Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Uev.AppAgent.dll
Resource
win10v2004-20240508-en
Target
Microsoft.Uev.AppAgent.dll
Size
1.6MB
MD5
77ef8431d41505638c96ea6a3ede83b0
SHA1
71fca89ac930b8b68b6a3210b4baa7e866d86158
SHA256
01071eb76978a2441af528a427136044bdd62356bb83c278f9e3d49fa3c4fdfc
SHA512
bb1be1686dd740a1437e9c80385f83dfe5d0bce67324de8f6ee58b96ad81c4330b19c5df8552a0a4b504d91dce64ef08478b254af3b1883c044262fc4782c39c
SSDEEP
49152:c8BWfQ4yOiLm0CR0s9oDqPQk3c361cNnm7zVAWeFvTxK6NO4tG:1WfQ4yXOFek
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Microsoft.Uev.AppAgent.pdb
_stricmp
_wcsnicmp
time
ldiv
strchr
_wtoi
_fseeki64
fsetpos
ungetc
mbstowcs_s
fgetpos
fgetc
fflush
fputc
gmtime
_mkgmtime
swprintf_s
?name@type_info@@QBEPBDXZ
fwrite
fclose
ftell
setvbuf
fread
__RTDynamicCast
towlower
ferror
feof
__ExceptionPtrCreate
__ExceptionPtrCopy
__ExceptionPtrDestroy
__ExceptionPtrCurrentException
__ExceptionPtrRethrow
wcsncpy_s
wprintf
_putws
??1bad_typeid@@UAE@XZ
??0bad_typeid@@QAE@ABV0@@Z
__RTtypeid
strerror
_beginthreadex
_except_handler4_common
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
isdigit
isalnum
memcmp
___lc_collate_cp_func
memchr
tolower
isspace
_Strftime
_Gettnames
__mb_cur_max
_Wcsftime
_W_Gettnames
_W_Getmonths
_W_Getdays
_Getmonths
_Getdays
memcpy_s
ldexp
realloc
?before@type_info@@QBEHABV1@@Z
_wfsopen
fseek
abort
_free_locale
_get_current_locale
__crtLCMapStringA
__crtLCMapStringW
__crtCompareStringA
__crtCompareStringW
??9type_info@@QBEHABV0@@Z
??8type_info@@QBEHABV0@@Z
_wcsdup
islower
memset
_ismbblead
___mb_cur_max_func
calloc
___lc_codepage_func
___lc_handle_func
isupper
__pctype_func
__uncaught_exception
memcpy
__CxxFrameHandler3
_CxxThrowException
setlocale
_unlock
_lock
_callnewh
malloc
_errno
wcscpy_s
sprintf_s
free
localeconv
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_purecall
strcspn
_wcsicmp
memmove
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??_V@YAXPAX@Z
_wfopen_s
??3@YAXPAX@Z
_ftol2
GetSystemMetrics
SetSysColors
GetDoubleClickTime
GetSysColor
SystemParametersInfoW
GetWindowLongW
GetMessageW
DefWindowProcW
ShutdownBlockReasonDestroy
SetWindowLongW
LoadCursorW
LoadIconW
TranslateMessage
SendNotifyMessageW
ShutdownBlockReasonCreate
DispatchMessageW
LoadStringW
RegisterClassExW
WaitForInputIdle
CreateWindowExW
DeleteFileW
MoveFileExW
GetFileSize
CopyFileExW
GetFileTime
ReleaseMutex
FindFirstFileW
FindNextFileW
FindClose
lstrlenA
WaitForSingleObjectEx
CreateHardLinkW
GetLongPathNameW
GetFileAttributesW
QueryPerformanceFrequency
TlsFree
TlsGetValue
TlsAlloc
CreateWaitableTimerW
TlsSetValue
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
FormatMessageA
AreFileApisANSI
CopyFileW
GetCurrentDirectoryW
GetFileAttributesExW
SetFileTime
RemoveDirectoryW
DeviceIoControl
CreateFileW
CreateDirectoryW
LocalAlloc
GetModuleHandleExW
FreeLibrary
SetLastError
VirtualQuery
SetThreadContext
FlushInstructionCache
SetFileAttributesW
ResumeThread
VirtualAlloc
VirtualFree
VirtualProtect
SwitchToThread
LocalLock
GetSystemInfo
CreateEventA
CreateEventW
FormatMessageW
GetLastError
SetEvent
CloseHandle
GetLocalTime
LocalFree
GetCurrentProcessId
LocalUnlock
ResetEvent
GetModuleHandleW
DisableThreadLibraryCalls
HeapFree
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
GetProcessId
WaitForSingleObject
OpenEventW
Sleep
HeapAlloc
CreateMutexExW
ExitProcess
GetProcessHeap
QueryFullProcessImageNameW
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
InitializeCriticalSectionEx
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetThreadContext
GetComputerNameExW
GetProcAddress
ExpandEnvironmentStringsW
WriteFile
ReadFile
GetExitCodeProcess
CreateProcessW
Wow64RevertWow64FsRedirection
ProcessIdToSessionId
Wow64DisableWow64FsRedirection
SystemTimeToFileTime
GetTempPathW
CreateSemaphoreA
GetModuleHandleA
DuplicateHandle
ReleaseSemaphore
GetUserDefaultLCID
CreateThread
GetExitCodeThread
lstrcmpiW
CreateThreadpoolWork
SubmitThreadpoolWork
CreateEventExW
CloseThreadpoolWork
CreateMutexW
WaitNamedPipeW
GetCurrentThread
SetThreadPriority
GetStockObject
StringFromGUID2
CoCreateGuid
CLSIDFromString
OleRun
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
RegQueryValueExW
CreateWellKnownSid
CheckTokenMembership
EventActivityIdControl
RegSetKeyValueW
RegDeleteKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
GetSidSubAuthorityCount
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteTreeW
RegOpenKeyExW
RegGetValueW
EventRegister
EventSetInformation
EventUnregister
EventWrite
SetSecurityInfo
RegCloseKey
EventWriteTransfer
EqualSid
GetNamedSecurityInfoW
SHGetKnownFolderPath
SHChangeNotify
DoEnvironmentSubstW
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
SafeArrayPutElement
SafeArrayDestroy
VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantCopy
SafeArrayCreateEx
SafeArrayGetLBound
SafeArrayGetUBound
LoadRegTypeLi
GetRecordInfoFromTypeInfo
SafeArrayRedim
SafeArrayAccessData
SafeArrayCreate
SafeArrayUnaccessData
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ord3
OrdinalOne
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ