home

UaService.exe

User-ID Agent

Palo Alto Networks

It runs as a separate (within the context of its own process) windows Service named “User-ID Agent”.
Publisher:
Palo Alto Networks  (signed and verified)

Product:
User-ID Agent

Description:
User-ID Agent Service

Version:
7.0.7.13

MD5:
056477135c4c0b75fd0a711ae332701e

SHA-1:
35d1505084dbec5af424b0c10685fe22a9e42a29

SHA-256:
765e1e993802710867177ab780b1ef7aa5a57d9fa9b09dd1a43862dd776b1641

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/1/2024 12:29:08 AM UTC  (today)

File size:
2.7 MB (2,785,208 bytes)

Product version:
7.0.7.13

Copyright:
Copyright (C) 2011 Palo Alto Networks. All rights reserved.

Original file name:
UaService.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\palo alto networks\user-id agent\uaservice.exe

Digital Signature
Signed by:
Palo Alto Networks

Authority:
Symantec Corporation

Valid from:
11/16/2015 9:00:00 AM

Valid to:
11/16/2018 8:59:59 AM

Subject:
CN=Palo Alto Networks, O=Palo Alto Networks, L=Santa Clara, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3838D5414BA95488F3D1D0AE51E1BE06

File PE Metadata
Compilation timestamp:
1/21/2017 5:07:03 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

Entry address:
0x1CF66F

Entry point:
E8, 18, EB, 00, 00, E9, A4, FE, FF, FF, C3, B8, DA, EC, 5D, 00, A3, D0, 09, 68, 00, C7, 05, D4, 09, 68, 00, C1, E3, 5D, 00, C7, 05, D8, 09, 68, 00, 75, E3, 5D, 00, C7, 05, DC, 09, 68, 00, AE, E3, 5D, 00, C7, 05, E0, 09, 68, 00, 17, E3, 5D, 00, A3, E4, 09, 68, 00, C7, 05, E8, 09, 68, 00, 52, EC, 5D, 00, C7, 05, EC, 09, 68, 00, 33, E3, 5D, 00, C7, 05, F0, 09, 68, 00, 95, E2, 5D, 00, C7, 05, F4, 09, 68, 00, 22, E2, 5D, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, E8, 9E, F6, 00, 00, 83, 7D, 08, 00, A3, 24...
 
[+]

Entropy:
6.7232

Code size:
2.1 MB (2,176,512 bytes)

Service
Display name:
User-ID Agent

Service name:
UserIDService

Description:
Palo Alto Networks' User-ID Agent

Type:
Win32OwnProcess


Scan UaService.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.