Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
GenshinImpact.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GenshinImpact.exe
Resource
win10v2004-20240412-en
Target
GenshinImpact.exe
Size
5.1MB
MD5
45a9609459fa924db2537857664c6bfa
SHA1
b31b6d0523cbef9a35de6701246a76f22eb94ed9
SHA256
d280c317f00749e142e6a9699e69f4418b49f923775d0fcbf8e68bcddf11d630
SHA512
f2e293f1ddb72ecdceeb821ae9eb07ac23c9f0e2bc818fc315b623ffde64160742d4fff0d21dff46aa48a809092c953c03ec19f715e6f802af008a179d546018
SSDEEP
98304:dOiGmlGAmdJXYVH3ORxl6LHnIFuE63BKdP9h7Z33XvolEA:0iGmlGZYCrGITE89HXvo6A
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\WKSPC\4.4Fix\sourceCode\build\WindowsStandaloneSupport\Variations\win64_nondevelopment_il2cpp\WindowsPlayer_x64_Master.pdb
UnityMain
FindNextFileW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
[?Z]�5��C+��+ިd��Z%����*1b�g�#-�L�����*�b8��Iv}4�2��[T�ѻ����w�G]W�6q�<��{�g�/�%��II�3krm&j;�Wg)��^�@3=�[:����]�E<�c{B%a))� ��u��/am�p��G*����^�k*Q*)O@�ɲA-�v ��O�1�}p�r �jw�*�Ә�.]��t�<oXY����;�Y���R���TYB텶R&�8mf觰�"K�q���O�:�x��&�Tx*�Dm� �m^���Y�O6M�j'��f��n�:N��,�.x۸�n���q�D��&�p5����s}�{���MP14KT<פ�a��ە�Z�(�B4XF�~z晋��#G�����v�y_rabr��D����aҗ������g"�I�\&RV�R����11F�I�^�L����o���_�ڒI]b�q[>����U��8{o)~�?��Si��u7���p, �9�}�p��è�{ي�2����i��(��Z �<jϚ}0Ϋ�s�$�>!��)Ps�}��� �j������i�à���:|F�A ��<y��S�"#�'�L������[U��[PSN�;(�uc<>��18ɕ�U�j�=ᯙ��XF�k��kSfH� �7,�!<��(�)%���߽��0ha��qMfشDa����'�N�+-�(�����1 �,� 7Z��vrip�y���i������S��o3�ʯ��\~���^њ� {�֘|@/������ʛ�ڪxrH��z��Xss���ou:��JT��������6X��:@GuY8�*k�LA��NR���_��Q�C��N���Ўm�1Iv�`�l����|$���S�����gI�hT���ZP��� $ɴ8���Y�h�s��Ϩ?z������ #�?�2x+����Ʈ���L�p� �6S�*yDTQ�|���s�$������wxYa��Yy��[���3�q����+,��R���4����Q�9u����+�*��U����� N����� ��u.sl�cv����{���ѓ�%���Vt�{π��H���-�{��Q�]��Z�v.���$5�����_�G?̞���):����N��{�"Oԙ�'���0L!|%m/��A��|\�sAW_F�Ɛ8������ԏ�������:γ4�������XC.����t�x�#��W8TލVqqKe��Y�}o���`� ̻z��/���:�x��m�2�R� ��a6ߵa 6��Yg��.�m�D��. ����9�b�"�p؛ҿS���i�)sJɖ��ؙ?_�}}Ѥ����9a�##�ie]��ι��*�I)9���Vp�_��HQ丈��6���b�[email protected]�r��IW�D1���G�n�UQ���<P���v�U�� O��6� �:����@��&jϸ]T(������ �!F�qhrJO��������;�����!����� ��c�zo/9���!:����k�M ����a����a}�t�{am���5��-(���e'y���6q����[m�>�¤�j��}�q͠K���-�ᱞ�}� ˦X�oÍX9mL�iE���ʢ�,nɭРë%y�]ټ�VzMʎ�*s�� �����c����� ����k���~n@��+��Gl�B���xX�����R����oo��D�ؓ��+��i��8-�3�s�L��P�Pj��3[��.��f��:eDZ��A?�;�ݭ�t�94��U��Lۀ�\�Gj>��������\G]1�>�����W�7˯�����G��imI���+��JDnV���T��KהҞ9��4�V���l��ܥ��c!��Ø��i�z~����6y�2K)�./Y �q[i<W�h� ����� ��PLH=��ZgI�I���˲��'�[�"�3������]`U��V�P��~���G4xs@� &$)�e7Ba�X���r)�%hF1������9��_�R>Ḹ��ؐo��o���D 9�T�" �J AaEjg��r�0�X[�7 ���b 4�b�^p(P��Q7�z>�D�S�eC5'��WN���Ku������ �L��s�́��o�K[��c����ݼ���jA�&`q��g}8�&\#ƌ�ꊴ���+�=��oC��&�6�27,��8ŽG� ��so�Z�����Ƙ���97�f-��F���P ��.~韢�� ���b�� ����<ׁ���*��8K�\�k���ӈg^Rh��MC��ܛ�S����jj��7i��F>>�oY��:\/��'�1W0q&���a��hl�顼�}���썉�B�Me.n���/����m���裷Z���c��]�4�,�G)� 1ee�ƛ�n/�ߎ���?�ċ9��ܰѥ�g5�_�{�9�+��lD��#vŋx�p�7E3٪a�k��u}h4�� �tq��:[h-4.�����z�$c��韕�CE�&טR�L6d�{�A���҃�L��|�z:ď�f�@�z�˓ƻ�m�"\�'�#��.R�<���KL1��v<���7�kN ���ƀ�>�2�04^)RZ�c.�2�����pkoO����l��5�m����ljڣ2w�5ɯ��4qrx��T�db�<ʋ,�bpv��� |7H�*�,�D"�v S~����A<8*�#:���fS�m�ɽ2��:�:�9Gd�D�M�^�V�=����n��k:�2��*B��&�~�'��'�1b\�U%Q<�K���{�ߣc�t/��S3#��g�z� ѿ�H�>2���P�x@l���ic��"�|7��,��]��y��@� ��&�L��0/�1p>4�R�c��S>r�� @�A ac|�Q!�����xOx��s(^�ǩh��B�:P�Ne ݤ7K��47w�<���:CFqų/w'�9Ǔ��-H�n�t�W�Ky��y�?<��H%�RgK۶����)�2���"د%Qz��J{G�XD]�Zd�XM+L�xN�d���j�����v�v�2�����L�Q��<\Ak��&2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ