Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
tmplg8edeh7.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
tmplg8edeh7.dll
Resource
win10v2004-20240802-en
Target
tmplg8edeh7
Size
436KB
MD5
92e2e417f177bdc25275f75a1cfc5224
SHA1
b543adbb85386f307d8e874341779d46b9d85624
SHA256
067d5d904f68633301cf36dcfea43e9f564eecec375b78f4ff61957746e296a2
SHA512
4076b9407bbcb5847efc42cd6b537135877ac6d2f9c9069da99208531c85362c1b1ce3a75b2561fc8d3aeff226b00ab0f054288e7db087a0d5ef0c839b6b10ac
SSDEEP
12288:LJjlEbrMvtjjRdpQKjC6UfHlf8VETpBerf:LJ+boVj/Lm6UdfGNrf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\tinderboxa\win-7.0\out\win.amd64\release\obj\VBoxNetDHCP\VBoxNetDHCP.pdb
__C_specific_handler
memset
memmove
memcpy
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
memchr
__std_type_info_destroy_list
__CxxFrameHandler4
?_Xlength_error@std@@YAXPEBD@Z
RTStrSimplePatternMatch
RTStrToUInt32Full
RTStrToUInt8Full
RTLogRelGetDefaultInstance
RTLogRelGetDefaultInstanceEx
RTLogGroupSettings
RTLogFlags
RTLogDestinations
RTLogLoggerEx
RTNetStrToMacAddr
RTNetStrToIPv4Addr
RTNetMaskToPrefixIPv4
RTGetOptInit
RTGetOpt
RTGetOptPrintError
RTPathPurgeFilename
RTPathFilename
RTPathAppend
RTMsgError
RTMsgInfo
RTUuidCreate
??0RTCString@@QEAA@XZ
??0RTCString@@QEAA@AEBV0@@Z
??0RTCString@@QEAA@PEBD@Z
??1RTCString@@UEAA@XZ
?reserveNoThrow@RTCString@@QEAAH_K@Z
??4RTCString@@QEAAAEAV0@PEBD@Z
?assignNoThrow@RTCString@@QEAAHAEBV1@@Z
?assignNoThrow@RTCString@@QEAAHPEBD@Z
?printf@RTCString@@QEAAAEAV1@PEBDZZ
?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z
?append@RTCString@@QEAAAEAV1@PEBD@Z
?appendNoThrow@RTCString@@QEAAHPEBD@Z
?append@RTCString@@QEAAAEAV1@D@Z
?appendPrintfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z
?c_str@RTCString@@QEBAPEBDXZ
?mutableRaw@RTCString@@QEAAPEADXZ
?jolt@RTCString@@QEAAXXZ
?isEmpty@RTCString@@QEBA_NXZ
?equals@RTCString@@QEBA_NPEBD@Z
??MRTCString@@QEBA_NAEBV0@@Z
??0RTCError@@QEAA@PEBD@Z
??0RTCError@@QEAA@AEBV0@@Z
??1RTCError@@UEAA@XZ
?what@RTCError@@UEBAPEBDXZ
?getName@Node@xml@@QEBAPEBDXZ
?nameEqualsNS@Node@xml@@QEBA_NPEBD0@Z
?getValue@Node@xml@@QEBAPEBDXZ
?getParent@Node@xml@@QEBAPEBV12@XZ
?findAttribute@ElementNode@xml@@QEBAPEBVAttributeNode@2@PEBD0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAPEBD0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAVRTCString@@0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEAI0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_N0@Z
??0NodesLoop@xml@@QEAA@AEBVElementNode@1@PEBD@Z
??1NodesLoop@xml@@QEAA@XZ
?forAllNodes@NodesLoop@xml@@QEBAPEBVElementNode@2@XZ
??0Document@xml@@QEAA@XZ
??1Document@xml@@QEAA@XZ
?getRootElement@Document@xml@@QEAAPEAVElementNode@2@XZ
??0XmlFileParser@xml@@QEAA@XZ
??1XmlFileParser@xml@@QEAA@XZ
?read@XmlFileParser@xml@@QEAAXAEBVRTCString@@AEAVDocument@2@@Z
?assignNoThrow@RTCString@@QEAAHPEBD_K@Z
RTStrFormatTypeRegister
RTStrConvertHexBytesEx
?findChildElementNS@ElementNode@xml@@QEBAPEBV12@PEBD0@Z
?getAttributeValue@ElementNode@xml@@QEBA_NPEBDPEA_J0@Z
?createChild@ElementNode@xml@@QEAAPEAV12@PEBD@Z
?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD0@Z
?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDAEBVRTCString@@@Z
RTStrPrintf2
?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBD_J@Z
?createRootElement@Document@xml@@QEAAPEAVElementNode@2@PEBD0@Z
??0XmlFileWriter@xml@@QEAA@AEAVDocument@1@@Z
??1XmlFileWriter@xml@@QEAA@XZ
?write@XmlFileWriter@xml@@QEAAXPEBD_N@Z
RTTimeNow
RTStrToUInt16Full
RTCidrStrToIPv4
RTTimeExplode
RTTimeToStringEx
RTLogRelSetDefaultInstance
RTLogCreate
RTStrFormat
RTPathExecDir
RTAssertMsg1Weak
RTAssertShouldPanic
SUPR3Init
SUPR3Term
SUPR3IsDriverless
SUPR3CallVMMR0Ex
SUPR3LoadVMM
RTStrCopy
RTNetIPv4HdrChecksum
RTNetIPv4PseudoChecksum
RTNetIPv6PseudoChecksumEx
RTNetUDPChecksum
RTNetTCPChecksum
RTMemAllocZTag
RTMemFree
RTBldCfgRevision
RTBldCfgTargetDotArch
RTSystemQueryOSInfo
RTSystemQueryTotalRam
RTSystemQueryAvailableRam
RTSystemQueryDmiString
RTSystemQueryFirmwareType
RTSystemFirmwareTypeName
RTSystemQueryFirmwareBoolean
RTProcSelf
RTProcGetExecutablePath
RTTimeSpecToString
RTLogCreateEx
RTLogSetBuffering
RTLogFlush
RTEnvGetEx
RTDirExists
RTDirCreateFullPath
RTPathAbs
RTPathStartsWithRoot
RTPathUserHome
RTAssertMsg2Weak
RTMemAllocTag
RTTimeMilliTS
RTSemEventCreate
RTSemEventSignal
RTSemEventWait
RTSemEventMultiCreate
RTSemEventMultiDestroy
RTSemEventMultiSignal
RTSemEventMultiReset
RTSemEventMultiWait
RTSemMutexCreate
RTSemMutexDestroy
RTSemMutexRequest
RTSemMutexRelease
RTThreadCreateF
RTCritSectInit
RTCritSectEnter
RTCritSectLeave
RTCritSectDelete
RTStrStripL
?setAttribute@ElementNode@xml@@QEAAPEAVAttributeNode@2@PEBDI@Z
RTStrPrintf
RTStrPrintHexBytes
RTPrintf
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm
_initialize_onexit_table
_initterm_e
_register_onexit_function
_invalid_parameter_noinfo_noreturn
strpbrk
strcmp
_callnewh
malloc
free
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
DisableThreadLibraryCalls
TrustedMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ