Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft.Uev.AppAgent.dll
Resource
win10v2004-20240508-en
Target
Microsoft.Uev.AppAgent.dll
Size
1.6MB
MD5
0ac1ae11383c8343ede20c505bf8d777
SHA1
7ba33e6af49b14b78a7259e183c9a709afd2ec9a
SHA256
723e3a393fb49a581600ba6e91572315a2dcf3a2b512829d4d007402681c4d8b
SHA512
7df260758cfed0d35e3408036cba15fdefeb29c0eda9e263eeffe0e1eb4b8615b40d33a30c8654a695e765e69eae471387760d0c41732d046c68e2cbe46b55ab
SSDEEP
49152:Z8XTBDasK/ZuYbxQ0wqYAIXrsaf2MSUVDdAic:Y9DasKYEvkQh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Microsoft.Uev.AppAgent.pdb
__crtCompareStringA
__crtCompareStringW
__crtLCMapStringW
??0bad_cast@@QAE@ABV0@@Z
__crtLCMapStringA
_get_current_locale
_free_locale
abort
realloc
ldexp
_Getdays
_Getmonths
_W_Getdays
_W_Getmonths
___mb_cur_max_func
_W_Gettnames
_Wcsftime
__mb_cur_max
_Gettnames
calloc
memcpy_s
___lc_codepage_func
_Strftime
strcspn
_purecall
isspace
tolower
memchr
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
___lc_handle_func
??0bad_cast@@QAE@PBD@Z
isupper
__pctype_func
memset
??1bad_cast@@UAE@XZ
__uncaught_exception
___lc_collate_cp_func
_vsnwprintf
memmove
??9type_info@@QBEHABV0@@Z
_ismbblead
memcpy
_CxxThrowException
memcmp
isalnum
setlocale
isdigit
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABV0@@Z
_unlock
??_V@YAXPAX@Z
_lock
_callnewh
malloc
localeconv
_wcsdup
_vsnprintf_s
_XcptFilter
_amsg_exit
_initterm
free
?terminate@@YAXXZ
_errno
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler4_common
islower
??0exception@@QAE@XZ
wcsncpy_s
memmove_s
wcscpy_s
sprintf_s
??8type_info@@QBEHABV0@@Z
??3@YAXPAX@Z
__RTDynamicCast
fclose
fwrite
?name@type_info@@QBEPBDXZ
swprintf_s
fputc
fflush
fgetc
fgetpos
setvbuf
ungetc
fsetpos
_fseeki64
_mkgmtime
_gmtime64
_wtoi
strchr
ldiv
time
_wcsnicmp
_stricmp
mbstowcs_s
towlower
ftell
_wfopen_s
fseek
fread
ferror
feof
__ExceptionPtrCreate
__ExceptionPtrCopy
__ExceptionPtrDestroy
__ExceptionPtrCurrentException
__ExceptionPtrRethrow
wprintf
_putws
??1bad_typeid@@UAE@XZ
??0bad_typeid@@QAE@ABV0@@Z
__RTtypeid
strerror
_beginthreadex
?before@type_info@@QBEHABV1@@Z
wcscat_s
_wfsopen
__CxxFrameHandler3
_wcsicmp
_ftol2
SetSysColors
GetDoubleClickTime
ShutdownBlockReasonDestroy
SetWindowLongW
LoadCursorW
LoadIconW
TranslateMessage
SendNotifyMessageW
ShutdownBlockReasonCreate
DispatchMessageW
LoadStringW
RegisterClassExW
WaitForInputIdle
CreateWindowExW
DefWindowProcW
GetMessageW
GetSysColor
GetWindowLongW
ReadFile
CreateDirectoryW
QueryFullProcessImageNameW
ExitProcess
Sleep
OpenEventW
GetProcessId
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
DisableThreadLibraryCalls
ResetEvent
IsDebuggerPresent
LocalUnlock
EnterCriticalSection
GetModuleHandleW
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
LocalFree
CreateMutexExW
GetProcAddress
CreateNamedPipeW
LeaveCriticalSection
GetQueuedCompletionStatus
GetTempPathW
InitializeCriticalSectionEx
WaitForThreadpoolTimerCallbacks
CreateFileW
GetLocalTime
HeapAlloc
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
SetEvent
OutputDebugStringW
GetFileAttributesW
K32GetProcessImageFileNameW
DebugBreak
AcquireSRWLockExclusive
GetLastError
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
DecodePointer
EncodePointer
GetLocaleInfoW
WideCharToMultiByte
GetStringTypeW
MultiByteToWideChar
CreateIoCompletionPort
CopyFileExW
GetSystemTimeAsFileTime
DeleteCriticalSection
AcquireSRWLockShared
GlobalLock
CreateThreadpoolTimer
ReleaseSRWLockShared
SetThreadpoolTimer
DeleteFileW
GlobalAlloc
OpenProcess
CloseThreadpoolTimer
GlobalSize
ReleaseSRWLockExclusive
GetFileAttributesExW
FormatMessageW
CreateEventW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
SetLastError
HeapFree
CreateSemaphoreExW
CreateEventA
GetSystemInfo
LocalLock
GetModuleFileNameA
GetTickCount64
GetStockObject
CoUninitialize
OleRun
CoUnmarshalInterface
CreateStreamOnHGlobal
CoMarshalInterface
CoTaskMemFree
CoCreateInstance
GetHGlobalFromStream
CoInitializeEx
SysAllocString
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayAccessData
SafeArrayRedim
GetRecordInfoFromTypeInfo
LoadRegTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreateEx
SafeArrayPutElement
VariantCopy
VariantClear
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
EventUnregister
SetSecurityInfo
EventWriteTransfer
EventRegister
EventSetInformation
RegGetValueW
DoEnvironmentSubstW
SHChangeNotify
SHGetKnownFolderPath
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathIsDirectoryW
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
CoInternetCreateSecurityManager
PathCchAppend
PolicyManager_GetPolicyInt
SwitchToThread
TlsGetValue
GetExitCodeProcess
GetExitCodeThread
SetThreadPriority
TlsAlloc
ProcessIdToSessionId
TlsSetValue
GetCurrentThread
TlsFree
ResumeThread
OpenProcessToken
CreateThread
CreateProcessW
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyExW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegDeleteTreeW
RegOpenKeyExW
RegQueryValueExW
GetFileTime
GetLongPathNameW
GetFileSize
SetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
WriteFile
RemoveDirectoryW
SetFileTime
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
GetComputerNameExW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
MoveFileExW
CreateHardLinkW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
lstrcmpiW
lstrlenA
RegSetKeyValueW
EventActivityIdControl
WaitNamedPipeW
CreateEventExW
WaitForMultipleObjectsEx
CreateMutexW
SetWaitableTimer
OpenEventA
CloseThreadpoolWork
CreateThreadpoolWork
SubmitThreadpoolWork
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
CheckTokenMembership
CreateWellKnownSid
EqualSid
SystemParametersInfoW
GetSystemMetrics
FormatMessageA
GetUserDefaultLCID
DuplicateHandle
FreeLibrary
LoadLibraryExA
GetModuleHandleA
CreateSemaphoreA
VirtualFree
VirtualQuery
VirtualAlloc
VirtualProtect
SetThreadContext
FlushInstructionCache
GetThreadContext
GetProcessMitigationPolicy
LocalAlloc
DeviceIoControl
CopyFileW
AreFileApisANSI
CreateWaitableTimerW
QueryPerformanceFrequency
InitOnceComplete
InitOnceBeginInitialize
TraceMessage
PathIsRelativeW
RegOpenKeyW
RegEnumKeyW
RaiseException
ord3
ApplySettingsFromPackage
OrdinalOne
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ