui/file/40a4da31580660001aa58030d725a295854617499ee56aae5fe1e7691d3a8ac0 https://www.virustotal.com/gui/file/4923068471e240229ff7ba2d046b5246055d79ca24465f5307540e680781ad7e

Why is MS doing this? It seems this creates unnecessary work for Virus Checkers. It also seems to be a data protection issue.

View on HN