Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
WXWorkPlayer.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
WXWorkPlayer.exe
Resource
win10v2004-20240226-en
Target
WXWorkPlayer.exe
Size
154KB
MD5
91cd85a0476446e91681d09f50ac1284
SHA1
9ddff4b77339a64b08cb2dec597f053c14174280
SHA256
5e5727cb522e3a223499b1266a82a0167d593a10c276ed7f3950d706d21f076c
SHA512
2a1604932310035a7fa25e4a09949da3a5bbd74a50e43f0e777e484cd575d28d9419b1d92640632aa716d6204b95f61319cf7a0d56a99d030b756528779d883e
SSDEEP
3072:K9CEAGxiVRh+h85ufeKg0eylJ6YSXWkvDObXt4T:exiVRh+i4Wt0ey/6YSXAmT
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
F:\Ugit\ThumbPlayer\PlayerCore\platform\windows\Release\Win32\WXWorkPlayer.pdb
TerminateProcess
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
Thread32Next
LeaveCriticalSection
InitializeCriticalSection
SetErrorMode
Thread32First
CreateFileW
GetCurrentThreadId
SuspendThread
UnmapViewOfFile
DuplicateHandle
HeapSize
CreateToolhelp32Snapshot
CreateEventW
GetLastError
LockResource
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
Module32FirstW
HeapDestroy
GetProcAddress
VirtualAllocEx
GetCurrentProcess
ReadProcessMemory
GetCurrentProcessId
GetProcessHeap
CreateProcessW
GetModuleHandleW
Module32NextW
CreateFileMappingW
MapViewOfFile
GetTickCount
VirtualQuery
OpenThread
SetUnhandledExceptionFilter
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
FileTimeToLocalFileTime
WideCharToMultiByte
FileTimeToDosDateTime
GetStdHandle
WriteFile
MultiByteToWideChar
GetCurrentThread
LocalFree
CreateMutexW
ReleaseMutex
LoadLibraryW
SetCurrentDirectoryW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
EnterCriticalSection
HeapFree
WriteProcessMemory
SearchPathW
DeleteCriticalSection
SizeofResource
IsProcessorFeaturePresent
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
CommandLineToArgvW
PathFileExistsW
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
SymGetSymFromAddr
SymCleanup
SymGetModuleBase
StackWalk
SymGetModuleInfoW
SymInitialize
SymFunctionTableAccess
wcsrchr
__std_type_info_compare
memcpy
__std_terminate
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
__CxxFrameHandler3
memset
_wcslwr
wcscat_s
wcsnlen
wmemcpy_s
wcscpy_s
_callnewh
_set_new_mode
free
realloc
malloc
calloc
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_controlfp_s
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
terminate
_seh_filter_exe
_set_app_type
fseek
ftell
fwrite
fopen
ferror
_wfsopen
__stdio_common_vswprintf
_set_fmode
__stdio_common_vsprintf
fclose
__stdio_common_vswscanf
fread
__p__commode
wcstoll
wcstol
_time64
srand
rand
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ