C:\Programming\oxware\build\cheater.pdb
Overview
overview
3Static
static
3oxware_v1....er.dll
windows7-x64
3oxware_v1....er.dll
windows10-2004-x64
3oxware_v1....ui.dll
windows7-x64
3oxware_v1....ui.dll
windows10-2004-x64
3oxware_v1....re.exe
windows7-x64
1oxware_v1....re.exe
windows10-2004-x64
3oxware_v1....ll.bat
windows7-x64
1oxware_v1....ll.bat
windows10-2004-x64
1oxware_v1....il.dll
windows7-x64
3oxware_v1....il.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
oxware_v1.0.5/oxware/cheater.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
oxware_v1.0.5/oxware/cheater.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
oxware_v1.0.5/oxware/oxui.dll
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
oxware_v1.0.5/oxware/oxui.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
oxware_v1.0.5/oxware/oxware.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
oxware_v1.0.5/oxware/oxware.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
oxware_v1.0.5/oxware/uninstall.bat
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
oxware_v1.0.5/oxware/uninstall.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
oxware_v1.0.5/oxware/util.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
oxware_v1.0.5/oxware/util.dll
Resource
win10v2004-20240508-en
General
-
Target
02-06-2024_AmGxi3wV64faQ97.zip
-
Size
4.3MB
-
MD5
76bed62123dc93fddcd4f24ac111ce2d
-
SHA1
aa7e1f1510204d3c295df263722b9efeb6404875
-
SHA256
b15e31499a0677ff372bae5ed8adc24839393a1fe0b7d95e292a7501894cc3cd
-
SHA512
f0e63208ae1d94adefca022397479b587b5d3ed774392f7663c2e82365191938aaf2ec05be7d6bfd90e6851c7da6ea27bba4e37e57dc3f28c4f3289ede9aea04
-
SSDEEP
98304:u1I5GHyTv46Dk+rujaOnCwbFX2WnTmTShRG9iA7:u1KGHwv47YuYUHT1Gz
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/oxware_v1.0.5/oxware/cheater.dll unpack001/oxware_v1.0.5/oxware/oxui.dll unpack001/oxware_v1.0.5/oxware/oxware.exe unpack001/oxware_v1.0.5/oxware/util.dll
Files
-
02-06-2024_AmGxi3wV64faQ97.zip.zip
Password: 123
-
oxware_v1.0.5/oxware/README.txt
-
oxware_v1.0.5/oxware/cheater.dll.dll windows:6 windows x86 arch:x86
Password: 123
1259384dad4c9c6819a16f76843c7974
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
opengl32
glColor4ub
glTexEnvf
glColor3ub
wglCreateContext
wglGetCurrentContext
glClear
wglMakeCurrent
glVertex2f
glFogfv
glHint
glFogf
glFogi
glColor4f
glPolygonMode
glShadeModel
glVertex3fv
glEnd
glVertex3f
glBegin
glColor3f
glLineWidth
glDisable
glDepthMask
glEnable
glBlendFunc
glReadPixels
ntdll
NtClose
NtWriteVirtualMemory
kernel32
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
MoveFileExW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
OutputDebugStringA
GetTickCount
GetProcAddress
GetModuleHandleA
GetCommandLineA
CloseHandle
VirtualFree
VirtualAlloc
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
FlushInstructionCache
VirtualProtect
IsWow64Process
GetModuleHandleW
GlobalAlloc
GlobalUnlock
GlobalLock
GetCurrentProcess
GetCurrentThreadId
SuspendThread
ResumeThread
GetLastError
GetCurrentThread
GetThreadContext
SetThreadContext
VirtualQuery
SetLastError
GetFileInformationByHandleEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetFileInformationByHandle
user32
EmptyClipboard
GetWindowRect
CloseClipboard
OpenClipboard
MessageBoxA
SetCursorPos
GetFocus
SetClipboardData
GetDesktopWindow
GetClientRect
WindowFromDC
SetCursor
shell32
SHGetKnownFolderPath
ShellExecuteA
ole32
CoTaskMemFree
msvcp140
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Query_perf_frequency
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Thrd_sleep
??_7_Facet_base@std@@6B@
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPBD@Z
_Mtx_destroy_in_situ
??_7facet@locale@std@@6B@
_Mtx_init_in_situ
_Xtime_get_ticks
??1facet@locale@std@@MAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Facet_base@std@@UAE@XZ
?_Xbad_function_call@std@@YAXXZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?uncaught_exceptions@std@@YAHXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Throw_C_error@std@@YAXH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
_Mtx_lock
_Mtx_unlock
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
_Query_perf_counter
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
vcruntime140
memmove
memset
memchr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
__std_exception_copy
_purecall
strstr
__std_exception_destroy
_CxxThrowException
memcpy
api-ms-win-crt-heap-l1-1-0
_callnewh
free
calloc
malloc
api-ms-win-crt-string-l1-1-0
_wcsicmp
strncpy
strcpy_s
isprint
toupper
_strnicmp
_stricmp
strncmp
api-ms-win-crt-math-l1-1-0
_libm_sse2_atan_precise
_libm_sse2_acos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_CIatan2
_dclass
_dsign
ceil
floor
_fdclass
_fdsign
_ldclass
_ldsign
_libm_sse2_cos_precise
api-ms-win-crt-runtime-l1-1-0
terminate
_errno
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
exit
api-ms-win-crt-stdio-l1-1-0
ungetc
fsetpos
fread
fflush
fclose
fgetc
_fseeki64
_get_stream_buffer_pointers
fwrite
fgetpos
__stdio_common_vsprintf_s
fputc
__stdio_common_vsprintf
setvbuf
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-convert-l1-1-0
strtol
atoi
strtof
api-ms-win-crt-time-l1-1-0
_localtime64
_gmtime64
asctime
_time64
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Exports
Exports
CommunicativeDllEntryPoint
GetInterfaceInstance
PreDllLoad
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
oxware_v1.0.5/oxware/oxui.dll.dll windows:6 windows x86 arch:x86
Password: 123
1b9800115d2e224b4d592a343b36dd78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Programming\oxware\build\oxui.pdb
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
HeapFree
HeapAlloc
ReadFile
GetFileSizeEx
CreateFileA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
GetModuleHandleExW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
SetThreadExecutionState
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
VerSetConditionMask
user32
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
AdjustWindowRectEx
GetClientRect
SetWindowTextW
RemovePropW
GetPropW
SetPropW
ReleaseDC
GetDC
SetForegroundWindow
ReleaseCapture
SetCapture
MapVirtualKeyW
GetKeyState
GetActiveWindow
LoadCursorW
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
DestroyIcon
LoadImageW
SystemParametersInfoW
MonitorFromWindow
GetMonitorInfoW
GetRawInputData
SetRect
ClipCursor
OffsetRect
SetWindowLongW
PtInRect
GetWindowLongW
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputDeviceList
RegisterDeviceNotificationW
UnregisterDeviceNotification
ToUnicode
MessageBoxA
TrackMouseEvent
TranslateMessage
DispatchMessageW
PeekMessageW
GetMessageTime
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
ShowWindow
ChangeDisplaySettingsExW
SetWindowPos
GetWindowPlacement
EnumDisplaySettingsW
SetWindowPlacement
IsWindowVisible
IsIconic
BringWindowToTop
IsZoomed
OpenClipboard
GetCapture
EnumDisplayDevicesW
EnumDisplayMonitors
IsWindowUnicode
GetForegroundWindow
SetFocus
gdi32
CreateRectRgn
DeleteObject
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateDCW
DeleteDC
GetDeviceCaps
SetDeviceGammaRamp
shell32
DragQueryFileW
DragQueryPoint
DragAcceptFiles
DragFinish
msvcp140
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1facet@locale@std@@MAE@XZ
_Xtime_get_ticks
_Mtx_init_in_situ
??_7facet@locale@std@@6B@
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??_7_Facet_base@std@@6B@
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Facet_base@std@@UAE@XZ
_Mtx_lock
_Mtx_unlock
_Query_perf_counter
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Throw_C_error@std@@YAXH@Z
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
vcruntime140
memmove
_setjmp3
memchr
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
strchr
strstr
memset
_purecall
memcpy
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
strrchr
longjmp
api-ms-win-crt-heap-l1-1-0
realloc
calloc
_callnewh
free
malloc
api-ms-win-crt-string-l1-1-0
strncpy
strcspn
strspn
strncmp
_stricmp
toupper
api-ms-win-crt-math-l1-1-0
_libm_sse2_cos_precise
_libm_sse2_acos_precise
_fdsign
_ldsign
_libm_sse2_sqrt_precise
_dsign
_dclass
_fdclass
_ldclass
_CIfmod
ceil
_libm_sse2_sin_precise
_CIatan2
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_seh_filter_dll
_configure_narrow_argv
_wassert
terminate
_initterm_e
_cexit
_initterm
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
fwrite
fread
__stdio_common_vsprintf
ftell
_wfopen
fflush
fclose
fseek
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-convert-l1-1-0
strtoul
atof
strtol
api-ms-win-crt-utility-l1-1-0
qsort
opengl32
glPopMatrix
glShadeModel
glDisable
glPixelStorei
glOrtho
glPushAttrib
glGetIntegerv
glDrawElements
glTexEnvi
glColorPointer
glTexImage2D
glGetTexEnviv
glTexCoordPointer
glDeleteTextures
glTexParameteri
glLoadIdentity
glBlendFunc
glMatrixMode
glDisableClientState
glScissor
glEnable
glVertexPointer
glGenTextures
glBindTexture
glPolygonMode
glPopAttrib
glEnableClientState
glPushMatrix
glViewport
Exports
Exports
ExposeModule
GetInterfaceInstance
Sections
.text Size: 893KB - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 422KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
oxware_v1.0.5/oxware/oxware.exe.exe windows:6 windows x86 arch:x86
Password: 123
06733dad072c785ac94d1c748c2964a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Programming\oxware\build\oxware.pdb
Imports
ntdll
NtClose
NtOpenProcess
NtWriteVirtualMemory
NtWaitForSingleObject
NtCreateThreadEx
NtReadVirtualMemory
kernel32
CreateEventW
LocalFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
OutputDebugStringA
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetTickCount
CreateToolhelp32Snapshot
Process32First
Process32Next
VirtualFree
VirtualFreeEx
VirtualAlloc
VirtualAllocEx
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
IsWow64Process
GetModuleHandleW
GlobalAlloc
GlobalUnlock
GlobalLock
UnhandledExceptionFilter
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
TerminateProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetFileInformationByHandleEx
MoveFileExW
GetLastError
AreFileApisANSI
SetFileInformationByHandle
IsProcessorFeaturePresent
user32
EmptyClipboard
OpenClipboard
MessageBoxA
SendMessageA
LoadImageA
SetClipboardData
CloseClipboard
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
msvcp140
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Facet_base@std@@UAE@XZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?uncaught_exceptions@std@@YAHXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
_Query_perf_counter
_Query_perf_frequency
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1facet@locale@std@@MAE@XZ
_Xtime_get_ticks
_Mtx_init_in_situ
??_7facet@locale@std@@6B@
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??_7_Facet_base@std@@6B@
?_Winerror_map@std@@YAHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
vcruntime140
memmove
memcpy
_CxxThrowException
_purecall
__std_exception_copy
__current_exception
__current_exception_context
_except_handler4_common
memchr
__std_exception_destroy
memset
__CxxFrameHandler3
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
malloc
_set_new_mode
free
api-ms-win-crt-string-l1-1-0
isprint
strcpy_s
wcscpy_s
toupper
_stricmp
_wcsicmp
api-ms-win-crt-math-l1-1-0
_fdclass
_ldclass
_dsign
__setusermatherr
_fdsign
_dclass
ceil
_ldsign
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table
_configure_narrow_argv
_controlfp_s
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_c_exit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_errno
api-ms-win-crt-stdio-l1-1-0
fputc
fwrite
__p__commode
fgetc
_set_fmode
fgetpos
setvbuf
fclose
fflush
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Exports
Exports
GetInterfaceInstance
Sections
.text Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
oxware_v1.0.5/oxware/uninstall.bat
-
oxware_v1.0.5/oxware/util.dll.dll windows:6 windows x86 arch:x86
Password: 123
d9b39e7513b6e4924b8ab9e919e3720f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Programming\oxware\build\util.pdb
Imports
kernel32
GetModuleHandleW
GetProcAddress
CreateDirectoryW
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
GetTickCount
GetCurrentDirectoryW
InitializeSListHead
OutputDebugStringA
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
AreFileApisANSI
CloseHandle
GetLastError
DeviceIoControl
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
FormatMessageA
GetLocaleInfoEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
user32
CallWindowProcA
MapVirtualKeyA
GetKeyNameTextA
MessageBoxA
SetWindowLongA
advapi32
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
msvcp140
_Mtx_unlock
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter
_Query_perf_frequency
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Throw_C_error@std@@YAXH@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?always_noconv@codecvt_base@std@@QBE_NXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1_Facet_base@std@@UAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1facet@locale@std@@MAE@XZ
_Xtime_get_ticks
_Mtx_init_in_situ
??_7facet@locale@std@@6B@
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??_7_Facet_base@std@@6B@
_Mtx_lock
vcruntime140
__std_type_info_destroy_list
__current_exception
_except_handler4_common
__current_exception_context
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
_CxxThrowException
memcpy
memmove
memset
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
calloc
free
api-ms-win-crt-string-l1-1-0
tolower
toupper
api-ms-win-crt-math-l1-1-0
_ldclass
_dclass
_fdclass
ceil
_dsign
_ldsign
_fdsign
api-ms-win-crt-runtime-l1-1-0
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_errno
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
api-ms-win-crt-convert-l1-1-0
strtoll
strtol
strtod
strtoull
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
api-ms-win-crt-stdio-l1-1-0
fputc
fwrite
fclose
_get_stream_buffer_pointers
fgetc
ungetc
fread
_fseeki64
fgetpos
fsetpos
setvbuf
__stdio_common_vsprintf
fflush
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
Exports
Exports
ExposeModule
GetInterfaceInstance
Sections
.text Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ