Extended Key Usages
ExtKeyUsageCodeSigning
Overview
overview
6Static
static
1Document T...t.thmx
windows7-x64
3Document T...t.thmx
windows10-2004-x64
1Document T...y.thmx
windows7-x64
3Document T...y.thmx
windows10-2004-x64
1Document T...l.thmx
windows7-x64
3Document T...l.thmx
windows10-2004-x64
1Document T...m.thmx
windows7-x64
3Document T...m.thmx
windows10-2004-x64
1Document T...n.thmx
windows7-x64
3Document T...n.thmx
windows10-2004-x64
1Document T...e.thmx
windows7-x64
3Document T...e.thmx
windows10-2004-x64
1Document T...e.thmx
windows7-x64
3Document T...e.thmx
windows10-2004-x64
1Document T...c.thmx
windows7-x64
3Document T...c.thmx
windows10-2004-x64
1Document T...t.thmx
windows7-x64
3Document T...t.thmx
windows10-2004-x64
1Document T...e.thmx
windows7-x64
3Document T...e.thmx
windows10-2004-x64
1Document T...p.thmx
windows7-x64
3Document T...p.thmx
windows10-2004-x64
1Integratio...16.msi
windows7-x64
Integratio...16.msi
windows10-2004-x64
6Integratio...16.msi
windows7-x64
6Integratio...16.msi
windows10-2004-x64
6Integratio...or.exe
windows7-x64
1Integratio...or.exe
windows10-2004-x64
5Integratio...st.msi
windows7-x64
6Integratio...st.msi
windows10-2004-x64
6Office15/pidgenx.dll
windows7-x64
1Office15/pidgenx.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Document Themes 16/Facet.thmx
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Document Themes 16/Facet.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Document Themes 16/Gallery.thmx
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Document Themes 16/Gallery.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Document Themes 16/Integral.thmx
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Document Themes 16/Integral.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Document Themes 16/Ion Boardroom.thmx
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Document Themes 16/Ion Boardroom.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Document Themes 16/Ion.thmx
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Document Themes 16/Ion.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Document Themes 16/Office 2013 - 2022 Theme.thmx
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Document Themes 16/Office 2013 - 2022 Theme.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Document Themes 16/Office Theme.thmx
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Document Themes 16/Office Theme.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Document Themes 16/Organic.thmx
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Document Themes 16/Organic.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Document Themes 16/Retrospect.thmx
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Document Themes 16/Retrospect.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Document Themes 16/Slice.thmx
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Document Themes 16/Slice.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Document Themes 16/Wisp.thmx
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Document Themes 16/Wisp.thmx
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Integration/C2RInt.16.msi
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Integration/C2RInt.16.msi
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Integration/C2RIntLoc.en-us.16.msi
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Integration/C2RIntLoc.en-us.16.msi
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Integration/Integrator.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Integration/Integrator.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Integration/SPPRedist.msi
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
Integration/SPPRedist.msi
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Office15/pidgenx.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Office15/pidgenx.dll
Resource
win10v2004-20240802-en
Target
Root2.2-notVFS.zip
Size
57.7MB
MD5
eac0b492bb7b1163269edd2ffdc058e7
SHA1
54d68a9ed8d476ae0f3383e029682a6c06f857fd
SHA256
2dc65e4d7774d7a0590dd8ff3e797f13c4a6eb42c768e6dc594ef3de6e05e726
SHA512
63d184d0c768aa07ec3ed63c50fb5c61c3e3c0728cb0782a78b0d14f1fccc8746cc940534f1abd1acfccaccc251774acca77212fcf912e60405c664e61e3d10f
SSDEEP
1572864:/XKWwpSIRWISO/9QxVgp0JUJmAldhwxBiOHcCJRgjGnFN8zNi1lAv88:/6WwXZSU96a68mgwrh7JRgq8iLAvR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
d:\dbs\el\omr\target\x64\ship\click2run\x-none\Integrator.pdb
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteTreeW
RegDeleteKeyW
RegGetValueW
RegDeleteValueW
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
RegEnumValueA
RegDeleteValueA
CreateWellKnownSid
CheckTokenMembership
RegGetValueA
OpenThreadToken
OpenProcessToken
GetLengthSid
CopySid
InitializeAcl
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
EqualSid
RegNotifyChangeKeyValue
RevertToSelf
EventWrite
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceStatusEx
QueryServiceConfigW
StartServiceW
ControlService
EnumDependentServicesW
ChangeServiceConfigW
BuildTrusteeWithSidW
GetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorControl
SetNamedSecurityInfoW
SetEntriesInAclW
FindClose
UnmapViewOfFile
CreateFileA
GetFileSize
CreateFileMappingW
MapViewOfFile
Sleep
CreateActCtxW
ActivateActCtx
SetLastError
OutputDebugStringA
GetStringTypeExW
FindActCtxSectionStringW
DeactivateActCtx
QueryActCtxW
GetUserDefaultLCID
LoadLibraryA
LoadLibraryW
LCMapStringW
LocalFree
FormatMessageA
LocalAlloc
CreateEventExW
GlobalMemoryStatusEx
RaiseException
LoadLibraryExW
GetModuleHandleW
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
WideCharToMultiByte
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
OpenProcess
GetExitCodeProcess
GetProcessTimes
GetTickCount64
GetSystemTimeAsFileTime
TerminateProcess
GetModuleFileNameA
GetShortPathNameA
K32GetModuleFileNameExW
CreateProcessW
FindResourceW
SizeofResource
LoadResource
GetCurrentProcessId
GetUserDefaultLocaleName
IsValidCodePage
GetSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetCPInfoExW
GetDiskFreeSpaceExW
CreateFileW
DeviceIoControl
SetErrorMode
GetComputerNameW
FormatMessageW
GetLogicalProcessorInformation
GetNativeSystemInfo
GetSystemDirectoryW
HeapFree
HeapAlloc
GetProcessHeap
ReleaseMutex
OpenMutexW
WaitForSingleObjectEx
QueryUnbiasedInterruptTime
lstrlenW
ReadFile
GetFileSizeEx
SetFilePointerEx
FindFirstFileExW
FindNextFileW
GetFileType
SetFilePointer
GetOverlappedResult
GetFileAttributesW
GetFileTime
GetFileAttributesExW
SetFileInformationByHandle
GetLocaleInfoEx
LocaleNameToLCID
LCIDToLocaleName
LCMapStringEx
IsValidLocale
GetSystemDefaultLCID
ResolveLocaleName
EnumSystemLocalesEx
GetSystemDefaultLocaleName
GetFileAttributesA
LoadLibraryExA
LockResource
GetProcAddress
InitializeCriticalSectionEx
ResetEvent
SetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CreateEventW
WaitForSingleObject
WaitForMultipleObjectsEx
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CreateThreadpoolWait
CreateThreadpoolWork
SubmitThreadpoolWork
QueryDepthSList
TryEnterCriticalSection
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
RtlCaptureStackBackTrace
GetUserGeoID
GetLocaleInfoW
GetUserPreferredUILanguages
GetACP
GetTempPathW
GetLongPathNameW
GetFinalPathNameByHandleW
DecodePointer
GetSystemPowerStatus
GetTimeZoneInformation
GetCurrentThreadId
HeapCreate
WriteFile
GetDiskFreeSpaceW
LockFile
InitializeCriticalSection
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
OutputDebugStringW
FlushViewOfFile
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
InitOnceExecuteOnce
CreateDirectoryW
K32GetProcessMemoryInfo
GetCurrentThread
OpenEventA
CreateEventA
OpenMutexA
CreateMutexA
OpenSemaphoreA
CreateSemaphoreA
OpenFileMappingA
CreateFileMappingA
GlobalAlloc
GlobalFree
SetFileTime
CancelIoEx
GetTempFileNameW
GetProcessAffinityMask
CreateWaitableTimerW
SetWaitableTimerEx
CancelWaitableTimer
GetPhysicallyInstalledSystemMemory
GetProductInfo
QueryPerformanceFrequency
WerRegisterMemoryBlock
WerUnregisterMemoryBlock
QueryFullProcessImageNameW
CreateIoCompletionPort
PostQueuedCompletionStatus
GetThreadIOPendingFlag
GetQueuedCompletionStatus
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsDebuggerPresent
WaitForMultipleObjects
GetStartupInfoW
CreateMemoryResourceNotification
IsSystemResumeAutomatic
RtlCaptureContext
SwitchToThread
FindFirstFileW
lstrcmpW
RemoveDirectoryW
CopyFileW
ProcessIdToSessionId
GetCommandLineW
SetEnvironmentVariableW
GetPriorityClass
GetLocalTime
VirtualQuery
VirtualProtect
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetOEMCP
EnumSystemLocalesW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCommandLineA
ExitProcess
GetStdHandle
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCPInfo
EncodePointer
RtlPcToFileHeader
GetStringTypeW
InitOnceComplete
InitOnceBeginInitialize
CreateThread
CloseHandle
ExpandEnvironmentStringsW
GetModuleFileNameW
SetFileAttributesW
TryAcquireSRWLockExclusive
GetFileInformationByHandleEx
CompareStringEx
GetLastError
GetFullPathNameW
GetExitCodeThread
MultiByteToWideChar
DeleteFileW
IsWow64Process
AreFileApisANSI
GetModuleHandleExW
GetCurrentProcess
FreeLibrary
IIDFromString
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
CoUninitialize
CoInitializeEx
SysFreeString
VariantInit
VariantClear
SysAllocString
WintrustRemoveActionID
WintrustAddActionID
GetAdaptersInfo
GetDeviceCaps
ClosePrinter
InstallPrinterDriverFromPackageW
DeletePrinterDriverExW
DeletePrinter
AddPrinterW
UploadPrinterDriverPackageW
XcvDataW
OpenPrinterW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
pidgenx.pdb
_vsnwprintf
_wcsicmp
_purecall
_onexit
_lock
__dllonexit
_unlock
memmove
memset
memcpy
__C_specific_handler
_amsg_exit
free
_initterm
memcmp
rand
srand
time
wcsncmp
_wtoi
_wcsnicmp
_ui64tow
_itow
malloc
_XcptFilter
wcschr
wcsstr
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateSemaphoreW
CreateEventW
CreateThread
GetModuleFileNameW
VirtualQuery
FreeLibraryAndExitThread
GetCurrentThread
SetThreadPriority
GetVersion
DeleteCriticalSection
RtlDeleteFunctionTable
GetSystemInfo
EnterCriticalSection
VirtualAlloc
GetProcAddress
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
RtlInstallFunctionTableCallback
WaitForSingleObject
FreeLibrary
FileTimeToSystemTime
GetSystemDefaultLangID
GetVersionExW
RaiseException
ReleaseSemaphore
SetEvent
WaitForMultipleObjects
GetProcessAffinityMask
GetThreadPriority
GetLocalTime
SystemTimeToFileTime
InitializeCriticalSection
HeapAlloc
HeapFree
GetProcessHeap
SetLastError
LocalAlloc
GetVersionExA
GetLastError
LocalFree
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
CreateFileW
GetFileSize
ReadFile
SetFilePointer
VirtualProtect
Sleep
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualFree
TraceEvent
CryptGenKey
CryptExportKey
CryptVerifySignatureA
CryptSignHashA
CryptImportKey
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage
CryptGenRandom
CryptAcquireContextW
CryptReleaseContext
GetTraceLoggerHandle
I_RpcMapWin32Status
UuidToStringW
RpcStringFreeW
UuidFromStringW
PidGenX
PidGenX2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ