Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Genshin Impact 4.8.zip
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
res/HoYoNetworkSDK.dll
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
res/hpatchz.dll
Resource
win11-20240802-en
Target
Genshin Impact 4.8.zip
Size
24.2MB
MD5
5d6350eb1dce2c9ebddb2ae4b5e694d0
SHA1
4efc35b5e74ab805cc76bdc141c2e868407e0b2e
SHA256
0b24697a13f2066e1b935ffab88412fd19d3a79c42b17d5fd476a2fbb122ba8d
SHA512
58fa915c923ae5e05e14bc6ac0c755edb7bb5d1f4d9e2431eae5d7ee251f252d9038e4dfedecbc7b53e9354fc5c4db2062f0f6679f9b9b2a8c4c984d4ebec2c1
SSDEEP
393216:OYRODbQUdgdpGdIil0k6ASEoWCqR6jg25TPbv/veC52yQDlBME/10wOcJw4dV+Lg:IXdIpGdNl099sCqRGfr/klBL10Fc9eE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
E:\proj\network_sdk_online\network_sdk\NetworkSDK\bin\x64\Release\HoYoNetworkSDK.pdb
ioctlsocket
freeaddrinfo
sendto
listen
recvfrom
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
socket
WSAGetLastError
WSACleanup
WSAStartup
getaddrinfo
gethostname
htonl
ntohl
accept
CryptGetHashParam
CryptReleaseContext
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptAcquireContextA
CertFreeCertificateContext
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143
ord301
IdnToAscii
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFullPathNameW
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
GetFileSizeEx
HeapReAlloc
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetEndOfFile
GetStringTypeW
LCMapStringW
CompareStringW
HeapFree
HeapAlloc
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
SetFilePointerEx
GetModuleHandleExW
GetTimeZoneInformation
HeapSize
WriteConsoleW
FlsFree
FreeLibraryAndExitThread
ExitThread
CreateThread
InitializeCriticalSectionEx
MultiByteToWideChar
WideCharToMultiByte
GetLastError
SetLastError
FormatMessageA
FreeLibrary
GetProcAddress
GetTickCount64
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
SleepEx
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
CloseHandle
WaitForSingleObjectEx
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
LoadLibraryExW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
RtlUnwind
GetSystemTimeAsFileTime
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
HoYoNetworkSDK_CreateNetworkHandle
HoYoNetworkSDK_GetClassObject
HoYoNetworkSDK_HttpGet
HoYoNetworkSDK_HttpHead
HoYoNetworkSDK_HttpPost
HoYoNetworkSDK_HttpRequestClose
HoYoNetworkSDK_HttpRequestGetResponse
HoYoNetworkSDK_HttpRequestInit
HoYoNetworkSDK_HttpRequestRegisterCallback
HoYoNetworkSDK_ReleaseNetworkHandle
HoYoNetworkSDK_ReleaseObject
HoYoNetworkSDK_ReleaseResponse
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
G:\Playground\HDiff\HDiffPatch-3.0.8\HDiffPatch-3.0.8\builds\vc\x64\Debug\hpatchz.pdb
MultiByteToWideChar
GetTickCount
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
memcpy
memcmp
memset
strchr
memmove
__C_specific_handler
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__acrt_iob_func
__stdio_common_vfprintf
free
malloc
exit
fclose
ferror
fflush
fgetc
fopen
fread
fwrite
ungetc
isdigit
strcat
strcmp
strlen
_wassert
_wfopen_s
_wremove
_fseeki64
_ftelli64
_errno
_wmkdir
_wrmdir
_wrename
_wstat64
setlocale
qsort
_CrtDbgReport
_CrtDbgReportW
_initterm
_initterm_e
__stdio_common_vsprintf_s
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
_fdopen
_fileno
_setmode
hpatch_cmd_line
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ