AppId: 0ec2d138-5a70-4a33-b2c7-7d296c996ace (False/Positve)

[evild3ad]

Hi,

AppId: 0ec2d138-5a70-4a33-b2c7-7d296c996ace triggered a False/Positive.

entra_all.json
generated: 2026-06-05T08:15:43.447895+00:00

This AppId belongs to "Microsoft Photos". I think you can remove this OAuth App from your list.

Thank you!

P.S. I will add your Entra feed to my OAuthPermissions-Analyzer with the next release of the Microsoft-Analyzer-Suite.

[evild3ad]

AppOwnerOrganizationId: 72f988bf-86f1-41af-91ab-2d7cd011db47
PublisherName: Microsoft
Homepage: https://www.microsoft.com/windows/photo-movie-editor

[mthcht]

Hey thanks for the report @evild3ad I will update the app name associated, but 0ec2d138-5a70-4a33-b2c7-7d296c996ace is in the compliance category (just for knowing the app name corresponding to a legit app id)

for detection of risky or malicious app you should use the risky or malicious feed

[evild3ad]