.EMSIXBUNDLE

EMSIXBUNDLE File

Encrypted MSIX App Bundle
Ask a question
QUICK ANSWER

An .emsixbundle file is an encrypted MSIX app bundle for Windows 10 and 11. It holds one or more architecture-specific app packages (x86, x64, ARM, ARM64) that Microsoft's MakeAppx.exe tool has encrypted so the contents cannot be unpacked without the key. To open or install one you need the matching decryption key or enterprise certificate; developers decrypt it back to a plain .msixbundle using MakeAppx.exe from the Windows 10 SDK.

Developer: Microsoft Category: Executable Files MIME: application/msixbundle
OPENS ON Windows
Related: .APK · .EXE · .VBS · .JAR

On this page

19k+ extensions indexed
Last reviewed Jul 2, 2026

Not sure what your file is?

Drop any file into our identifier - we read just the first bytes to name the format.

Identify a file

What is the EMSIXBUNDLE file format?

A file with the .emsixbundle extension is an encrypted MSIX app bundle for Windows 10 and 11. It is the protected form of a .msixbundle, the packaging format Microsoft introduced in 2018 to unify how Windows apps are built and delivered. A bundle groups several app packages, each compiled for a specific processor architecture such as x86, x64, ARM, or ARM64, or for a resource set like a language or image scale. The store or installer then hands each device only the package it needs.

The e prefix marks encryption. When a developer runs Microsoft's MakeAppx.exe tool with a key, the parts inside the bundle are sealed so end users cannot unpack them. This mirrors how .eappxbundle relates to the older .appxbundle. Game studios use this to keep art and audio assets out of reach, and enterprises use it to protect internal apps. Under the encryption it is still an Open Packaging Conventions ZIP container with a bundle manifest and a block map of SHA hashes.

Security & safety

RISK: MEDIUM

An .emsixbundle is a Windows app installer package, so it can contain executable code. Encryption protects the contents from extraction but says nothing about trust: installing one requires the decryption key or an enterprise certificate, and it should come from a source you trust. Only install signed bundles from known developers, since a malicious package could run code on your machine once deployed.

Format details

in a nutshell
FULL NAMEEncrypted MSIX App Bundleaka Encrypted Windows 10 App Bundle, Encrypted MSIX Bundle
DEVELOPERMicrosoftsince 2018
MIME TYPEapplication/msixbundle
TYPEEncrypted application package bundle (OPC/ZIP-based container)

Programs that open EMSIXBUNDLE files

Windows3 apps
MakeAppx.exe (Windows 10/11 SDK) Free Run MakeAppx.exe unbundle /ep MyBundle.emsixbundle /d "C:\Out" /kf MyKeyFile.txt to decrypt and extract, or MakeAppx.exe decrypt /ep MyBundle.emsixbundle /p MyBundle.msixbundle /kf MyKeyFile.txt to convert it back to a plain bundle. Requires the encryption key.
Microsoft Visual Studio 2022 Freemium Install the Universal Windows Platform / Windows app development workload, which bundles the Windows SDK and MakeAppx.exe, then use the Developer Command Prompt to decrypt the file.
Windows App Certification Kit Free Provides a standalone copy of MakeAppx.exe under App Certification Kit for decrypting and validating packages without the full SDK.

Technical details

deep spec
EncodingBinary; Open Packaging Conventions (OPC) container based on the ZIP format, with encrypted package parts
ContainerOPC / ZIP archive holding one or more architecture-specific MSIX packages plus a block map and bundle manifest
CompressionDEFLATE per part (files compressed by detected type unless /nc is used); some parts stored uncompressed
EncryptionYes. AES-based content encryption applied by MakeAppx.exe using either a key file (/kf) supplying a base64 32-byte key ID and 32-byte encryption key, or the global test key (/kt)
StructureA bundle wraps several MSIX packages, each built for a specific processor architecture (x86, x64, ARM, ARM64) or resource dimension (language, image scale, DirectX level). Encryption seals these parts so end users cannot unpack them without the key.
IntegrityAppxBlockMap.xml stores per-block hashes (SHA256 by default; SHA384 or SHA512 optional) used for integrity verification
PlatformsWindows 10, Windows 11
NotesEncryption and decryption are only available through the MakeAppx.exe command-line tool; they are not exposed in the Visual Studio packaging wizard. Installing an encrypted bundle requires the corresponding decryption key or an enterprise certificate.
Typical sizeTens to hundreds of megabytes, depending on the number of bundled architectures and assets
Released2018
Latest versionMSIX (Windows 10 SDK, October 2018 Update / RS5)
Specificationlearn.microsoft.com

EMSIXBUNDLE conversions

Community Q&A

asked by users
Ask a quick question
Get help from people who work with EMSIXBUNDLE files. Be specific - include your system and software version.
No account needed · answers usually within a day

No questions yet - be the first to ask about EMSIXBUNDLE files.

Frequently asked questions

How do I open an .emsixbundle file?
You cannot open it directly. It is encrypted, so you need the decryption key or enterprise certificate. With the key, run MakeAppx.exe from the Windows 10/11 SDK to decrypt it into a normal .msixbundle, which Windows can then install.
Can I install an .emsixbundle without the key?
No. Installation and extraction both require the encryption key or a matching enterprise certificate. Without it the bundle is unusable, which is the whole point of encrypting it.
What is the difference between .emsixbundle and .msixbundle?
They hold the same content. .msixbundle is the plain app bundle; .emsixbundle is the same bundle after MakeAppx.exe has encrypted its parts so end users cannot unpack them.
How do I decrypt an .emsixbundle to a .msixbundle?
Open a Developer Command Prompt and run MakeAppx.exe decrypt /ep MyBundle.emsixbundle /p MyBundle.msixbundle /kf MyKeyFile.txt, supplying your key file. Use /kt instead of /kf if the bundle was encrypted with the global test key.
Where does MakeAppx.exe come from?
It ships with the Windows 10/11 SDK and the Windows App Certification Kit, both of which install with Visual Studio's Windows app development workload. The tool sits under the Windows Kits install folder.
Why would a developer encrypt an app bundle?
To stop end users from extracting the files inside. Game studios, for example, encrypt bundles so players cannot pull out art, audio, or level assets from the shipped package.

References

1Microsoft Learn - Create an app package with the MakeAppx.exe toollearn.microsoft.com
2Microsoft Learn - Installing Windows apps from a web page (MIME types)learn.microsoft.com

Keep exploring

across the database

Top extensions this week

1.AQQAQQ Instant Messenger File
2.CRDOWNLOADChrome Partial Download File
3.EXEWindows Executable (Portable Executable)
4.PARTPartial Download File
5.BINCD/DVD Disc Image (BIN/CUE)
6.DATProgram Data File (generic)
7.RPMSGRestricted Permission Message
8.TXTPlain Text File
9.MDMarkdown Document
10.NOMEDIAAndroid No-Media Marker File

Related extensions

.APKAndroid Package
.EXEWindows Executable (Portable Executable)
.VBSVBScript file (Visual Basic Script)
.JARJava Archive
.EX4MetaTrader 4 Compiled Program (Expert Advisor / Indicator / Script)
.APPXMicrosoft Windows App Package (AppX)

Free file tools

An in-browser file identifier and image converter - everything runs on your device.

Open the toolbox

Browse file extensions A-Z