Suspicious
Suspect

Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
4e739ab1e0b0e91dda834a21f410a4c4
Sha1
3916d5b7d436ce515ed7beb2c9fc94321fb825c2
Sha256
b1ce4ebb517a44e305e22ef9221c1b66c3e7f9327f4ae007a4e18144f4f97add
Sha384
852cbe131bb2d53381a5d17449a27908fd6a89c1921c8847b1a19199508dadaf207381ef6b24b2d52fe915bd9bb22a32
Sha512
c7710bae92329687f78e7891992c71d4fcda4a8d386622fa0abe400913c6ea3ff1dfcc04e5d5578c39031a6c3f1332a294f309d01237538a5d7b77a36f648689
SSDeep
98304:MSQXkP9y9tOM3kCIG7Lc8mtXTkosxx81J0jFXwYcAP1ffgFvLD6ORlENjYkY7PUq:Mklm8i98p5sXnhgAPFfgBf6GlCMk0PUq
TLSH
896633338E6CB9E7E6A6DB3BCA25DDC7071761038C5547E1A5C63B3C430BED84A592A0

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
[Authenticode]_91a341e6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.codeanalysis.csharp.dll.compressed
[Authenticode]_06ab660b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
IBC
ID:0000
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.resources
costura.microsoft.codeanalysis.dll.compressed
[Authenticode]_f845838e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
IBC
ID:0000
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.resources
Microsoft.CodeAnalysis.Resources.default.win32manifest
costura.system.collections.immutable.dll.compressed
[Authenticode]_16e9e691.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Collections.Immutable.SR.resources
ILLink.Substitutions.xml
costura.system.diagnostics.diagnosticsource.dll.compressed
[Authenticode]_5cadb7aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.DiagnosticSource.SR.resources
ILLink.Substitutions.xml
costura.system.io.pipelines.dll.compressed
[Authenticode]_7fb91b46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.reflection.metadata.dll.compressed
[Authenticode]_8ab7882d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Reflection.Metadata.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
[Authenticode]_15ab3250.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.threading.tasks.extensions.dll.compressed
[Authenticode]_7121b905.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
[Authenticode]_8c38879e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.runtime.compilerservices.unsafe.dll.compressed
[Authenticode]_81de04f4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.numerics.vectors.dll.compressed
[Authenticode]_ae030d4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.cs.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_ff8210bf.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.cs.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.cs.resources
costura.de.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_42e71afa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.de.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.de.resources
costura.es.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_dc7ccffc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.es.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.es.resources
costura.fr.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_f6cfbdf6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.fr.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.fr.resources
costura.it.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_0644dddd.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.it.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.it.resources
costura.ja.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_f067ddc5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.ja.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.ja.resources
costura.ko.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_71811d91.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.ko.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.ko.resources
costura.pl.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_3d7ce49c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.pl.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.pl.resources
costura.pt-br.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_5c93a14f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.pt-BR.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.pt-BR.resources
costura.ru.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_8b0b2c00.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.ru.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.ru.resources
costura.tr.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_5be0f9d4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.tr.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.tr.resources
costura.zh-hans.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_fcfa75b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.zh-Hans.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.zh-Hans.resources
costura.zh-hant.microsoft.codeanalysis.resources.dll.compressed
[Authenticode]_8403fd2a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.Internal.Strings.zh-Hant.resources
Microsoft.CodeAnalysis.CodeAnalysisResources.zh-Hant.resources
costura.cs.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_bab4888d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.cs.resources
costura.de.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_9b1489b3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.de.resources
costura.es.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_0ecc060c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.es.resources
costura.fr.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_19d7072b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.fr.resources
costura.it.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_6d249724.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.it.resources
costura.ja.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_d591197a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.ja.resources
costura.ko.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_2b3c361b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.ko.resources
costura.pl.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_76a55a58.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.pl.resources
costura.pt-br.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_2ba92143.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.pt-BR.resources
costura.ru.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_0cf52168.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.ru.resources
costura.tr.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_3285c424.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.tr.resources
costura.zh-hans.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_19e3902e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.zh-Hans.resources
costura.zh-hant.microsoft.codeanalysis.csharp.resources.dll.compressed
[Authenticode]_b9143bad.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Microsoft.CodeAnalysis.CSharp.CSharpResources.zh-Hant.resources
costura.metadata
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x692E00 size 7664 bytes

Info

PDB Path: C:\Users\John Doe\projects\eightsphere\products\primepdfconvert\HeartbeatAgent\HeartbeatAgent\obj\Release\Main.pdb

Module Name

Main.exe

Full Name

Main.exe

EntryPoint

System.Int32 Main.Program::Main(System.String[])

Scope Name

Main.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Main

Assembly Version

1.1.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

166

Main Method

System.Int32 Main.Program::Main(System.String[])

Main IL Instruction Count

42

Main IL

ldarg.0 <null> ldlen <null> brtrue.s IL_000B: ldarg.0 ldsfld System.String System.String::Empty br.s IL_000E: stloc.0 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> stloc.0 <null> ldloc.0 <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0022: ldstr "https://api." ldstr missing uid newobj System.Void System.Exception::.ctor(System.String) throw <null> ldstr https://api. ldsfld System.String Main.Program::ServerDomain call System.String System.String::Concat(System.String,System.String) call System.String Main.Program::BuildApiUrl(System.String) dup <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0049: ldsfld System.String Main.Program::Task ldstr invalid api uri newobj System.Void System.Exception::.ctor(System.String) throw <null> ldsfld System.String Main.Program::Task call System.String Main.Program::GetTaskInstallDate(System.String) stloc.1 <null> ldloc.1 <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0067: ldloc.0 ldstr missing install date newobj System.Void System.Exception::.ctor(System.String) throw <null> ldloc.0 <null> ldloc.1 <null> call System.Void Main.Program::SendHeartbeat(System.String,System.String,System.String) leave.s IL_0073: ldc.i4.0 pop <null> leave.s IL_0073: ldc.i4.0 ldc.i4.0 <null> ret <null>

Module Name

Main.exe

Full Name

Main.exe

EntryPoint

System.Int32 Main.Program::Main(System.String[])

Scope Name

Main.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Main

Assembly Version

1.1.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

166

Main Method

System.Int32 Main.Program::Main(System.String[])

Main IL Instruction Count

42

Main IL

ldarg.0 <null> ldlen <null> brtrue.s IL_000B: ldarg.0 ldsfld System.String System.String::Empty br.s IL_000E: stloc.0 ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> stloc.0 <null> ldloc.0 <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0022: ldstr "https://api." ldstr missing uid newobj System.Void System.Exception::.ctor(System.String) throw <null> ldstr https://api. ldsfld System.String Main.Program::ServerDomain call System.String System.String::Concat(System.String,System.String) call System.String Main.Program::BuildApiUrl(System.String) dup <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0049: ldsfld System.String Main.Program::Task ldstr invalid api uri newobj System.Void System.Exception::.ctor(System.String) throw <null> ldsfld System.String Main.Program::Task call System.String Main.Program::GetTaskInstallDate(System.String) stloc.1 <null> ldloc.1 <null> call System.Boolean System.String::IsNullOrEmpty(System.String) brfalse.s IL_0067: ldloc.0 ldstr missing install date newobj System.Void System.Exception::.ctor(System.String) throw <null> ldloc.0 <null> ldloc.1 <null> call System.Void Main.Program::SendHeartbeat(System.String,System.String,System.String) leave.s IL_0073: ldc.i4.0 pop <null> leave.s IL_0073: ldc.i4.0 ldc.i4.0 <null> ret <null>

4e739ab1e0b0e91dda834a21f410a4c4 (6.9 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙