cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2

Sharing

Copy URL Twitter E-mail

General

Target
cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2
Size 2.9MB
Sample260930-jympysad76
SHA256 cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2
MD5 958ac513813870f942c253bed3fd62f7
SHA1 16a49fd5468c4deb63a7cb1a0cb99a5137805971
SHA512 a2c7688e54a42aba63f85ca0b550c2933ac8058b514839c69b5cf9923ae1593ded0827b4dfbacaeda63f1867ff24ab8d1fea26881b411d4a599fa71abdcc309d
SSDEEP 49152:5hq58Q8krwjlk16LR9nMraCwnxYwWahnB0OFvheJQAT8UeAN0L72N12qzE:5h08Q8krwZR9nwOxRdBQ0L77
TLSH
T1B9E57C22FA42C03AE59A00F2E56C9B7F483CAB75036948C7F3D45D6D66205E32B72B57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2

File Explorer

cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2

.dll 2.9MB

cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2

IMPHASH ed921919864ed8856b128222ff31303d
SHA256 cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2
MD5 958ac513813870f942c253bed3fd62f7
SHA1 16a49fd5468c4deb63a7cb1a0cb99a5137805971
SHA512 a2c7688e54a42aba63f85ca0b550c2933ac8058b514839c69b5cf9923ae1593ded0827b4dfbacaeda63f1867ff24ab8d1fea26881b411d4a599fa71abdcc309d
SSDEEP 49152:5hq58Q8krwjlk16LR9nMraCwnxYwWahnB0OFvheJQAT8UeAN0L72N12qzE:5h08Q8krwZR9nwOxRdBQ0L77
TLSH
T1B9E57C22FA42C03AE59A00F2E56C9B7F483CAB75036948C7F3D45D6D66205E32B72B57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bd:70:2e:af:86:16:5a:06:d6:c0:cc:49:cd:1f:95:b8:25:85:fe:6e:d3:a8:ba:42:21:c1:36:05:03:55:8e:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91440113MA59E8P44H,CN=广州虎牙信息科技有限公司,O=广州虎牙信息科技有限公司,L=广州市,ST=广东省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e795aae7a6bae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jan 1, 0001

Subject

Serial Number

06:75:1e:38:e7:cc:5e:8c:63:df:9b:e7:9b:02:73:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 21, 2026 - Mar 16, 2027

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

1916234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\jenkins-187\workspace\aplus_rdm_hysignalcore_git-pc_crossplatform_hysignalcore_47187_cpp_prod\pc_project\Windows\Release\HySignalCore.pdb

ws2_32

getpeername WSAStartup send socket inet_pton WSASocketW shutdown select closesocket htons __WSAFDIsSet WSACleanup getaddrinfo htonl ntohs ntohl WSAGetLastError setsockopt getnameinfo ioctlsocket freeaddrinfo getsockopt recv connect WSAPoll WSASocketA WSASetLastError listen accept bind getsockname WSACloseEvent WSACreateEvent WSASetEvent WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents WSAEnumNetworkEvents inet_ntop inet_ntoa recvfrom sendto inet_addr

kernel32

InitializeCriticalSectionAndSpinCount CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead Thread32Next Thread32First IsDebuggerPresent AreFileApisANSI GetTickCount64 EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentThreadId SetEvent WaitForSingleObjectEx CloseHandle CreateEventA GetCurrentProcess DuplicateHandle GetModuleHandleA GetProcAddress CreateSemaphoreA GetTickCount ReleaseSemaphore GetModuleFileNameW WideCharToMultiByte GetVersion LocalFree FormatMessageA QueryPerformanceFrequency QueryPerformanceCounter OpenThread MultiByteToWideChar GetSystemTimeAsFileTime GetCurrentProcessId FormatMessageW OutputDebugStringA TlsSetValue TlsAlloc TlsGetValue TlsFree GetLastError SetLastError InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce CreateDirectoryW FindFirstFileW FindNextFileW DeviceIoControl RemoveDirectoryW SetEndOfFile FindClose CreateFileW GetFileAttributesW GetFileAttributesExW DeleteFileW GetCurrentDirectoryW GetModuleHandleW GetFileTime SetWaitableTimer CreateWaitableTimerW SystemTimeToFileTime OpenEventA HeapFree WaitForMultipleObjectsEx Sleep ResetEvent GetProcessHeap SetFilePointer UnmapViewOfFile CreateFileA CreateFileMappingA GetFileSize MapViewOfFileEx CreateToolhelp32Snapshot

advapi32

CryptGenRandom CryptAcquireContextW SystemFunction036 CryptReleaseContext

msvcp140

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z _Thrd_yield ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_BADOFF@std@@3_JB ?_Throw_C_error@std@@YAXH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?_Xlength_error@std@@YAXPBD@Z _Mtx_lock _Thrd_join _Mtx_unlock ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ _Cnd_signal ?__ExceptionPtrAssign@@YAXPAXPBX@Z _Cnd_unregister_at_thread_exit ?__ExceptionPtrCreate@@YAXPAX@Z _Cnd_init_in_situ ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z _Strxfrm ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?_Throw_future_error@std@@YAXABVerror_code@1@@Z ?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Xbad_function_call@std@@YAXXZ ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_XGetLastError@std@@YAXXZ ?id@?$collate@D@std@@2V0locale@2@A ?_Syserror_map@std@@YAPBDH@Z ?__ExceptionPtrToBool@@YA_NPBX@Z _Mtx_destroy_in_situ ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z _Mtx_init_in_situ _Cnd_register_at_thread_exit _Strcoll _Cnd_do_broadcast_at_thread_exit _Cnd_destroy _Thrd_sleep _Cnd_wait _Mtx_init _Thrd_start _Thrd_id _Xtime_get_ticks _Mtx_destroy _Cnd_init _Cnd_broadcast _Cnd_destroy_in_situ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z ?tolower@?$ctype@D@std@@QBEDD@Z ??1facet@locale@std@@MAE@XZ ??0facet@locale@std@@IAE@I@Z ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UAEXXZ ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ ??1_Locinfo@std@@QAE@XZ ??0_Locinfo@std@@QAE@PBD@Z _Thrd_create _Thrd_detach ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z _Mtx_current_owns _Cnd_timedwait ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z ??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ ??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z ?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z _Thrd_current ?_Random_device@std@@YAIXZ ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z ?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Query_perf_counter _Query_perf_frequency

crypt32

CertFreeCertificateContext CertOpenSystemStoreW CertEnumCertificatesInStore CertCloseStore

iphlpapi

GetAdaptersAddresses GetNetworkParams

wininet

InternetGetConnectedState

vcruntime140

_except_handler4_common _CxxThrowException memchr __std_type_info_destroy_list __RTDynamicCast memmove memset memcpy strrchr __std_type_info_compare strchr __std_terminate _purecall __std_exception_copy __std_exception_destroy __CxxFrameHandler3

api-ms-win-crt-stdio-l1-1-0

fread fwrite _wfopen _read _lseek _close ftell fgetpos setvbuf feof __stdio_common_vsnprintf_s fgets __stdio_common_vsscanf fgetc _fileno fseek fclose fopen_s fflush ferror __acrt_iob_func ungetc fsetpos _fseeki64 _chsize __stdio_common_vfprintf _get_stream_buffer_pointers fopen _ftelli64 fputc __stdio_common_vsprintf _write

api-ms-win-crt-utility-l1-1-0

rand qsort srand bsearch

api-ms-win-crt-convert-l1-1-0

atol strtoll strtoull atof strtol atoi atoll strtoul strtod

api-ms-win-crt-runtime-l1-1-0

_getpid _invalid_parameter_noinfo_noreturn _initterm_e _initterm _cexit _crt_atexit _execute_onexit_table _register_onexit_function _invalid_parameter_noinfo _initialize_onexit_table abort _initialize_narrow_environment terminate _configure_narrow_argv _seh_filter_dll _wassert _errno strerror

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file remove _stat64i32

api-ms-win-crt-heap-l1-1-0

realloc _callnewh calloc malloc free

api-ms-win-crt-string-l1-1-0

_stricmp strnlen strncpy isalpha tolower strncmp isxdigit isspace isgraph strncat _strnicmp isdigit

api-ms-win-crt-time-l1-1-0

__timezone _gmtime64_s strftime _localtime64 _ftime64 _time64 _gmtime64

api-ms-win-crt-math-l1-1-0

ceil _except1 _dtest log2

api-ms-win-crt-environment-l1-1-0

getenv

??0Client@hysignal@huya@@QAE@ABV012@@Z ??0Client@hysignal@huya@@QAE@XZ ??0HttpDNS@hysignal@huya@@QAE@ABV012@@Z ??0HttpDNS@hysignal@huya@@QAE@XZ ??0HyLogUploadClient@hysignal@huya@@QAE@ABV012@@Z ??0HyLogUploadClient@hysignal@huya@@QAE@XZ ??0LaunchClient@hysignal@huya@@QAE@ABV012@@Z ??0LaunchClient@hysignal@huya@@QAE@XZ ??0TimerClient@hysignal@huya@@QAE@ABV012@@Z ??0TimerClient@hysignal@huya@@QAE@XZ ??0WsMsgClient@hysignal@huya@@QAE@ABV012@@Z ??0WsMsgClient@hysignal@huya@@QAE@XZ ??1Client@hysignal@huya@@UAE@XZ ??1HttpDNS@hysignal@huya@@UAE@XZ ??1HyLogUploadClient@hysignal@huya@@UAE@XZ ??1LaunchClient@hysignal@huya@@UAE@XZ ??1TimerClient@hysignal@huya@@UAE@XZ ??1WsMsgClient@hysignal@huya@@UAE@XZ ??4Client@hysignal@huya@@QAEAAV012@ABV012@@Z ??4HttpDNS@hysignal@huya@@QAEAAV012@ABV012@@Z ??4HyLogUploadClient@hysignal@huya@@QAEAAV012@ABV012@@Z ??4LaunchClient@hysignal@huya@@QAEAAV012@ABV012@@Z ??4TimerClient@hysignal@huya@@QAEAAV012@ABV012@@Z ??4WsMsgClient@hysignal@huya@@QAEAAV012@ABV012@@Z ??_7Client@hysignal@huya@@6B@ ??_7HttpDNS@hysignal@huya@@6B@ ??_7HyLogUploadClient@hysignal@huya@@6B@ ??_7LaunchClient@hysignal@huya@@6B@ ??_7TimerClient@hysignal@huya@@6B@ ??_7WsMsgClient@hysignal@huya@@6B@ ?addGuidObserver@LaunchClient@hysignal@huya@@UAEXPAVGuidObserver@23@@Z ?addTimeAdjustObserver@TimerClient@hysignal@huya@@UAEXPAVTimeAdjustObserver@23@@Z ?genGuid@LaunchClient@hysignal@huya@@UAEHXZ ?removeGuidObserver@LaunchClient@hysignal@huya@@UAEXPAVGuidObserver@23@@Z ?removeTimeAdjustObserver@TimerClient@hysignal@huya@@UAEXPAVTimeAdjustObserver@23@@Z ?setHyConfig@Client@hysignal@huya@@UAE_NW4EHuyaConfig@23@ABUHyString@23@@Z ?startLoop@TimerClient@hysignal@huya@@UAEHXZ ?updateAppSrc@LaunchClient@hysignal@huya@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?updateUid@LaunchClient@hysignal@huya@@UAEX_J@Z GetSignalInstance HttpDNSInstance HyLog_close HyLog_open HyLog_set_console_enable HyLog_set_level HyLog_set_max_file_count HyLog_set_max_file_size HyLog_write InitHttpDNS InitHySignal InitLogUpload InitTimerClient InitWsMsgClient StaticsHyModule UninitHttpDNS UninitHySignal UninitLogUpload UninitWsMsgClient UnitTimerClient __XLOG_ASSERT getClientInstance getLogUploadClientInstance getTimerClientInstance getWSMsgClientInstance

Sharing

General

Malware Config

Signatures

File Explorer

cba544aa1db5f738c6faa04655357ea154ef73ef202c3d4ee7f8ff5dc72bafe2

PE Signature issue

ws2_32

kernel32

advapi32

msvcp140

crypt32

iphlpapi

wininet

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic