d07b4fdfdf515589e32b7a68519d92d05d8a6f3aa2d7aea0d27280c9cb51b22d

Analysis

max time kernel
149s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
InstallDependencyAgent-Windows.exe
Size 2.7MB
Sample260721-xmpxtsec66
SHA256 d07b4fdfdf515589e32b7a68519d92d05d8a6f3aa2d7aea0d27280c9cb51b22d
MD5 8cdf666dac33043b3180d62844c2cda3
SHA1 27ff712893ff2c75d7992357303a60fd0027e8fc
SHA512 5b2fba2e7d0b7d56bd89de1e799389ddd4e7a94c43f9abce653e5359a67cb6bba84efd2ab65acd6e19275a2dd2758bbef5cb9ad919d9b33a6858dcb46f24a3a7
SSDEEP 49152:xSClB77MTqXqwHTD4vw0g4LH5XPy7bDUVVbN0SWrhLKxAfz3D5Gu3ptrkqto:XB7Nz34vBn5XTx0SWrYxAfLdGapJkqto
TLSH
T1C1D533432644015BE9A9AE3092B0EB773F6D5C2A69606F86C790B71321F23D3D63D58F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution installer

Malware Config

Signatures

Indicator Removal: File Deletion 1 TTPs
Adversaries may delete files left behind by the actions of their intrusion activity.
defense_evasion

File Deletion
T1070.004
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-processthreads-l1-1-1.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\config\MicrosoftDependencyAgent.properties	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\plugins\Watchdog.ps1	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-synch-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\config\MicrosoftDependencyAgent.properties.orig	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\ucrtbase.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\config\classifier-common.csv	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\logs\install.log	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-file-l1-2-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-heap-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-rtlsupport-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-heap-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\concrt140.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\Uninstall_temp.exe	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-file-l2-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-locale-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-localization-l1-2-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-namedpipe-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\dns-parser.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\logs\MicrosoftDependencyAgent.log	MicrosoftDependencyAgent.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-datetime-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-convert-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-stdio-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\plugins\lib\Utils.ps1	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-datetime-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-file-l1-2-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-handle-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-localization-l1-2-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-errorhandling-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-file-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-file-l2-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-processthreads-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-processthreads-l1-1-1.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-synch-l1-2-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-environment-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-runtime-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\plugins\lib\VmssUtils.ps1	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-memory-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-processenvironment-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-rtlsupport-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-sysinfo-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-string-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-utility-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-synch-l1-2-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-heap-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-convert-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-process-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\tls-parser.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-console-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-file-l1-2-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-heap-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-console-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-debug-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-synch-l1-2-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\concrt140.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\MicrosoftDependencyAgent.exe	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-runtime-l1-1-0.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\udns.dll	InstallDependencyAgent-Windows.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-file-l2-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-core-interlocked-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-math-l1-1-0.dll	xcopy.exe
File created	C:\Program Files\Microsoft Dependency Agent\bin\api-ms-win-crt-stdio-l1-1-0.dll	xcopy.exe
File opened for modification	C:\Program Files\Microsoft Dependency Agent\bin\tls-parser.dll	xcopy.exe

Executes dropped EXE 7 IoCs

pid	Process
4384	agentcmd.exe
5780	agentcmd.exe
3376	agentcmd.exe
4716	agentcmd.exe
4560	agentwrap.exe
2016	MicrosoftDependencyAgent.exe
2720	depagent.sys

Loads dropped DLL 60 IoCs

pid	Process
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
4384	agentcmd.exe
4384	agentcmd.exe
4384	agentcmd.exe
4384	agentcmd.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
2584	InstallDependencyAgent-Windows.exe
5780	agentcmd.exe
5780	agentcmd.exe
5780	agentcmd.exe
3376	agentcmd.exe
3376	agentcmd.exe
3376	agentcmd.exe
4716	agentcmd.exe
4716	agentcmd.exe
4716	agentcmd.exe
4560	agentwrap.exe
4560	agentwrap.exe
4560	agentwrap.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2584	InstallDependencyAgent-Windows.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
3012	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	net1.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	InstallDependencyAgent-Windows.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	xcopy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	net.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
behavioral2/files/0x000d00000001c45b-214.dat	nsis_installer_1
behavioral2/files/0x000d00000001c45b-214.dat	nsis_installer_2

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	MicrosoftDependencyAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	MicrosoftDependencyAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	MicrosoftDependencyAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation	MicrosoftDependencyAgent.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	MicrosoftDependencyAgent.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	MicrosoftDependencyAgent.exe

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier	xcopy.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe
2016	MicrosoftDependencyAgent.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
808	Process not Found

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	4560	agentwrap.exe
Token: SeDebugPrivilege	2016	MicrosoftDependencyAgent.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2584 wrote to memory of 3012	2584	InstallDependencyAgent-Windows.exe	89
PID 2584 wrote to memory of 4384	2584	InstallDependencyAgent-Windows.exe	91
PID 2584 wrote to memory of 1228	2584	InstallDependencyAgent-Windows.exe	93
PID 2584 wrote to memory of 5780	2584	InstallDependencyAgent-Windows.exe	95
PID 2584 wrote to memory of 3376	2584	InstallDependencyAgent-Windows.exe	97
PID 2584 wrote to memory of 4716	2584	InstallDependencyAgent-Windows.exe	99
PID 4716 wrote to memory of 2168	4716	agentcmd.exe	101
PID 2168 wrote to memory of 2468	2168	net.exe	102
PID 2584 wrote to memory of 1832	2584	InstallDependencyAgent-Windows.exe	103
PID 1832 wrote to memory of 3016	1832	net.exe	105
PID 4560 wrote to memory of 4616	4560	agentwrap.exe	107
PID 4560 wrote to memory of 2016	4560	agentwrap.exe	109
PID 2016 wrote to memory of 6060	2016	MicrosoftDependencyAgent.exe	110

C:\Users\Admin\AppData\Local\Temp\InstallDependencyAgent-Windows.exe
"C:\Users\Admin\AppData\Local\Temp\InstallDependencyAgent-Windows.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2584
- C:\Windows\SysWOW64\cmd.exe
  "cmd" "/c EXIT 3"
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  PID:3012
- C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\agentcmd.exe
  "C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\agentcmd.exe" fixdeleteonreboot
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4384
- C:\Windows\SysWOW64\xcopy.exe
  xcopy /E /Y "C:\Program Files\Microsoft Dependency Agent\bin-20260721200024"\x64\* "C:\Program Files\Microsoft Dependency Agent"\bin\
  2⤵
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  PID:1228
- C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe
  "C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe" -o logs\install.log install
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5780
- C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe
  "C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe" -o logs\install.log installcollector
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3376
- C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe
  "C:\Program Files\Microsoft Dependency Agent\bin\agentcmd.exe" startdriver
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:4716
- - C:\Windows\System32\net.exe
    net.exe start depagent.sys_134291340257218633
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2168
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 start depagent.sys_134291340257218633
      4⤵
      PID:2468
- C:\Windows\SysWOW64\net.exe
  net start "Microsoft Dependency Agent"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1832
- - C:\Windows\SysWOW64\net1.exe
    C:\Windows\system32\net1 start "Microsoft Dependency Agent"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3016

C:\Program Files\Microsoft Dependency Agent\bin\agentwrap.exe
"C:\Program Files\Microsoft Dependency Agent\bin\agentwrap.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c del "C:\Program Files\Microsoft Dependency Agent\\storage\*.?b"
  2⤵
  PID:4616
- C:\Program Files\Microsoft Dependency Agent\bin\MicrosoftDependencyAgent.exe
  "C:\Program Files\Microsoft Dependency Agent\bin\MicrosoftDependencyAgent.exe"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks SCSI registry key(s)
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2016
- - C:\Windows\system32\diskperf.exe
    C:\Windows\system32\diskperf.exe -Y
    3⤵
    PID:6060

C:\Windows\system32\drivers\depagent.sys
C:\Windows\system32\drivers\depagent.sys
1⤵
- Executes dropped EXE
PID:2720

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

NOTICE.txt

Path C:\Program Files\Microsoft Dependency Agent\NOTICE.txt
Size 40KB
SHA256 daef948ac219eac42ddcbd2f9e6477fef98e470af0db228f40a25a573efb8717
MD5 a086a809da3f77a1a0b71728bba0fe53
SHA1 ef24b6d89febec51b48048d86583b7b90a3af7e8
SHA512 9c705a90e9ef7f62db34d799ed661926793019db2359d8cd053c04c8cb0c0f767283e9543667fce3d87c93f8bd8a5522d9f6ba84828871f430e79e727da3ff10
SSDEEP 768:RtBJsP80TeLlLkF/TfjZRBfuofuoRNxw4s9XMzOLaT:RtBKOgxTfjHBfrdNxw4vOLaT
TLSH
T15513952EBF0603B216E2C2816A0FA4DEF31E907A326B5954749DC15C277B82543FE6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Uninstall_9.10.18.4770.exe

Path C:\Program Files\Microsoft Dependency Agent\Uninstall_9.10.18.4770.exe
Size 146KB
SHA256 d93cdcb4723bab2f64a69d34333b742953af0277cb4f3cb633d029aa262c879b
MD5 a34cdeca09d7b1c339b16917a503cf16
SHA1 7e4c5e4438061c7f4db9998988a599711aeb741c
SHA512 d38cbb331117043ef5606eebb7febd69934e7a4c353183ef23e240d9b0190d614602a0fd7d93df59aca52b4f722f5f2c940147edb95af81fde5b4d80b71de5ec
SSDEEP 3072:nYjClDhQlDvrcIzXWZAQ6mXNnpVhVthiU96M3fewMqdMi630YjlrFsRE:nDOdsAQhXNpBthl3WwMqB6DGE
TLSH
T10CE3E0539A00C083CCA70A709275FD7B3F768E9A25506D079794BD9638B3383DB2E399
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSVCP140.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\MSVCP140.dll
Size 613KB
SHA256 99e3e25cda404283fbd96b25b7683a8d213e7954674adefa2279123a8d0701fd
MD5 c1b066f9e3e2f3a6785161a8c7e0346a
SHA1 8b3b943e79c40bc81fdac1e038a276d034bbe812
SHA512 36f9e6c86afbd80375295238b67e4f472eb86fcb84a590d8dba928d4e7a502d4f903971827fdc331353e5b3d06616664450759432fdc8d304a56e7dacb84b728
SSDEEP 12288:dO93oUW7jh6DN0RUhsduQjqDZ6X/t5mTOKGmJ7DseBiltBMQEKZm+jWodEEVoFt:s3oUW7jh6DN0RUhsduQjqDZ6X/t5mTOo
TLSH
T19DD40927AB5905B4E052E378A1C78711D7F1BC058322E3C782A6E27D2F673D5AB3B650
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MicrosoftDependencyAgent.exe

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\MicrosoftDependencyAgent.exe
Size 2.1MB
SHA256 e52a7bebae312b8bfaab6811a35ae8877d1194bddaaaff6845c72916d217efbb
MD5 fa7af394d99a07cd5e250f3e93ac21e5
SHA1 98fbc1ee16ac79284d78dede4f463a407a347b19
SHA512 f275cf43c6daad5e96a84a1524653bca1bf9d583d5ddd6b64653bdbd1f40bf94ebe5a96d3aae47e56e79474c110d740091378f88a241b899fd0ce68f74513c52
SSDEEP 49152:3pCcCsIiLcPucYC0HxILwIFNpxpoIQd0ct3JXdH9kr0XEHYRGknTYYLd0ph/294o:5CfZteSwJTz
TLSH
T158A56D2B2BA841EDC25BA27C9646DF43F6B1B04A073295DF079041BA1FA77F14E3D621
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\VCRUNTIME140.dll
Size 83KB
SHA256 2b7602cc1521101d116995e3e2ddfe0943349806378a0d40add81ba64e359b6c
MD5 1453290db80241683288f33e6dd5e80e
SHA1 29fb9af50458df43ef40bfc8f0f516d0c0a106fd
SHA512 4ea48a11e29ea7ac3957dcab1a7912f83fd1c922c43d7b7d78523178fe236b4418729455b78ac672bb5632ecd5400746179802c6a9690adb025270b0ade84e91
SSDEEP 1536:U3qPWvVCMgfw2eeWqjOebgk0jIpePxd76LGYU8j6ecbolG8EB4h88ii0:U66dsFeeBGPj1L6LGY+ecboC/8ip
TLSH
T169837D4577E402BAE06BD074C0A29E47FB72B585873047DF036996AE0F53BE24E39B52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

agentcmd.exe

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\agentcmd.exe
Size 94KB
SHA256 485d7466e66aede08ec4d575c4af91b1ed9ac0c1a1c7fa8592b8d8a3630d94ac
MD5 52cc2f5fd576834b16705b49e70c7a49
SHA1 5bc7d6b508d4c20b191f41a30e46e19ed85b3a4e
SHA512 f07c7a3e2bc23d12646449a7ea0b2bfa9d805bf1afaa2bf7f9bd7cd30ed5864d3d95d7bf273d1d9d02f2a88dc32ffec18b4072bf91f15f551215983e2663e009
SSDEEP 1536:i/ZXQLj9h2XvArRt6Z9Sj3J0Nh6MSyq/x/S6Rtl4d0cCFbF+xHy9jhRdabjzUL9:mZXQ/9h2XvAryMjCNh6MSy0SwkCFbF+A
TLSH
T1E393083A59D902F0CCABA1B5ECB584237B61F4050F74279F066385684F673CA7D3E896
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

agentwrap.exe

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\agentwrap.exe
Size 37KB
SHA256 c3e710537ea512815174af8d3d61ea02fe6e4c70264963a8630aa3420b4ba798
MD5 0e3020b20a5dd68c4ecedfb1c5b98486
SHA1 44790e34e47e55d34d02b7842d60cb7855416af8
SHA512 4b2041c427a940ff89dc1f84a2491d03c7717ed1097695cd30fceb52c86dcffc4f5b1ccc5cc56d5b920f6dccf1de3e920cd5d34060afad5c406a12104c861444
SSDEEP 768:YP7/WIOyMHtk4r6m8HFnsssJOwzaA9zUQ:O7VWtk4GmMsxOmaIzR
TLSH
T12F038E66A77841E7D9A790B0C471A667EC7877E2132093DF03A497180E633D1AB3D74E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-console-l1-1-0.dll
Size 20KB
SHA256 89384f8f64a9b7f67c8deccaa721e2d76b8a17026d8083630859ed0cd1a9b58b
MD5 2c146bc8d73b8944f35506241b9953a9
SHA1 ac64abd745418cea35c0506b9cb0331b171b51ea
SHA512 02713948a156baccb2e7c38646193e82fef65400c086644866b698bc3e0a8c155a8eab829463e3868ce2b8a06608c5ea6de1e390bff976c5f92e2e42dd6c04f1
SSDEEP 384:WyWfhWoLm0Gf21MgKlx+YEL1MgKlx+YybT:AVRig8Xg8yf
TLSH
T151923AC38EBC9443EE976DB017A8D9837C3C9BC72910916515BAF5A91CC37D6EB0462C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-datetime-l1-1-0.dll
Size 20KB
SHA256 12d801992bbb09d43bb90330bb96e77bf12e669c325dda4b5235942221c301c8
MD5 f0c9c56f56ffa3adc548173569dbd793
SHA1 220a56b84cdb8cd403483d3f6b4bb526fe198fd9
SHA512 28e24a2ccedfaf01aef615c1df7f8c76ff0eb06d992eb1b422f902d6d96357ba6a353e31ca9b1fd305e7de7a437ee6a7f2f01bfdf27c4a88c805693ae2b6352c
SSDEEP 384:W1WfhWFLm0GfYKllGBwLeqvYqldlx9yNZ7:FsREL7gl
TLSH
T1F5922BD29ABC8443EE93BD7013A8E9837D3C67D72A10916605BAF5ED1C837C2DB1452D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-debug-l1-1-0.dll
Size 20KB
SHA256 64a9ac181fd91b79270bf01759749394f57be171436ed46f43d165325bb82067
MD5 02d669afdabfe420598041b848b71158
SHA1 25c0fdbc04ffcd570db041d02842d7530afeeb6e
SHA512 5321290ec277fca8840e6c9cb7e77d39e820b1d98ef9c29040efaf2a7628c023209c936e08abfb6962a795130874544db25e1bac0d16256a1ebbca0fdcdaa81a
SSDEEP 192:W9WfhWaf40V2sms/nGfeMiQd8fZvqnaj9WWPMFwJEfFF/WWFYg7VWQ4CWWPu2uo5:W9WfhW2Lm0Gf38xlZWWkiJEB+2ZlxrXr
TLSH
T1BC921AD2CBBC9443EA937E7013A4D9837C3CA7C72D10916505AAF4E91CD37D6AB14A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-errorhandling-l1-1-0.dll
Size 20KB
SHA256 44822ae123a3d6c3a8bdf9a4d65a4dc89eb31004c72fcfcefa1dc3a53ff3eab0
MD5 944a33d971704ff815a6c90733d0a72e
SHA1 7d8b9f68a3983a1b86bf4bae085cd5ca6f464921
SHA512 4d93dece856a24e50f12a53155e07f1aab501b17e7bbfcce205e1b37d2799caf3681b1770c522ba986ac3badba59d5d95a7526fe19f86a7b0d3d933ea73754e2
SSDEEP 384:WeAbDWfhW7Lm0Gfr1MgKlx+Yz2OwkZJl0huSwpvPr:DAbgiRRg85wkWhepvPr
TLSH
T178921AD29ABC9443FE937DB023A8D983BC3CA7C71D10819505A9F5E92C937D2EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-file-l1-1-0.dll
Size 23KB
SHA256 c15dacec228f40ce4c5b9d69bba5e6627bc484c6e9d6550a76db6f332e9f7734
MD5 fec01082bccddadad0814f30b43ab078
SHA1 a6f6d9b61bb743651d3f65824d06427ca492c120
SHA512 c6039c366cb47ca31c7501423384afc0678a07abeb0ca1d97ecb5aa3c3e3acf84c9551dea1e56d1dbd4472dab70eed1c79d1c0612ba2730327ce6d0dc151c441
SSDEEP 384:WmBPvVXuWfhW7Lm0GfQ2zlxCHLXYEv0l9K8e:7PvVXvGRtLl
TLSH
T112B22BD3D9B8E143ED8FAD7112A1D9437C3C93C7082540951AA9E6AD2CD73C2E74896D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-file-l1-2-0.dll
Size 20KB
SHA256 27878021c6d48fb669f1822821b5934f5a2904740bebb340b6849e7635490cb7
MD5 b5060343583e6be3b3de33ccd40398e0
SHA1 5b33b8db5d6cfb0e8a5bb7f209df2c6191b02edb
SHA512 86610edc05aa1b756c87160f9eefe9365e3f712c5bed18c8feca3cae12aef07ccc44c45c4be19dc8f9d337a6f6709b260c89019a5efcfe9fa0847d85ab64d282
SSDEEP 384:W7WfhWnLm0Gf0Kuh1MgKlx+YTVtZKllGBwLx:3yRREg8JtcLx
TLSH
T1AD9209D29A7C8443EA937D7017A8DA837C3C97DB2A1081A505BAF5ED1C837C6EF1462D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-file-l2-1-0.dll
Size 20KB
SHA256 c55eb043454ac2d460f86ea26f934ecb16bdb1d05294c168193a05090bf1c56c
MD5 2e8995e2320e313545c3ddb5c71dc232
SHA1 45d079a704bec060a15f8eba3eab22ac5cf756c6
SHA512 19adcc5dd98f30b4eebefe344e1939c93c284c802043ea3ac22654cf2e23692f868a00a482c9be1b1e88089a5031fa81a3f1165175224309828bd28ee12f2d49
SSDEEP 384:WnVzWfhWSLm0GfHJl0huSwJU5YiKllGBwLbyr:CVQnRHheJUadLbyr
TLSH
T1C99209D29ABC9443FA937DB013A8DA837C3CA7C71A10816505AAF5D92CD37C2EB1496D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-handle-l1-1-0.dll
Size 20KB
SHA256 6dcbdab7fa8cf66f4a05d1f5166bed33cd88bee1d37af6128f18184e6c301709
MD5 31ffff2c6539b3d2f575500300b93d6b
SHA1 e28e8919150fca0cb385f55a4ec4d23058d92fbf
SHA512 716f42f0dc530774665982f189a1fbf0371aceb4087de67e5b677cb18a687900c73165a57ae8229b53744e2490d4f04a54686e09da3b5d8705e1df5b804fe27d
SSDEEP 384:WIWfhWgLm0GfE8xlZWWkiJzebPqldlx9yNVLzX:OxRviWhX
TLSH
T16D922BD2CABC8043EE937D7017A4EA837D3CA7C7291091A505AAF5ED1CD37D6AB1062D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-heap-l1-1-0.dll
Size 20KB
SHA256 2e00c0176952d7c009b93c40949f91f0ab367a1b274ee78b736bf563f0344da3
MD5 c7120579bb8f56f8cd4e0d329ece3e9d
SHA1 0b35862dcc9654fc4ede338c26d0368c112d4ba9
SHA512 6172179c349f9952e6fb47a72a459ee29563a511d9da2a16a265625f1d8ca40ff9bd52f78a26d29b5297e7413bfa22a9797df2934a68ea551d0ab45914ee7822
SSDEEP 384:WMlKWfhWGLm0Gfomv0l9K8hHTRQg6gl9iI:zLRftuU
TLSH
T1A6924AC6CABC9043EA977D7023A8D9837C3CA7C72C20816515AAF5992CD37D2DB2563D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-interlocked-l1-1-0.dll
Size 20KB
SHA256 d4d86e560a22d833fcdf0ba165d3bd3f6059e69830f4d2f9748af08905b2d4c8
MD5 1144ced0d8198c39f62fc71c1ecf6cb1
SHA1 43ca991199a46ca1860f8a295209dee6d32d040d
SHA512 006b420d4513fd2be1e07f7512891275cb76243fd4d49855836da53ff779fa695b9bd5661fa16b1c8f83d8cec6342c9719def8d3242431b13e803bdbc2d81e4b
SSDEEP 192:W/WfhWfv40V2sms/nGfecTTCeJgLIyqnajV4hhZ7si8WWFYg7VWQ4mWwsMbus/qm:W/WfhWtLm0Gf3CeAplx4bZxcyv0l9K8
TLSH
T16D923CD28ABC9083EAA37D7017A4D9877C3CA7C71D20816505AAF5E91CC77D2EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-libraryloader-l1-1-0.dll
Size 21KB
SHA256 655bade7ff61f01a803e7532082b14ae354442b0f65ef8164f824d0cfa033e6f
MD5 2acf6db396a86e2bef9d6ddf6919581f
SHA1 c67615b97b74776fa64407e7644f92cd14336cbb
SHA512 9a804bad2a9f220281cd3c20dbc96c023819da96cd24341c597a9d076b5fd176ec9da8e6a227628156827294cfb460e78d41eb053e133b1038a305c996453a36
SSDEEP 384:W7vuBL3BrWfhW5Lm0GfwMs2ZlxrXwulS+Jl0huSwpMu:ZBL3BIsRT8uhepMu
TLSH
T1F8A219D2CABC9183EAD36D7053A4DA837C3CA3C7592080A505ADE5DA2CD37D2EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-localization-l1-2-0.dll
Size 22KB
SHA256 646b28a20208be68439d73efa21be59e12ed0a5fe9e63e5d3057ca7b84bc6641
MD5 54d2f426bc91ecf321908d133b069b20
SHA1 78892ea2873091f016daa87d2c0070b6c917131f
SHA512 6b1b095d5e3cc3d5909ebda4846568234b9bc43784919731dd906b6fa62aa1fdf723ac0d18bca75d74616e2c54c82d1402cc8529d75cb1d7744f91622ac4ec06
SSDEEP 384:WXOMw3zdp3bwjGjue9/0jCRrndbWsWfhWkLm0Gf7t6gl9i7uBJl0huSwprv/N:6OMwBprwjGjue9/0jCRrndbGVRdGOheT
TLSH
T121A229D2D6B8D143F94EBC71226AD5437C3CA3CA1821859102FAFA992CE37D6E71463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-memory-l1-1-0.dll
Size 20KB
SHA256 13ae84007249d532f326a00ad62e5c1f463581f30701e662bb1b3658c4c32a07
MD5 e7b662ffa023b7f07a85ac3fb8910c11
SHA1 261edc0c4068771f0d070c17e0721d8a1bfcaf9f
SHA512 8df890a9aa191b594bbc033bc384deb27f9e4110e51632f681b33061b4370cec6ff2d637b20a38fc882ddc74dd8247f177cea2b05a13655e7b49e07bc280d756
SSDEEP 192:WJqWfhWN940V2sms/nGfesTvMbus/qnajBMh8PAU8QWWFYg7VWQ4SWbSeJgLIyqE:WJqWfhWtLm0GfDv0l9K8oWXeAplx4bZw
TLSH
T122922AC69ABC9443EA937D7017A8DA83BD3DA3C72C10816505BAF5961CD33D2EB1493E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-namedpipe-l1-1-0.dll
Size 20KB
SHA256 84cec1a1aaf344a93581b0f0c293623cd07652982a9f54f2fc879092512c4d92
MD5 da29d8d5a978e12d07f930f402e14180
SHA1 568943dedabc74749db557cbb398b9d72d57501a
SHA512 da65f9490f46b2509c4e15a82879ce64baa947fc978f20e052fb9bb9d002bb9c21a5b847d1d6258a4fa5747fcd22542f246b14653f5a67c528d60f919ede70c5
SSDEEP 192:W/WfhWNs40V2sms/nGfesdIeMbus/qnajBMh8XXWWFYg7VWQ4SWZCAzNXO0vqnaS:W/WfhWgLm0Gfuev0l9K8X1ZY1lxd3EQO
TLSH
T12A9219D296BC9043EE977DB013E4DA837C3CA7C72910816515AAF8E91CD37D1AB2463D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-processenvironment-l1-1-0.dll
Size 21KB
SHA256 c6e8472ffc639ccd9c07e7f6954da9ae94779cb9a81acb11ed3588cdca1182b0
MD5 d67863ab55ef2a9d195870c360ceaeb4
SHA1 b0a604463be51ef269f203e3a3be25b1d874ed05
SHA512 b12fd7f7e9767f824810d2b3ed1fc3cb8d222c95a3894adaaed7e48cc9d690333e68665c622f0b9f3775b0a8b3e043b1e97b6987abb1ae68b94dda60d83371a2
SSDEEP 384:WPWWfhWJLm0GfTJl0huSwJ4w7ixH2zlxCHJV:owR5heJ4w7iF3
TLSH
T10AA22BD29ABCD043FA977D7013A8E5977C3CA3D71D108065056AF6AA2CD33D2E714A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-processthreads-l1-1-0.dll
Size 22KB
SHA256 a1a413de3c85658d1672aa4c6aa77056e1a4884ab9ed5bb572cad991c9b348db
MD5 d5fc4afae80dc3abf97b716416bc2952
SHA1 cd0fd43345393b633c315b489ee85fd846597ce6
SHA512 d5fe2058bf212136248afe0675477ec03defab7db7e08667f9cf1fd9c1fb87d639a3af049639f7d1bfa136728d3ea420d85bcd20f8f3a39dda95cf69098d0bf2
SSDEEP 384:WsVWXk1JzNcKSIHWfhWoLm0GfA5KllGBwLcISODJl0huSwpFe8al:DVbcKSt5RF8LvSOkhepFrk
TLSH
T179A219D6C9BC8183F9866D7123A8E9937C3DD3CA1E25416105A9F1E92DE73C2E72853C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-processthreads-l1-1-1.dll
Size 20KB
SHA256 51a73fbfa2afe5e45962031618ec347aaa0857b11f3cf273f4c218354bfe70cb
MD5 d1b3cc23127884d9eff1940f5b98e7aa
SHA1 d1b108e9fce8fba1c648afaad458050165502878
SHA512 ee5e0d546190e8ba9884ab887d11bb18fc71d3878983b544cd9ab80b6dd18ad65e66fe49fe0f4b92cbc51992fb1c39de091cf789159625341a03f4911b968fa2
SSDEEP 384:W0t9DfIe9jWfhW8Lm0GfMjqldlx9yNTVvgwr92ZlxrX:fwe9AtRhZ9VU
TLSH
T123922BD2C6BC9043EA977D7013A8E9837C3DA7C7292181A505BAF5E92CC33D1EB1552D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-profile-l1-1-0.dll
Size 19KB
SHA256 9518b9399ac4d459122e428173b2baaccd92c02e585a13e58a7812fad7012381
MD5 2e19bdbf51d8caf97b2bcb886fdc5b2d
SHA1 5277e6a9660606d58a116776fbabd92fc4cdb417
SHA512 0af6a11e4704a7251ca9b3ebe1269b24aff6620545895f33a60e04f8587738a02919f7e4d1fccb9a59a0a697560c8bf0ad64a3cff99ce7da4ca972bb3e704367
SSDEEP 384:W/IWfhWbLm0GfL71MgKlx+YvclPNqldlx9yNF:ymRtg8kt
TLSH
T131922BC2CABC9043EE937D7057A8E9437C3CA7D7292481A505BAF4E91CC37D6AB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 20KB
SHA256 197a57651e3014f9f3cf21fbcaa718de63f0a76f222a3ad08f287bfedc101bfa
MD5 e8789ec050c879b856f1f13b9cee6f3a
SHA1 8264646f975c87e89803fa62d5ceeb0100f38214
SHA512 417785e476ea1a8ae88dc872683f4e5ef12695f4e74ec68f3921d89142cd443dba2e2c1d37f54c8eaa9c8ddaf14cdcf7502139a6c28a55502e242cde438d10f8
SSDEEP 384:WUGeVxWfhWULm0GfS/eAplx4bZl9Dl2ZlxrXwJn:xGeVmZRZaqa
TLSH
T138922BD2DABC8043EA937E7017A8DA877C3DA7C72960916504AAF5E91CC37C1EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-string-l1-1-0.dll
Size 20KB
SHA256 3c2c4d10c8397a38d6a1407c4606907df5781b1339893c3861605094d8a69053
MD5 a92e0c30499a3be2b4166adafd86d0f4
SHA1 cb1293dc3ff5002b4950233cbc3bfa3a12249bdd
SHA512 70ed8bd03d3aecc5d2967d87dca376fdc69232422cb590a673eaf6721d2793ec2ad5d46884740a6d9f961b72f71e94ce322d773bc5db2807cc2708d35e0f48bd
SSDEEP 384:WPyMv9WfhWNLm0GfZ1MgKlx+YFPeAplx4bZUYV:4yMvagRZg81aTV
TLSH
T1E6923BD29ABC9043EAA37D7017A8E9837C3CA7C7292481A5057AF5E91CC37D1EB1462D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-synch-l1-1-0.dll
Size 22KB
SHA256 bf32d8aea6faebe41b1454e4b80b5a3639ba2cd35a9715de25acd7f28bf6d4de
MD5 393ced54d952c843ac9e16354bff642b
SHA1 407fe145c0068150827d95544f8344a24eeaf589
SHA512 b296ff475ad0bdb8419b7535ce8ee0e1b20382f477a87ed57b257ed382755b6e9a5578697623a4cbadc32ff601e6b45f0e581869f2c45926cbbeda97fd6265b6
SSDEEP 384:W2dv3V0dfpkXc0vVaCWfhWcLm0Gf2GC6gl9iVYiNeAplx4bZVwY:vdv3VqpkXc0vVabZRwThdaft
TLSH
T1DBA22A92D6F8E483EA5BAD7007E9D5837C3C57C71D20807205AAF9992DE33D1EB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-synch-l1-2-0.dll
Size 20KB
SHA256 80fbae0acceb55364437bdd862d454db5acaa797ad0367931aef7677c7e84e7b
MD5 dac3e271ef4a287821becda51aa12946
SHA1 a8d1211d4881e1ff1b948b5139fbaf2af5028e5c
SHA512 c7664a12eaee82127cff203c79f16c87b9388e57adba7cdfe3b86f4b92aab198127658bf83f4b15c14f661b1c1e1aaa6a2195f036bbad3cb72229e7ae83bb435
SSDEEP 384:WQtZ36WfhWlLm0Gfo6gl9is+9mJl0huSwp8S:JUR4g+3hep8S
TLSH
T17D922AD69BBC9543FA97BD7017A8D5837C3C97C61920806114AEF1AA2CE37D2E70492E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-sysinfo-l1-1-0.dll
Size 21KB
SHA256 96a594b5a57303ae1e1dce14724a46500edc38d2c5cca0f52f0c77e3ebc916b1
MD5 eb3aeb684858b00bc6a90f68e8df5484
SHA1 f0a4298880ad6d7b1b92a289fd05fe352b3bca3b
SHA512 57ceea716c30d5ecc718114d5f4ad67f28acb949b9c537c78a000186dbd7e217f2fab0a4ac24df9e407b6260286a93161353fd82ade23c0280e825f91ff7690a
SSDEEP 384:WQTnWfhWwLm0Gf1XWv0l9K8rZTj6Jl0huSwpaO:RTshRKXpj1hepaO
TLSH
T145A22AD29ABC9043EA937E7013E8DA837D3CA3C71D11815905AAF2A92DD37C6EB1453D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-timezone-l1-1-0.dll
Size 20KB
SHA256 d7ab47157bff1b2347e7ae945517b4fc256425939ba7b6288ff85a51931568a7
MD5 36165a5050672b7b0e04cb1f3d7b1b8f
SHA1 ef17c4622f41ef217a16078e8135acd4e2cf9443
SHA512 da360ff716bb66dd1adb5d86866b4b81b08a6fe86362fded05430f833a96934ccdada1b3081b55766a4a30c16d0d62aa1715b8839ea5c405a40d9911715dae68
SSDEEP 384:W0OWfhWDLm0GfVl1MgKlx+YReAsbqldlx9yN/:LWRo4g8q
TLSH
T179922AD3DA7C8443EE977E7017A8E5837D3CA7D72920819504ABF8A92CC37C5AB1492D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-core-util-l1-1-0.dll
Size 20KB
SHA256 598c5cfc2b5ce7f9c874c85e47f7571f6127590a52b46e0a8f576a603dfefa94
MD5 4fc1d0fdb7b881793ded358f1880bc16
SHA1 7810439ec85cd8488079c7dfd95b559eae994f2c
SHA512 7cd48d24da337c0b104bf88becfa1eb40579c283c6ece62cb19a3c51c70bed3ef0660f4bb0837b1edcda19e51eee18da6237bb732bd2db0fbcece8d7f04efb76
SSDEEP 384:W7oWWfhWJLm0Gf/HY1lxd3Ef2Dq2eAplx4bZr6k:1cRvap6k
TLSH
T1EC923CD38ABC8443EA937D7017A4DA837C3CA7C7292091A5056EF5E91CC33D2EB14A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-convert-l1-1-0.dll
Size 24KB
SHA256 983f4d4c7b7330e7f5f091080c1e81905575ebccd97e11dff8a064979ec8d9b8
MD5 0485c463cd8d2ae1cbd42df6f0591246
SHA1 ea634140905078e8f687a031ae919cff23c27e6f
SHA512 ddf947a1b86c3826859570a3e1d59e4ec4564cfcf25c84841383a4b5f5ad6c2fe618078416aed201fb744d5fbd6c39dab7c1e964dd5e148da018a825fcc0044a
SSDEEP 384:WruyxWfhWMLm0GfeQ1MgKlx+YY30Jl0huSwp+M:PlRhg8Ihep+M
TLSH
T1D1B21A83A6E86E52EA9B2B7112FDD7C37D3857C2195042B08117E59C38837C2BE57C2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-environment-l1-1-0.dll
Size 20KB
SHA256 67bbb287b2e9057bf8b412ad2faa266321ac28c6e6ba5f22169e2517a3ead248
MD5 e48a1860000fd2bd61566e76093984f5
SHA1 aa3f233fb19c9e7c88d4307bade2a6eef6518a8a
SHA512 46b384c45d2fe2b70a5ac8ee087ba55828a62ccab876a21a3abd531d4de5ec7be21ff34b2284e0231b6cf0869eba09599c3b403db84448f20bd0fff88c1956d5
SSDEEP 384:WyWfhW8Lm0Gf4dv0l9K8Hfy41MgKlx+YV:gNRBuafg8V
TLSH
T136922AC28ABC9443EE937DB013B8EA837C3CA7C729104165097AF5991CC37D2EB1592D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-filesystem-l1-1-0.dll
Size 22KB
SHA256 ab2158fe6b354fb429f57f374ca25105b44e97edcbdc1b752650d895dadd6fd1
MD5 1193f810519fbc07beb3ffbad3247fc4
SHA1 db099628a19b2d34e89028c2e16bc89df28ed78f
SHA512 3222a10c3be5098aca0211015efe75cfbcd408fd28315acedd016d8f77513f81e207536b072001525965635da39c4aae8ef9f6ad367f5d695de67b1614179353
SSDEEP 384:W3q6nWm5CpWfhWNLm0Gf3Jl0huSwJ+Ruh91MgKlx+YV:l6nWm5Ce4RVheJUUwg8V
TLSH
T1E6A208C39AE8AD43EEA32F7112F8DBC37E3C57C619518261446AE49928C33C1BF1586D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-heap-l1-1-0.dll
Size 21KB
SHA256 2ee3d52640d84ac4f7f7ddfe748f51baa6fd0d492286c781251222420e85ca97
MD5 a22f9a4cbd701209842b204895fedf37
SHA1 72fa50160baf1f2ea2adcff58f3f90a77a59d949
SHA512 903755d4fa6651669295a10e66be8ea223cd8d5ad60ebe06188d8b779fef7e964d0aa26dc5479f14aab655562d3c1ef76b86790fb97f991eaf52da0f70e40529
SSDEEP 384:WTY3eRWfhWILm0Gf/fReAplx4bZak3Jb1MgKlx+YgW:4GtRCaog8gW
TLSH
T156A22BD38ABC9443EAA37E7027F4EA877D3D97C62D208162006BF5E51C837D1AB1592D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-locale-l1-1-0.dll
Size 20KB
SHA256 c36f5c0ac5d91a8417866dd4d8c670c2192ba83364693e7438282fb8678c3d1e
MD5 ba17b278fff2c18e34e47562ddde8166
SHA1 bed762d11b98737fcf1d1713d77345ec4780a8c2
SHA512 72516b81606ccf836549c053325368e93264fdebc7092e42e3df849a16ccefa81b7156ae5609e227faa7c9c1bf9d68b2ac349791a839f4575728f350dd048f27
SSDEEP 384:WyWfhWGLm0Gfdx46gl9iFoQ0E642zlxCHj0:ETRg1Goj0
TLSH
T156923BD28ABCD443EA877DB017B8E6877C3DA7C71911816500AAF8E92CC33D5AB1563D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-math-l1-1-0.dll
Size 28KB
SHA256 7c3336c3a50bf3b4c5492c0d085519c040878243e9f7d3ea9f6a2e35c8f1f374
MD5 c4cac2d609bb5e0da9017ebb535634ce
SHA1 51a264ce4545a2f0d9f2908771e01e001b4e763e
SHA512 3b55bdbc5132d05ab53852605afe6ed49f4b3decdde8b11f19a621a78a37d98c7aeaaa8c10bf4565b9b50162816305fa5192ee31950a96dc08ae46bfc6af4ffe
SSDEEP 384:WSQUbM4Oe59Ckb1hgmLVWfhWFLm0GfBOeAplx4bZe1TTTXZl1OS:vRMq59Bb1jycR5aCUS
TLSH
T15ED2D6474ADCBF53D68B1BB302F4CBCA6D385AE65891B1B4C81BE48838927C17E4395D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-process-l1-1-0.dll
Size 21KB
SHA256 12bb3f480ec115d5f9447414525c5dcd236ed48356d5a70650541c9499bc4d19
MD5 d8a5c1960281ec59fd4164c983516d7c
SHA1 29e6feff9fb16b9d8271b7da6925baf3c6339d06
SHA512 c97aa4029bcd8ffc490547dd78582ac81049dded2288102b800287a7fb623d9fde327702f8a24dfe2d2d67b2c9aaf97050756474faa4914ca4cb6038449c64bf
SSDEEP 192:WrRQqjd7xWfhW9w40V2sms/nGfeAe8fG42uo1nqnajVMEXUJsWWFYg7VWQ4mWkrA:WrKAWfhWMLm0GfJx2ZlxrXUe86gl9iY
TLSH
T15CA219D7CABC9843DA536E7043B8D6837D3E93C72810826504AAF49D3C937D6AB2592D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-runtime-l1-1-0.dll
Size 24KB
SHA256 57fe2bab2acb1184a468e45cebe7609a2986d5220bb2d82592b9ca6e22384f89
MD5 dbd23405e7baa8e1ac763fa506021122
SHA1 c50ae9cc82c842d50c4317034792d034ac7eb5be
SHA512 dafea32e44224b40dcc9ca96fd977a7c14128ca1dd0a6144844537d52ba25bcec83c2fa94a665a7497be9e079e7fc71298b950e3a8a0c03c4a5c8172f11063b9
SSDEEP 384:WsPtYr7LWfhWCLm0GfWeAplx4bZU8LVY1lxd3E74:Dmr7orRDa5o
TLSH
T17CB2088386FC6E43EA872F7216F8DBC72E3963C6291091758467E4D928C37C1BE1651D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-stdio-l1-1-0.dll
Size 26KB
SHA256 e6a1ef1f7c1957c50a3d9c1d70c0f7b0d8badc7f279cd056eb179dc256bfefda
MD5 5df2410c0afd30c9a11de50de4798089
SHA1 4112c5493009a1d01090ccae810500c765dc6d54
SHA512 8ecb79078d05d5b2a432f511953985b3253d5d43d87709a5795709ee8dbca63c5f1166ed94d8984c13f2ea06adfa7d6b82c6735c23c6e64f2f37a257066864e6
SSDEEP 384:WnZpFVhXWfhW2Lm0Gfi3RKllGBwLeb+Jl0huSwpSs:a+rRlkLelhepSs
TLSH
T17DC2088785EC6E03E6875B731AF9EBD76A3893C329046179841BF49839C63C5BE0702D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-string-l1-1-0.dll
Size 26KB
SHA256 e71d517e6b7039437e3fc449d8ad12eeeca0d5c8ed1c500555344fd90ddc3207
MD5 aacade02d7aaf6b5eff26a0e3a11c42d
SHA1 93b8077b535b38fdb0b7c020d24ba280adbe80c3
SHA512 e02fcbcb70100f67e65903d8b1a7e6314cabfb0b14797bd6e1c92b7bcb3994a54133e35d16da0a29576145b2783221330591526f856b79a25c0575fc923985a6
SSDEEP 768:96S5yguNvZ5VQgx3SbwA71IkFD7RwL9il:9l5yguNvZ5VQgx3SbwA71IEVwL9il
TLSH
T1B9C2D88346F82E42CA8B5BB216F9DBC72D384B86260012758477E4DC38827D6FE6791D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-time-l1-1-0.dll
Size 22KB
SHA256 c3a70153e1d0ecd1cbf95de033bfef5cfecabe7a8274cafe272cc2c14865cd8c
MD5 0d9afb006f46478008c180b9da5465ac
SHA1 3be2f543bbc8d9f1639d0ed798c5856359a9f29b
SHA512 4bd76efcb2432994d10884c302aee6cadbc2d594bbbd4e654c1e8547a1efd76fd92e4879b8120dfacb5e8a77826009f72faa5727b1aa559ed3fc86d0ce3ed029
SSDEEP 384:WTcWfhWNuLm0Gf02zlxCHp98xlZWWkipDm:6CuR9Xi8
TLSH
T1EDA208C396E8A943EA972B7113F8D7D77F3853C21A9061654466E4A83AC33D1FE1242D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\api-ms-win-crt-utility-l1-1-0.dll
Size 20KB
SHA256 af1e1b84f066ba05da20847bffd874d80a810b5407f8c6647b3ff9e8f7d37863
MD5 9b622ca5388b6400705c8f21550bae8e
SHA1 eb599555448bf98cdeabc2f8b10cfe9bd2181d9f
SHA512 9872f54ac744cf537826277f1c0a3fd00c5aa51f353692c1929be7bc2e3836e1a52cab2c467ba675d4052ac3116f5622755c3db8be389c179f7d460391105545
SSDEEP 384:WOf9WfhW3Lm0GfZE8xlZWWkiJ1zw8xlZWWkip//7:1faeRviIiN
TLSH
T1889219D78AB85443EB936E7153F8DA837C3D97C72910826104AAF5E82CD3BD6EB1052D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\concrt140.dll
Size 324KB
SHA256 d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195
MD5 1028995446d0032530461be30ca98f48
SHA1 18446678152e9997eed9c02995f957d58a8e8f32
SHA512 adb9ae577f082e0246cae5c804fa4cd08bcf54ce78eaca02d49b9b1b262779667a251e98cae807aff50fdac504b8cd855ce4d786f587d02e0a18f6ac8e0d882e
SSDEEP 6144:tlBybiGsY4lxA6c40PMjoTrDPbv+Xipv6wfnWzgcpw2eRJ:tWbzsBcPPlbxpvIzQT
TLSH
T12E64299A7B544CE6E923D13A8553854AF3F3B8006B66C3CB0265835E6F637D0D93A732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dns-parser.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\dns-parser.dll
Size 131KB
SHA256 6540f6ad602ad2b7c0d69998b477de6cfa3d2bd3d44948925b2aba128eaac3d7
MD5 3cc25fc20e15c0970aea0d30907b6b8d
SHA1 fe56321e2a39128ae2f93ad1db18d1d61123c0ad
SHA512 b6a9c615b73f58793e1a886e1c11aa4dc5454559fe401e7d9e1bfaa26cdd59308605c4e35e362fc71e2bcd91ea3a87e6d9c78a8e0a59148fea148ff66e1abe44
SSDEEP 1536:zqo2RaUhkoWIoRcocmUPm412E6GoXiaLn0BLfZq0VIYR7JvPZRz1Nu1ULLz:IP+sofKmgUr8LfgYZ/PZRz141UX
TLSH
T1DBD3294F364841A9E13BE17C86DB9E83E3767445030197CF0B91829D1F63FE8AE79660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osver-lib.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\osver-lib.dll
Size 24KB
SHA256 680cdab7aba62e50f47b1aedd1ccbecf5e470467646ce2d923da1bda363f2464
MD5 76bad7b038152b114a3ad4eaff1678d5
SHA1 49d0f43fecd657f55c21cc49d3e607e5bce2e45c
SHA512 a9282f727407112c7523dd8fd1344b22c6e210fd840023164df04bd7206667ec29c7d205f3bc182f9b5f3c1c099550401fd444b7d61bd8aad35a5c6ac618f5a9
SSDEEP 192:hb0bkeyyZk62MtY1GJ0YVNzExJIZWcy8+AHTYfxdWFgmW5EB5LH8HnhWgN7acWFj:ebkeyxqaCWgHU/WFglLHRN7gUR9zOl
TLSH
T18EB25B85B7248286EC6B95B0A5B9CA477C3DB391131066DF0355E3940DB33C5BB3A7AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tls-parser.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\tls-parser.dll
Size 118KB
SHA256 7ce6f7e29a62dfa9d72b66274555e99d41ba39f1cc64a64649fb20d781d3904d
MD5 5c8891c596320666e611dd3306988399
SHA1 6d24f6da234fdf4e5f63c7ac8b3dc3fdf4a59174
SHA512 5e62ec5cee458413b24927ad0d88be462a36cf5ab937c021925cee45078660c74aec47eced6d6cc45f6f689201604e081545b857e68901fca69804244c497315
SSDEEP 1536:GKCOHi8EidYIrU6cVcje/xhaPOamyzXx3pLRGz4P:nEihU6cVcje/UvXFpgw
TLSH
T178C3F7E7355A00EAE1D6A07D8B878E06C27A740B2B61D7CF4781425E1F63BE94C7D2E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

udns.dll

Path C:\Program Files\Microsoft Dependency Agent\bin-20260721200024\x64\udns.dll
Size 68KB
SHA256 da312ec234b50253d93765e23f521ebf9d43d18608e844cb37d49d67711bdfe6
MD5 79ecb066f4fbb8842d10779f31b276c7
SHA1 feff8a3914f6778d3717ade792e34c123f2dc863
SHA512 2e7e0812b8ea99fd69377db86731919add3646aa03f8c2f3769d5849175fe86935c8ec0e59dc57bff0e115dfdd3fc381a7ffbd70d6a208783c2329dce1c24ebc
SSDEEP 1536:iDVZNSgpW8TBwSpLfnEiFC/V5NozL7L9ze4O+zTu:mSgpZTaOvwIr9xvu
TLSH
T1C463ADC2AA5451C0D46F547882AFDE67F8B9B2C517007BEF07A4D56A0F233E5A739309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classifier-azure.csv

Path C:\Program Files\Microsoft Dependency Agent\config\classifier-azure.csv
Size 13KB
SHA256 0ebea3a0acef3853dc2d2888374768767dc6f7162f877cfac1d0f5c07c969488
MD5 f3a4c6810f909782c7c561ee7485f3ba
SHA1 1979da2b233ebd566573907ea98f1e4ec58b9189
SHA512 c7e4f3a599c5ad7b7cfa1d1573f4c834823aaa3ac4efcaadd887f63643439210279ad879f5f2588658040c5d9a7b0df8fa7e849126f11b24d18de050a561dbb9
SSDEEP 192:Q+LqyyDBKy5TDvH5bN7haq9iSjYkfB5ke:cyyDBRfl9i25ke
TLSH
T126522E06F144DD57D33638DA0E39A2D73B0C2DB2D8C463DC787F7914E916259AF8292A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classifier-common.csv

Path C:\Program Files\Microsoft Dependency Agent\config\classifier-common.csv
Size 1KB
SHA256 d8f70f9678157fd3ce523421697d3f40f3ceabc57f831de2d69a596ba9aabcd0
MD5 c57bf48813b444c0a4766e7346fa8cdf
SHA1 1eff5c8ae3fa172e7bd3a78e39d3e04e8d5fe342
SHA512 dfcf41bbe82d7c8526a350529a394d6c049ed55ac4d4ff5d61b19558cd11c9040e8de4247cacd97cf0815300faddc8be34d500eaf439da2ba263853eb95ffab5
TLSH
T1401168739A594FF108F31C12601D9C6BD4028887EED788263FADEEE055EB20AD7A411C
MD5 SHA1 SHA512 TLSH

Submit Download

classifier-default.csv

Path C:\Program Files\Microsoft Dependency Agent\config\classifier-default.csv
Size 1KB
SHA256 0e4a4077feb54acf34701bbac621f7d0186829bd111e43c8e3885a0a4a048aa6
MD5 a5bccb0b350a052f323729a1b17d3073
SHA1 dc08f764b81f9c9afd2226e5c5da3346f62d42cf
SHA512 7b7ffd7b84a02a59b5b8704bfb8454991125cb362642e1fb96cdd1421d11ee82bdc951638652fed5a239a5c3e57a183408aa8c9247317550ad2394c066ad3fbc
TLSH
T14A31ED1FD6C08AA306B89D67100CB57D636310DD8DC42CEE3A3D7992F3A867892E8D18
MD5 SHA1 SHA512 TLSH

Submit Download

classifier-microsoft.csv

Path C:\Program Files\Microsoft Dependency Agent\config\classifier-microsoft.csv
Size 288KB
SHA256 d880120fde1cc32d99ff63ea98d0a50b482b69cd80739ba6101592067c9e2678
MD5 bb5f20538f4ec1eccaa0f1641ecb31d2
SHA1 04e468d5f4268e6a93cf4a7614e22a6238faba55
SHA512 733040a716bf16bb4000eef9ae2782a26eea712d48071e4e2babba7181b52539aa9db349f5bc7f5415a211406477c54df1cc5485ed624b05c658756c502517fb
SSDEEP 3072:Dd5KrQucqHJTBqwIaGUYulvGXSa1A5jha86:pXL1A5E
TLSH
T16554F140EE01C957EE72BCE7A442CD69324A2BF3DDC48B5567DF84C0619B2C4EBB8865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.log

Path C:\Program Files\Microsoft Dependency Agent\logs\install.log
Size 1KB
SHA256 989ff49fd078223ba06f82da77ed8a618fd4e3bf001664d1786470fc509dce7a
MD5 ee8aac8463bba82795c6ba0196482ee2
SHA1 84c32f5cc6a622c2e67b0d30434a957b04934b4c
SHA512 071bfa01628a1786088dda361505590a5518b17eecd937eabb8efd7aff6019b0d902786157e92e92fc597ab3c662d858fd1d8db087bfd0a9f6c2fdc6ab2ad555
TLSH
T14741D20893BCEA7A511769D083493C97B3A5FA4F13814C657B850005EB4AD4BD9FB2BB
MD5 SHA1 SHA512 TLSH

Submit Download

install.log

Path C:\Program Files\Microsoft Dependency Agent\logs\install.log
Size 4KB
SHA256 5ab07d54b73cda59b5209cd0553efeeccb8fa39fa42c07dd84afc2824a7f754a
MD5 bd947d1dd81cfd442d89888b637b037c
SHA1 cdd27b3599f4aeeea0489705e35b04fc524e2e39
SHA512 fe1a99a7e593cd546902ff28455f1779648b79a4588666470cda6ae50de2fa15b629c81aad01bf35d1b3d73687f1fd3b0760d933e10357346a1f42e54b3dc6a5
SSDEEP 96:ok+tpTNop+SlHC5foSbhRY5s5s57HCk57cL+fZWNIk/vIygHCkWG+I6WXHCL:+P/80hRSrcKfZAV/vGb+LKK
TLSH
T16D91460887BCC97A526369D0A71E3CE3B3E1B60F039558157B850009EA45E8FD9BF6B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AzureMetadata.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\AzureMetadata.ps1
Size 20KB
SHA256 77d91d1bf1c9d051dbb4b74510eb69f267160b2fa46085759ee5ec3fa6531f8f
MD5 dee9282ca4d85716ef6ad7a19035beea
SHA1 4448cbc408b46b70b1f3feffb8b230a9c8ad2511
SHA512 5d61a310d01c08fd5b401990b10e3e38a7431f2333653b70338d202890d0faceb1661eff99e6b47180a8ddd9c9e9fd2fb7ff3fdf084396b3bb0798a39d7d7abc
SSDEEP 384:c2ok84VMRsFIkBzBV4OHcvFcYluyd8/GcoFa4B7LkDTm+GWKc+rX/53zT3NqK:c1Le5IkBr4DSYluydKuFa4BvkDTmaH+R
TLSH
T18C927DB52B113C4208B797B0C65DB2D1F912A64385E229697D8C74118FBCA3683D7EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloudService.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\CloudService.ps1
Size 19KB
SHA256 850e772c792badbe1c8527e0f106138a843475b14738d74a4b4573f45058232b
MD5 90fdeac5f05363b4d8a436fd9296c411
SHA1 bd65082b7bfa592bde927e93f7dd24be3f7c415b
SHA512 420db28092b802670030b3ddf8724080f5a6e97ecac09b4de83f4a1de405d8e044d618acbae77e3a352897632e71642fb7adbe15459fac518d06ef675aa3883a
SSDEEP 384:ckCAG5QABzKz+DS8Tvt8mVerJu6E1EIozWOaWGA0s7r/E56ovQ:ckCOABO+G8TvtzVero6E1EIozWXW30wb
TLSH
T11D926B762B913D0748B7AB24C66D72E8F904614340F02768FA4C38459F7CB2593E2EEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Watchdog.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\Watchdog.ps1
Size 17KB
SHA256 68ce3dcb92b4ad5dbe068a1254bcc220b60769a63f5c443faa5f74186eeb78d0
MD5 ff42549d59906ded807f8fa90ce34c0f
SHA1 a91997cbb529a5656978fa26f06224b9b04bc471
SHA512 181b6b116cc82a23ef87a2af5a7292cea310dbc569771865ac2c732b0b50f7a66fcd40c178ec7788a8848b954f2b28619ca7efac7b2af886cd0f406ba63a5118
SSDEEP 384:fvgTTBzKz+DS8PZ8mSQ6E1DDozWOaWGMy37r/xBVGn:fwBO+G8PZzSQ6E1HozWXW7yrr/xDGn
TLSH
T102827D765BA03D4E44779AA0D15DB1E5BC04670359D2396AB94CB816CF3CF2093C3ADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PropertyMap.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\lib\PropertyMap.ps1
Size 16KB
SHA256 d51894ed7f1cbb21ff3f1fcafbd081532ad650c6a7777f21aaf64953f753d601
MD5 c2d49f24c05f03681793581a02825f4d
SHA1 364f0269bbcfd48860ccd11432222e555a16fa75
SHA512 846897c361ef5dee4cc208ce2f616fa62f8ece087ac77dfffe290465a2672bbac01d3e287375e7342b24c3468d2c7f99034c5f78923b70e878839d224c4f9bfa
SSDEEP 384:c4aek+V+fBzKz+DS8Pt8mMbj6E1PXQozWOaWGM+vm7r/rt+2:cl++BO+G8PtzMbj6E1PAozWXW7wur/r/
TLSH
T170727DB26FD13C4944779A24D269B5E9FA28530310F2299DF90C78518F3CB24A7D2ADF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Utils.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\lib\Utils.ps1
Size 17KB
SHA256 0269ef5472e8678933d444d4d3e1dba683ee18184d78ccde411847817d9c8345
MD5 e0cb8b6cb8e9c5b00d4784a1c218bb7a
SHA1 841f331cfb3285871127b58dae35852efb8daf29
SHA512 115388f961ca9d8544c6f10dfc95c7e11b6779597b1858f96ee154dea69cbc5327e2cdc5e95b02080fc7a383cd2f801e70187a2aa2b601f9bb537d2682c463cf
SSDEEP 384:cjnqBzKz+DS8TvZ8mQHTGJu6E1EIozWOaWGA0s7r/fk1M:cWBO+G8TvZzsTGo6E1EIozWXW30wr/f7
TLSH
T191825BB72B903D45447B9B78D39EA6D8F915628705E12668F94C3C009F3CB20A7D2EDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VmssUtils.ps1

Path C:\Program Files\Microsoft Dependency Agent\plugins\lib\VmssUtils.ps1
Size 17KB
SHA256 19e507294ae1f532239e622b5a97f6641fc7d36d87f067ebf87646f67b2c347a
MD5 3fe4b244b74c4e06febba9ad84f11787
SHA1 027ff663cf8e4788d50e693b6e201a049762d246
SHA512 d17f03f95a8f1708dfe40de4df23fa5cc8e5e6348c2043b860f4bfc9c94588256461a196a23e8521162284e98f4f7060cf22dfabad0a40a51dae641d5a9d5128
SSDEEP 384:c3BzKz+DS8Tvo8mCESnJu6E1EIozWOaWGA0s7r/Llw:c3BO+G8TvozCPno6E1EIozWXW30wr/pw
TLSH
T1ED825CB317513D0A087FA565EA9E32E67518624380E13628B88D78419B7CF3467E3EDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CollectDependencyAgentData.vbs

Path C:\Program Files\Microsoft Dependency Agent\scripts\CollectDependencyAgentData.vbs
Size 74KB
SHA256 b0ba954e51601b50b0e63798af1f20722719a38d04a79f53f0a62efa8fa76c05
MD5 21a9972803a7308bc33cedbb122867be
SHA1 fd34155e462531836bb64d507472fd419876131b
SHA512 5e02697cf1910a68950d0870e35bab0893b8cab1e6696b1521598acbcec426e796bda0805ee48a4a93ae5443fb1b79a36408eda13e49e6fcde21da7bfeb8f6b4
SSDEEP 1536:dXSUznLJtrQX4+CcMYaN6ICLfdkdneu6xKmiT8nMn:fzLfrQX4+CcMYaN6ICLfudeu6xKm+Iq
TLSH
T1D273E8063F0D39E81066A2D3913D8979DE304EF7F42489247D4CF87A6E15BAC99BC1DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AccessControl.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq537.tmp\AccessControl.dll
Size 23KB
SHA256 8c23fb88985eb286d21c5d7f631967cee0909de40c026600969b55bb6227b787
MD5 58f16d13ddac11ffa9cd2f189855c584
SHA1 26bb7c7e55f139f60bdd2cfbe0bd0906d8360997
SHA512 15a9690af55bdb159c77cc75c2870ed52abfdaba5e2b0ab67fe19ae0abcc58087366a00a49b09604543fb4add4a4aad87cdd84ac9acc3b6c7d1746dc6d6ce114
SSDEEP 384:Q+8vwSZlgaJ3/4/4Q/bNMqdHRN7itVwR9zZOUN:Q+AlgaJ3wgQDWkiA9z7
TLSH
T145B24C660F3C02FBD492153523D4E6639BBAC3862480961E5F91EED61C437C79F7C52A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExecDos.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq537.tmp\ExecDos.dll
Size 16KB
SHA256 eb833660481be7b3029be4eb9f1b3b6e21534787964eed45d04ce58e98093a5b
MD5 a795f394a3af024761b98cc6646277c1
SHA1 d49f622ca4556e743bc5e1c7be3bfb61a39910db
SHA512 7a554f8b98c8c3c368ea5fda483bd3bbc3a0222928f6b5280c8cac031b664b2a5b00cddc79499b7a6e16f75bad171283290d59518bb18bb7916d920707fe5b68
SSDEEP 192:Ej5Qb1sBPuijiu6avTyhWeWiypcwKHnhWgN7acWmkp13s5yX01k9z3A6hNuA+vBu:EssBWex6meh5dHRN7ocYR9zd3H+vk
TLSH
T163725DB59A684083D9AB193032B4E9573E3DABD71E60906A4697FD841C93BC1FF2062D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq537.tmp\System.dll
Size 21KB
SHA256 fdf6420cf2ae0fb62686821d8a03d00880434463b01a80e9aa7a475ea65d5fd6
MD5 83a22e8c3b7cf6209f66d74745775050
SHA1 4e9b2dcdb1f1bbc932eb2eca7d5ed513973243a5
SHA512 16842401f47b33fc685cfb9846e7e9ca06e52d5eba979ef96e22d89c90a8038014d61731b32f24fae139ed6ec0036f7e26b0573b06edda5084dcc7dff7381b56
SSDEEP 384:S78TQIgGCDp14LGCt2poiNHRN7ioeNNPR9zuur:lTQbp9SGrprNioK9zPr
TLSH
T169A27D95436485F3E8C758701268FEBB7E3C17A219E04D534F93E9802D623C9EF3822A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

registry.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq537.tmp\registry.dll
Size 34KB
SHA256 21b8c6155f8c9d799dc753d8c85e69af0bcc0d6838c7d61b55d1e5505108fe8d
MD5 24f0b97ade91b222b08bbf51eb0849c4
SHA1 e6f86018a10875d12c00b4f5ee204630919d4449
SHA512 7f1e5980c09a357304303b057ddb82ccc62c60e01adb344392c06f6f763dd8166f2f7eb30d5386e65cc1eea4c31cd885786da6c8033968223bf8a866711bd38c
SSDEEP 384:s2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQTdHRN7lU+Hj+RM:975w/OfrzB4CUxuQfAIlHji9zq/
TLSH
T113F28EC2B1D0D473D48F1474A398EF16FBBFAA913A70A8131065FAC726917D2D728227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download