Suspicious executable detected Microsoft Store Purchase App

Juliortega — Thu, 28 May 2026 19:16:08 GMT

Hello everyone,

Has anyone seen this process appear in Cortex XDR?

C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22603.1401.4.0_x64__8wekyb3d8bbwe\StoreExperienceHost.exe

It’s showing up on an endpoint, but Cortex XDR isn’t providing any additional details, alerts, or related events. Before I dismiss it, I want to confirm whether this is expected behavior or if anyone has seen suspicious activity tied to this executable.

Any insight is appreciated.

topic Suspicious executable detected Microsoft Store Purchase App in Cortex XDR Discussions

Suspicious executable detected Microsoft Store Purchase App