Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Uev.AppAgent.dll
Resource
win10v2004-20240426-en
Target
Microsoft.Uev.AppAgent.dll
Size
1.6MB
MD5
5a220f4fe2a0f66f65ee146da0040a41
SHA1
0d86107826ba4831bbdf10418dce39bc049ba555
SHA256
a39fd2fe546a36751ff1c4d9ce13ed89d30e21b7d550c72b89f5a4394c75f5af
SHA512
01e3ab5ae07d17720c622d7536edac2dbe54816ecf87a3d4346abab171eb20f79f269740a72ebd5ccca35ce8b2411f6900807d3b98521adf727939a1b5e31e1a
SSDEEP
49152:w8yunt9+G3uHVRp7J9qfm0EEzbF/AAgZtDAz7JYODK:iunn+G3uHHVJ9avo
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Microsoft.Uev.AppAgent.pdb
_vsnwprintf
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
??0bad_cast@@QAE@ABV0@@Z
memcpy_s
_wcsicmp
strcspn
_purecall
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABV0@@Z
localeconv
_vsnprintf_s
free
??3@YAXPAX@Z
memmove_s
sprintf_s
wcscpy_s
wcsncpy_s
_errno
malloc
_callnewh
_lock
_unlock
setlocale
_CxxThrowException
memcpy
memmove
__uncaught_exception
__pctype_func
isupper
___lc_handle_func
___lc_codepage_func
calloc
___mb_cur_max_func
_ismbblead
memset
islower
_wcsdup
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
__crtCompareStringW
__crtCompareStringA
__crtLCMapStringW
__crtLCMapStringA
_get_current_locale
_free_locale
abort
realloc
ldexp
??_V@YAXPAX@Z
_Getdays
_Getmonths
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__mb_cur_max
_Gettnames
_Strftime
isspace
tolower
memchr
___lc_collate_cp_func
memcmp
isalnum
isdigit
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler4_common
__RTDynamicCast
fclose
fwrite
?name@type_info@@QBEPBDXZ
swprintf_s
fputc
fflush
fgetc
fgetpos
setvbuf
ungetc
fsetpos
_fseeki64
_mkgmtime
_gmtime64
_wtoi
strchr
ldiv
time
_wcsnicmp
_stricmp
mbstowcs_s
towlower
ftell
_wfopen_s
fseek
fread
ferror
feof
__ExceptionPtrCreate
__ExceptionPtrCopy
__ExceptionPtrDestroy
__ExceptionPtrCurrentException
__ExceptionPtrRethrow
wprintf
_putws
??1bad_typeid@@UAE@XZ
??0bad_typeid@@QAE@ABV0@@Z
__RTtypeid
strerror
_beginthreadex
?before@type_info@@QBEHABV1@@Z
wcscat_s
_wfsopen
__CxxFrameHandler3
?what@exception@@UBEPBDXZ
_ftol2
SetSysColors
GetDoubleClickTime
ShutdownBlockReasonDestroy
SetWindowLongW
LoadCursorW
LoadIconW
TranslateMessage
SendNotifyMessageW
ShutdownBlockReasonCreate
DispatchMessageW
LoadStringW
RegisterClassExW
WaitForInputIdle
CreateWindowExW
DefWindowProcW
GetMessageW
GetSysColor
GetWindowLongW
IsDebuggerPresent
LoadLibraryExW
LocalUnlock
DebugBreak
FreeLibrary
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
AcquireSRWLockShared
LocalFree
CreateMutexExW
GetProcAddress
ResetEvent
HeapAlloc
CreateThreadpoolTimer
ReleaseSRWLockShared
SetThreadpoolTimer
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
DisableThreadLibraryCalls
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
GetProcessId
OpenEventW
Sleep
AcquireSRWLockExclusive
CloseThreadpoolTimer
SetEvent
OutputDebugStringW
ReleaseSRWLockExclusive
GetLastError
FormatMessageW
ExitProcess
QueryFullProcessImageNameW
GetLocalTime
CreateFileW
CreateEventW
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
DecodePointer
EncodePointer
GetLocaleInfoW
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
CreateIoCompletionPort
CopyFileExW
GetSystemTimeAsFileTime
GlobalLock
DeleteFileW
GlobalAlloc
GlobalSize
GetFileAttributesExW
GetTickCount64
OpenProcess
K32GetProcessImageFileNameW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GetQueuedCompletionStatus
CreateNamedPipeW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
WaitForThreadpoolTimerCallbacks
InitializeCriticalSectionEx
LeaveCriticalSection
GetModuleHandleExW
ReleaseSemaphore
EnterCriticalSection
SetLastError
HeapFree
CreateSemaphoreExW
CreateEventA
GetSystemInfo
LocalLock
ReadFile
GetModuleFileNameA
GetStockObject
CoUninitialize
OleRun
CoUnmarshalInterface
CreateStreamOnHGlobal
CoMarshalInterface
CoTaskMemFree
GetHGlobalFromStream
CoInitializeEx
CoCreateInstance
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayAccessData
SafeArrayRedim
GetRecordInfoFromTypeInfo
LoadRegTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreateEx
SafeArrayPutElement
VariantClear
VariantCopy
VariantInit
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
EventUnregister
SetSecurityInfo
EventWriteTransfer
EventRegister
EventSetInformation
RegGetValueW
DoEnvironmentSubstW
SHChangeNotify
SHGetKnownFolderPath
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathIsDirectoryW
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
CoInternetCreateSecurityManager
PathCchAppend
PolicyManager_GetPolicyInt
SwitchToThread
GetExitCodeProcess
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
CreateThread
GetExitCodeThread
ProcessIdToSessionId
CreateProcessW
OpenProcessToken
ResumeThread
SetThreadPriority
TlsAlloc
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
RegQueryValueExW
RegEnumValueW
RegDeleteTreeW
RegDeleteKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
SetFileAttributesW
GetFileSize
GetFileTime
FindNextFileW
FindClose
GetLongPathNameW
FindFirstFileW
WriteFile
SetFileTime
RemoveDirectoryW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetComputerNameExW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
MoveFileExW
CreateHardLinkW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
lstrcmpiW
lstrlenA
RegSetKeyValueW
EventActivityIdControl
SetWaitableTimer
CreateEventExW
CreateMutexW
OpenEventA
WaitForMultipleObjectsEx
CreateSemaphoreA
WaitNamedPipeW
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolWork
GetSidSubAuthority
GetSidSubAuthorityCount
CheckTokenMembership
EqualSid
GetTokenInformation
CreateWellKnownSid
GetSystemMetrics
SystemParametersInfoW
GetUserDefaultLCID
FormatMessageA
DuplicateHandle
LoadLibraryExA
GetModuleHandleA
VirtualQuery
VirtualAlloc
VirtualFree
VirtualProtect
SetThreadContext
FlushInstructionCache
GetProcessMitigationPolicy
GetThreadContext
LocalAlloc
DeviceIoControl
CopyFileW
AreFileApisANSI
CreateWaitableTimerW
QueryPerformanceFrequency
InitOnceComplete
InitOnceBeginInitialize
TraceMessage
PathIsRelativeW
RegEnumKeyW
RegOpenKeyW
RaiseException
ord3
ApplySettingsFromPackage
OrdinalOne
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ