Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
genshin_global.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
genshin_global.exe
Resource
win10v2004-20231215-en
Target
genshin_global.exe
Size
37.9MB
MD5
82ebc7d0252a5361d7ca066be6551b93
SHA1
8f33fbbdd51b5dc5339c0eb2e414860cf6f04fd9
SHA256
bdad3c5e278a03a2f3109b84708819cc6a1f9f02ab1e83f07603f63f9916d6ce
SHA512
260777c752cb2d14f7c0f667c81f4a4c9d54331cfe5b574609c073180458bff25f0db1dc81bd4023df32d34a9856ec0f10e6feaf6966a2567aa9fc37f203704b
SSDEEP
786432:WQgBUWLP5jxIkTcypX3maertehppms20j17CfCCw6EGLdWiovCah5e7Y:TAUW1FIkwYXWjepmEj1yCDGLdW3aaPek
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
���s�#������rp�<vW����v�����)�ҒXA�7��`Q���J>X��PN�H���� �[�^qȶq���*&W�љ�V����i� � ����M鰙���\�7˵g�"�p8��Ucp�EϷ6Ɖ`%�}�g�>� >댡�%��8Q=OaD�}��A]a�=�&���?� .g���c����Y��p�2}"�Ts?���.�H����mXx��RL�}�p,��C���G'��vP0gr6+�_���D�(X���D�z?r�@ѬHy<ݞn7��LM��Ɏ1ftYr\3��F���ucR���F�9�B��G���0b��!ڨ��w�i���u.���_���p� �����F�������>�^:�C�\��.�u�Wu�۸(��Y\�[��Ϥ���M�x��dZh+d#؈-#�KvFJ�2� L>���ԛs��[{��,�@1�����[/4�eW��u\�������\�5���2��ع�~S�z���� ��aXp.�p��M��#4F����6��j�|M2�複u�1ʁ�K����]�����4�%��1 �3>��|�&a�-5��%|��(��.l�k�ǫ]5���y���L2���0]�q�����/V��]ͫקk�Gq���w"-G�TJ�TL3D³�U>̢aܾ��2�7�[�FN\ ���L[I�}R�1=5���iY���6���{��s�C�u��!�!����� �E+��a�r�^��SzIj�N�݅����~�q<��O ��S�l���B����=)�D������!�i�;��&�����������.Sk�c�d����z�2���t�얓%���Aq��`�'iI��A�^��������s��b(�:F9��]������Ŕ��PT�j��[M��g��;,ތͦCѺr�q"�������W��خA�� X�`VcD��q��}�O=Z�ב����窇y�+~�&��K�f�LV�� �����}?���J$����7���>J���0���B����C�$@Y�i��� \�5P(b���uZ����7<�ja�����n�g/��������n��@*�����b�`P��o(�R\�ɈO����Y����i�u��fl�#J��H��$v�lW�1� �;��\2_���hdz�Љ����pKC5�H��x�y����T�����N LW�x�������"���Է%��HC�_[�숬��w";������N�H��j��"<#�v��+���'�K���b��.�f���Ѭ�.8ܶ ��iR(��߄���91�2m�qsqT|��n���1q"�&a}G ��;,}�D+����c8S"���[��~Rj��ۈ#ډC+u���0>kW_�C&�X��g��LBBgZ�Wz�;���.e0�+��b�1H�n�Y�^4�H�Ͼo�=C 1j�M��;�rČ�C D�<?ce��o����̀������2Ӂ�4"���K��W���8�#[$�����n�7C�>�u7�s8�8$WM@љ�xEM�(��"��e��˦�����[|.o�E�GV�!�fM}a��+d��gM�r �Tp�"vT��6"�O���閲9h+Lx�\E�v�RDgh� ��D���K�����p� 9�h]�Q���[����{�F�� f�����C4Y�{���v��qdA@�^���"Z8¨�̈I}����vEHH��t�e��C���<$[`(��ܾ`~y��v�Sp�ģ*���U�Z�C�ǔ����$t�^�9t�����]%*�P���R~���̨:�]{N�(�)�m��o�� L��%�ު��(L��K�=ڈ|�}^���KlN�V���g��vRp��i�[�G{���)Tm�W���T�ֳf�)(S7��Z�4��3��D0�5�����ɻ�.O��RR�$�*MEP��z������s��l-4L�z�ګh�t�=�)K�g ��_^sB ��l��'V4f_�Q;w���a����3�����ޟ�䏭�����n���u�z��[�E ��!��5(�HNU�L�G�D���y�B�a +0�ZhN<}H V(^}{4�XX�.S�2G`�]��hG�;������r{�%5+%LB����Y��Ne�⑳?Fy�Zr����0Z>�G�a����I��_c�xq<�J��Z�7o�L�V�2��8�K����d_�k֎��fK���(�]'~mb�) ,�J��&։AK{>�b���L�O��a��.Zn��rp��NZ�J�i ��T���~��!�\��5�tr�Gb�ʈ�èɛkw�p��Ц{ �����HJ�J_P��u����]�KἼ�|��<>�����%�=� f�7�pi���G�e��Q�'�u��/}���,D��1��l��:�<�Fs�^��r�Ŋ��Vl�:�а����C*����ȊV�0�Ȏ A�ƪxj�G��V�hb��L\�]�]#1��[��G ������n|���W��nr��Uw�;?杠�!�,*���# E�w7Ho���$�����ky9~���t���%�$ c~�� &+��+�܅4ġ�p:�Gm c2��l@E���Rbݭ�e���x�{WmZ2��w���~>���3��*���_�~NZ�� �����@?���m�ΰ�ʒ�5��������~��y��6 3"I��=�hw$��� �����t����`8����4�9-ܼ�2��O�0�ȹ#/zt �����ݡ�ʃ������Y�.�4��W��"$�r�,|NP����թt�V0X���M�.\X��9DI�� ��du%Ȗ��i��j^n"V�����Yf\A����@�o��|qȊ�\����#����1EސD��1`���~Zت>��GBA��@U}� �}�+ưx�G�qt����~�l�VA}AEx�@J �0 f�,R*^��OG�+R� ��/+օ���"l�'�]��>}��� C��:Պǜ�fO�# :3�[/��b{J�����u�6��@%��Zn�������!C�%��~M��4`�#�Z 8����|��͈&�w�3�s�����!NQh�T�}�<��U:A�߅i'%:��2鱛/Z�D�����p/�m���ȏ-�&��pQ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE