2dd2d390dbaed8ee38fe50869df0d042d42d0f58b7ec9d6c58a986d28455a95c

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....up.dll

windows11-21h2-x64

MicrosoftS...nt.dll

windows11-21h2-x64

MicrosoftS...pt.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...or.dll

windows11-21h2-x64

MicrosoftS...el.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ts.dll

windows11-21h2-x64

MicrosoftS...es.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...er.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...ly.dll

windows11-21h2-x64

MicrosoftS...tp.dll

windows11-21h2-x64

MicrosoftS...ns.dll

windows11-21h2-x64

MicrosoftS...on.dll

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Microsoft....e.appx

windows11-21h2-x64

Analysis

max time kernel
145s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
23/07/2024, 15:04 UTC

Sharing

Copy URL

Twitter E-mail

Static task

static1

qr link

2 signatures

Behavioral task

behavioral1

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Microsoft.6365217CE6EB4_102.2406.5001.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Microsoft.UI.Xaml.Markup.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

MicrosoftSecurityApp/EcsClient.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

MicrosoftSecurityApp/Microsoft.AI.Agent.Intercept.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

MicrosoftSecurityApp/Microsoft.AI.DependencyCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

MicrosoftSecurityApp/Microsoft.AI.EventCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

MicrosoftSecurityApp/Microsoft.AI.PerfCounterCollector.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

MicrosoftSecurityApp/Microsoft.AI.ServerTelemetryChannel.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

MicrosoftSecurityApp/Microsoft.AI.WindowsServer.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

MicrosoftSecurityApp/Microsoft.ApplicationInsights.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

MicrosoftSecurityApp/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

MicrosoftSecurityApp/Microsoft.ConsumerSecurity.Client.OneAuthHandler.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.Binder.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

MicrosoftSecurityApp/Microsoft.Extensions.DependencyInjection.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

MicrosoftSecurityApp/Microsoft.Extensions.FileProviders.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Hosting.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.Polly.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Http.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Abstractions.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

MicrosoftSecurityApp/Microsoft.Extensions.Logging.Configuration.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Microsoft.6365217CE6EB4_102.2406.5002.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

Microsoft.NET.Native.Framework.2.2_2.2.29512.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

Microsoft.NET.Native.Runtime.2.2_2.2.28604.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

discovery

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x64__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Microsoft.VCLibs.140.00_14.0.33519.0_x86__8wekyb3d8bbwe.appx

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

MicrosoftSecurityApp/Microsoft.Extensions.Http.dll
Size

53KB
MD5

b05b35d780fe9df0af9f20d0aa46be74
SHA1

73686fb2a983accb694d79f2e5d82670f9c05768
SHA256

a823f4df89f5cd95fda7aa67afd253c94fe8530005933ca7f3673298aec0476d
SHA512

255824ac9e7099b5b10d1fd526a29f651be604828de1af955bd74692afc5679b5a1d23286c42062358e2604baedf7ee324c0d4a00f1bed85462b7ee9d76cabdc
SSDEEP

768:UiXdI1xImn17kkKBZkML9Fl14UoT3vzFPUJBflah0ukSL0B5m:vIIS1okKBb97FoT3vJQ0nBL0B4

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MicrosoftSecurityApp\Microsoft.Extensions.Http.dll,#1
1⤵
PID:592

Network

DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR

Response
DNS

27.173.189.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

27.173.189.20.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

14.227.111.52.in-addr.arpa

dns

144 B
316 B
2
2

DNS Request

14.227.111.52.in-addr.arpa

DNS Request

27.173.189.20.in-addr.arpa

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

DNS Request

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.