Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 60ce27c7ee2004f99611ecfb4e36347a
Sha1 040a2d47a54e09e7dd6db1c9e37633f842de5075
Sha256 01dc573ef5281f437fc225ccb0b47e2b5a54802b6f43798137be90ca5ef3ca52
Sha384 02a9418446c157bd7e436a3a0570958687ac26bb3eb0bb46b6a40544813cc44dcfac74b8680cd1a653a654bf35c84be7
Sha512 a7037956731be53e45015fec69372c88fc07934fa25ec037f9589e6745dad7f5c4165ae8677d40a48462501a664c8d209523d467b9c942a8211a2e9fb5c900b9
SSDeep 98304:hh/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIn:hh/ev5eTeW90kSIbDoUcfOhzT9cEt720
TLSH E8461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NETUPolyX 0.3 -> delikon
60ce27c7ee2004f99611ecfb4e36347a
Malicious
[Authenticode]_b95a991b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Installer.NETProgressView.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Installer.Properties.Resources.resources
Installer.Syncro.Installer.exe
Malicious
[Authenticode]_2e255469.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Installer.FrmProgress.resources
$this.Icon
[NBF]root.IconData
Kabuto.Installer.Resources.ISRG_Root_x1.cer
Kabuto.Installer.Resources.syncro-logo.ico
Kabuto.Installer.Resources.Syncro.App.Runner.exe
[Authenticode]_29deed15.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.Syncro.Service.Runner.exe
[Authenticode]_929ebf03.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.install.bat
costura.autofac.dll.compressed
costura.autofac.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Autofac.Builder.BuildCallbackServiceResources.resources
Autofac.Builder.RegistrationBuilderResources.resources
Autofac.ContainerBuilderResources.resources
Autofac.Core.Activators.Delegate.DelegateActivatorResources.resources
Autofac.Core.Activators.InstanceActivatorResources.resources
Autofac.Core.Activators.ProvidedInstance.ProvidedInstanceActivatorResources.resources
Autofac.Core.Activators.Reflection.ConstructorParameterBindingResources.resources
Autofac.Core.Activators.Reflection.MatchingSignatureConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.MostParametersConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.NoConstructorsFoundExceptionResources.resources
Autofac.Core.Activators.Reflection.ReflectionActivatorResources.resources
Autofac.Core.ContainerResources.resources
Autofac.Core.DisposerResources.resources
Autofac.Core.Lifetime.LifetimeScopeResources.resources
Autofac.Core.Lifetime.MatchingScopeLifetimeResources.resources
Autofac.Core.Registration.ComponentNotRegisteredExceptionResources.resources
Autofac.Core.Registration.ComponentRegistrationResources.resources
Autofac.Core.Registration.ServiceRegistrationInfoResources.resources
Autofac.Core.Resolving.CircularDependencyDetectorResources.resources
Autofac.Core.Resolving.ComponentActivationResources.resources
Autofac.Core.Resolving.ResolveOperationResources.resources
Autofac.Core.ServiceResources.resources
Autofac.Features.Collections.CollectionRegistrationSourceResources.resources
Autofac.Features.GeneratedFactories.GeneratedFactoryRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyWithMetadataRegistrationSourceResources.resources
Autofac.Features.LightweightAdapters.LightweightAdapterRegistrationSourceResources.resources
Autofac.Features.Metadata.MetadataViewProviderResources.resources
Autofac.Features.Metadata.MetaRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorActivatorDataResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationExtensionsResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericServiceBinderResources.resources
Autofac.Features.OwnedInstances.OwnedInstanceRegistrationSourceResources.resources
Autofac.Features.ResolveAnything.AnyConcreteTypeNotAlreadyRegisteredSourceResources.resources
Autofac.ModuleResources.resources
Autofac.RegistrationExtensionsResources.resources
Autofac.TypeExtensionsResources.resources
Autofac.Util.EnforceResources.resources
Autofac.Util.FallbackDictionaryResources.resources
Autofac.Util.ReflectionExtensionsResources.resources
costura.costura.dll.compressed
costura.costura.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.csharpfunctionalextensions.dll.compressed
costura.csharpfunctionalextensions.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.destructurama.attributed.dll.compressed
costura.destructurama.attributed.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.fluentcommandlineparser.dll.compressed
costura.fluentcommandlineparser.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.dll.compressed
costura.flurl.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.http.dll.compressed
costura.flurl.http.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ipnetwork.dll.compressed
costura.system.net.ipnetwork.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.jetbrains.annotations.dll.compressed
costura.jetbrains.annotations.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
JetBrains.Annotations.Source.cs
costura.sharpsnmplib.dll.compressed
costura.sharpsnmplib.dll
[Authenticode]_d7423556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.design.dll.compressed
costura.metroframework.design.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.fonts.dll.compressed
costura.metroframework.fonts.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Fonts.Resources.Open_Sans_Bold.ttf
MetroFramework.Fonts.Resources.Open_Sans_Light.ttf
MetroFramework.Fonts.Resources.Open_Sans.ttf
costura.metroframework.dll.compressed
costura.metroframework.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Controls.MetroGrid.resources
MetroFramework.Controls.MetroTextBox.resources
lnkClear.Image
[NBF]root.Data
[NBF]root.Data-preview.png
lnkClear.NoFocusImage
[NBF]root.Data
[NBF]root.Data-preview.png
MetroFramework.Localization.de.MetroToggle.xml
MetroFramework.Localization.en.MetroToggle.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
costura.microsoft.bcl.asyncinterfaces.dll
[Authenticode]_7bbedf97.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.abstractions.dll.compressed
costura.microsoft.extensions.caching.abstractions.dll
[Authenticode]_98b08d7f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.memory.dll.compressed
costura.microsoft.extensions.caching.memory.dll
[Authenticode]_f456ed73.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Caching.Memory.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.dependencyinjection.abstractions.dll.compressed
costura.microsoft.extensions.dependencyinjection.abstractions.dll
[Authenticode]_6f772489.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.DependencyInjection.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.logging.abstractions.dll.compressed
costura.microsoft.extensions.logging.abstractions.dll
[Authenticode]_07094d6f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Logging.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.options.dll.compressed
costura.microsoft.extensions.options.dll
[Authenticode]_20703a50.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Options.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.primitives.dll.compressed
costura.microsoft.extensions.primitives.dll
[Authenticode]_f99fc7eb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Primitives.SR.resources
ILLink.Substitutions.xml
costura.microsoft.win32.registry.dll.compressed
costura.microsoft.win32.registry.dll
[Authenticode]_4a73ed43.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.Registry.SR.resources
ILLink.Substitutions.xml
costura.newtonsoft.json.dll.compressed
costura.newtonsoft.json.dll
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.rollbarsharp.dll.compressed
costura.rollbarsharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.dll.compressed
costura.serilog.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.formatting.compact.dll.compressed
costura.serilog.formatting.compact.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.console.dll.compressed
costura.serilog.sinks.console.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.file.dll.compressed
costura.serilog.sinks.file.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.sevenzipsharp.dll.compressed
costura.sevenzipsharp.dll
7z-stream @ 0x00023560.7z
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
SevenZip.sfx.Configs.xml
SevenZip.sfx.Configs.xsd
SevenZip.arch.Test.bzip2.7z
SevenZip.arch.Test.lzma.7z
SevenZip.arch.Test.lzma2.7z
SevenZip.arch.Test.ppmd.7z
SevenZip.arch.Test.rar
SevenZip.arch.Test.tar
SevenZip.arch.Test.txt.bz2
SevenZip.arch.Test.txt.gz
SevenZip.arch.Test.txt.xz
SevenZip.arch.Test.zip
Test.txt
costura.icsharpcode.sharpziplib.dll.compressed
costura.icsharpcode.sharpziplib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.splat.dll.compressed
costura.splat.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
costura.system.buffers.dll
[Authenticode]_35d2433a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.diagnostics.diagnosticsource.dll
[Authenticode]_dfc1d433.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.DiagnosticSource.SR.resources
ILLink.Substitutions.xml
costura.system.diagnostics.eventlog.dll.compressed
costura.system.diagnostics.eventlog.dll
[Authenticode]_85f42e61.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.EventLog.SR.resources
ILLink.Substitutions.xml
costura.system.io.pipelines.dll.compressed
costura.system.io.pipelines.dll
[Authenticode]_7fb91b46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
costura.system.memory.dll
[Authenticode]_b502138b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
costura.system.numerics.vectors.dll
[Authenticode]_488676cc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.dll.compressed
costura.system.runtime.dll
[Authenticode]_d8e8a703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll
[Authenticode]_04ff5a5b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.accesscontrol.dll.compressed
costura.system.security.accesscontrol.dll
[Authenticode]_9a338e29.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.AccessControl.SR.resources
ILLink.Substitutions.xml
costura.system.security.cryptography.algorithms.dll.compressed
costura.system.security.cryptography.algorithms.dll
[Authenticode]_6dcbe3dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.encoding.dll.compressed
costura.system.security.cryptography.encoding.dll
[Authenticode]_640c135d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
costura.system.security.cryptography.primitives.dll
[Authenticode]_bb12d671.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
costura.system.security.cryptography.x509certificates.dll
[Authenticode]_bc99acc3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.X509Certificates.SR.resources
costura.system.security.principal.windows.dll.compressed
costura.system.security.principal.windows.dll
[Authenticode]_2846fe66.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Substitutions.xml
costura.system.serviceprocess.servicecontroller.dll.compressed
costura.system.serviceprocess.servicecontroller.dll
[Authenticode]_65eeb668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
costura.system.text.encodings.web.dll
[Authenticode]_3300621d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
costura.system.text.json.dll
[Authenticode]_f27e5967.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
costura.system.threading.tasks.extensions.dll
[Authenticode]_02d85556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_e10eb9d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.urlcombinelib.dll.compressed
costura.urlcombinelib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.websocket-sharp.dll.compressed
costura.websocket-sharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.repairtech.common.tools.dll.compressed
costura.repairtech.common.tools.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.contracts.dll.compressed
costura.syncro.contracts.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.exe.compressed
costura.syncro.service.exe
Malicious
[Authenticode]_f6d4f6e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Service.Resources.FilePusher.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
costura.costura.pdb.compressed
costura.costura.pdb
costura.system.runtime.interopservices.runtimeinformation.dll.compressed
costura.system.runtime.interopservices.runtimeinformation.dll
[Authenticode]_0b5039bc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.InteropServices.RuntimeInformation.SR.resources
costura.microsoft.win32.primitives.dll.compressed
costura.microsoft.win32.primitives.dll
[Authenticode]_0eace63a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.netstandard.dll.compressed
costura.netstandard.dll
[Authenticode]_0c342621.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.appcontext.dll.compressed
costura.system.appcontext.dll
[Authenticode]_a5aef8f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.concurrent.dll.compressed
costura.system.collections.concurrent.dll
[Authenticode]_5e25c536.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.dll.compressed
costura.system.collections.dll
[Authenticode]_9323bd82.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.nongeneric.dll.compressed
costura.system.collections.nongeneric.dll
[Authenticode]_eecaa1f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.specialized.dll.compressed
costura.system.collections.specialized.dll
[Authenticode]_642764aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.dll.compressed
costura.system.componentmodel.dll
[Authenticode]_c81486e4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.eventbasedasync.dll.compressed
costura.system.componentmodel.eventbasedasync.dll
[Authenticode]_080d1a4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.primitives.dll.compressed
costura.system.componentmodel.primitives.dll
[Authenticode]_ccf0afa1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.typeconverter.dll.compressed
costura.system.componentmodel.typeconverter.dll
[Authenticode]_068bfba6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.console.dll.compressed
costura.system.console.dll
[Authenticode]_2b78bb38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.data.common.dll.compressed
costura.system.data.common.dll
[Authenticode]_8aac7822.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Common.SR.resources
costura.system.diagnostics.contracts.dll.compressed
costura.system.diagnostics.contracts.dll
[Authenticode]_b51e7343.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.debug.dll.compressed
costura.system.diagnostics.debug.dll
[Authenticode]_c3857e3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.fileversioninfo.dll.compressed
costura.system.diagnostics.fileversioninfo.dll
[Authenticode]_d7308aba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.process.dll.compressed
costura.system.diagnostics.process.dll
[Authenticode]_03d7980b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.stacktrace.dll.compressed
costura.system.diagnostics.stacktrace.dll
[Authenticode]_222d4e88.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.textwritertracelistener.dll.compressed
costura.system.diagnostics.textwritertracelistener.dll
[Authenticode]_24a5851e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tools.dll.compressed
costura.system.diagnostics.tools.dll
[Authenticode]_ac4c7cab.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracesource.dll.compressed
costura.system.diagnostics.tracesource.dll
[Authenticode]_4b8f538c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracing.dll.compressed
costura.system.diagnostics.tracing.dll
[Authenticode]_aad65d3b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.drawing.primitives.dll.compressed
costura.system.drawing.primitives.dll
[Authenticode]_acc8a69c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.dynamic.runtime.dll.compressed
costura.system.dynamic.runtime.dll
[Authenticode]_0510daa9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.calendars.dll.compressed
costura.system.globalization.calendars.dll
[Authenticode]_be4c82a7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.dll.compressed
costura.system.globalization.dll
[Authenticode]_635c0d9d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.extensions.dll.compressed
costura.system.globalization.extensions.dll
[Authenticode]_1f7a856d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Globalization.Extensions.SR.resources
costura.system.io.compression.dll.compressed
costura.system.io.compression.dll
[Authenticode]_699f4db4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Compression.SR.resources
costura.system.io.compression.zipfile.dll.compressed
costura.system.io.compression.zipfile.dll
[Authenticode]_54d9b491.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.dll.compressed
costura.system.io.dll
[Authenticode]_530654e8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.dll.compressed
costura.system.io.filesystem.dll
[Authenticode]_58c1e0d1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.driveinfo.dll.compressed
costura.system.io.filesystem.driveinfo.dll
[Authenticode]_21751744.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.primitives.dll.compressed
costura.system.io.filesystem.primitives.dll
[Authenticode]_4219af30.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.watcher.dll.compressed
costura.system.io.filesystem.watcher.dll
[Authenticode]_c52f1d42.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.isolatedstorage.dll.compressed
costura.system.io.isolatedstorage.dll
[Authenticode]_6269a131.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.memorymappedfiles.dll.compressed
costura.system.io.memorymappedfiles.dll
[Authenticode]_6651444e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipes.dll.compressed
costura.system.io.pipes.dll
[Authenticode]_eb2dc0b4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.unmanagedmemorystream.dll.compressed
costura.system.io.unmanagedmemorystream.dll
[Authenticode]_0d00f6b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.dll.compressed
costura.system.linq.dll
[Authenticode]_63eab726.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.expressions.dll.compressed
costura.system.linq.expressions.dll
[Authenticode]_5aaeae34.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.parallel.dll.compressed
costura.system.linq.parallel.dll
[Authenticode]_127235ca.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.queryable.dll.compressed
costura.system.linq.queryable.dll
[Authenticode]_1ec34698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.http.dll.compressed
costura.system.net.http.dll
[Authenticode]_0d652b08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Net.Http.SR.resources
costura.system.net.nameresolution.dll.compressed
costura.system.net.nameresolution.dll
[Authenticode]_a2bda845.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.networkinformation.dll.compressed
costura.system.net.networkinformation.dll
[Authenticode]_fd5380c5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ping.dll.compressed
costura.system.net.ping.dll
[Authenticode]_2b3c76e6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.primitives.dll.compressed
costura.system.net.primitives.dll
[Authenticode]_f0102ad0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.requests.dll.compressed
costura.system.net.requests.dll
[Authenticode]_33f96ed7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.security.dll.compressed
costura.system.net.security.dll
[Authenticode]_2b71b5f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.sockets.dll.compressed
costura.system.net.sockets.dll
[Authenticode]_c249877a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.webheadercollection.dll.compressed
costura.system.net.webheadercollection.dll
[Authenticode]_fad07e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.client.dll.compressed
costura.system.net.websockets.client.dll
[Authenticode]_9bb58c63.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.dll.compressed
costura.system.net.websockets.dll
[Authenticode]_2732510c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.objectmodel.dll.compressed
costura.system.objectmodel.dll
[Authenticode]_8fe20591.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.dll.compressed
costura.system.reflection.dll
[Authenticode]_670bc0af.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.extensions.dll.compressed
costura.system.reflection.extensions.dll
[Authenticode]_81abba16.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.primitives.dll.compressed
costura.system.reflection.primitives.dll
[Authenticode]_188738dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.reader.dll.compressed
costura.system.resources.reader.dll
[Authenticode]_a0e0aace.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.resourcemanager.dll.compressed
costura.system.resources.resourcemanager.dll
[Authenticode]_6e5731cb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.writer.dll.compressed
costura.system.resources.writer.dll
[Authenticode]_119ea529.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.visualc.dll.compressed
costura.system.runtime.compilerservices.visualc.dll
[Authenticode]_6e32766f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.dll.compressed
costura.system.runtime.dll
[Authenticode]_e520829d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.extensions.dll.compressed
costura.system.runtime.extensions.dll
[Authenticode]_99a87f52.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.handles.dll.compressed
costura.system.runtime.handles.dll
[Authenticode]_ad62d44f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.interopservices.dll.compressed
costura.system.runtime.interopservices.dll
[Authenticode]_c2ad3a24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.numerics.dll.compressed
costura.system.runtime.numerics.dll
[Authenticode]_73283d38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.formatters.dll.compressed
costura.system.runtime.serialization.formatters.dll
[Authenticode]_ae937b14.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.json.dll.compressed
costura.system.runtime.serialization.json.dll
[Authenticode]_9c48f595.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.primitives.dll.compressed
costura.system.runtime.serialization.primitives.dll
[Authenticode]_f4a4d29e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.Serialization.Primitives.SR.resources
System.Runtime.Serialization.Primitives.Resources.System.Runtime.Serialization.Primitives.rd.xml
costura.system.runtime.serialization.xml.dll.compressed
costura.system.runtime.serialization.xml.dll
[Authenticode]_9769b5c2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.claims.dll.compressed
costura.system.security.claims.dll
[Authenticode]_3cd511d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.algorithms.dll.compressed
costura.system.security.cryptography.algorithms.dll
[Authenticode]_10a18c39.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.csp.dll.compressed
costura.system.security.cryptography.csp.dll
[Authenticode]_bf30f82d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.encoding.dll.compressed
costura.system.security.cryptography.encoding.dll
[Authenticode]_3080adeb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
costura.system.security.cryptography.primitives.dll
[Authenticode]_24bf2532.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
costura.system.security.cryptography.x509certificates.dll
[Authenticode]_bf8940c8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.principal.dll.compressed
costura.system.security.principal.dll
[Authenticode]_dd9ccd84.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.securestring.dll.compressed
costura.system.security.securestring.dll
[Authenticode]_ad433084.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.dll.compressed
costura.system.text.encoding.dll
[Authenticode]_d0773109.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.extensions.dll.compressed
costura.system.text.encoding.extensions.dll
[Authenticode]_ce6d8642.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.regularexpressions.dll.compressed
costura.system.text.regularexpressions.dll
[Authenticode]_85efe86b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.dll.compressed
costura.system.threading.dll
[Authenticode]_ae7221ce.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.overlapped.dll.compressed
costura.system.threading.overlapped.dll
[Authenticode]_afabacc9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Threading.Overlapped.SR.resources
costura.system.threading.tasks.dll.compressed
costura.system.threading.tasks.dll
[Authenticode]_0587f69f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.tasks.parallel.dll.compressed
costura.system.threading.tasks.parallel.dll
[Authenticode]_f2e6a8e3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.thread.dll.compressed
costura.system.threading.thread.dll
[Authenticode]_0cd7adcf.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.threadpool.dll.compressed
costura.system.threading.threadpool.dll
[Authenticode]_4cd1bac9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.timer.dll.compressed
costura.system.threading.timer.dll
[Authenticode]_4169e48c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_a5fa7839.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.readerwriter.dll.compressed
costura.system.xml.readerwriter.dll
[Authenticode]_ff80124f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xdocument.dll.compressed
costura.system.xml.xdocument.dll
[Authenticode]_4fe05443.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmldocument.dll.compressed
costura.system.xml.xmldocument.dll
[Authenticode]_67e85641.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmlserializer.dll.compressed
costura.system.xml.xmlserializer.dll
[Authenticode]_20f5d261.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.dll.compressed
costura.system.xml.xpath.dll
[Authenticode]_c5c34065.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.xdocument.dll.compressed
costura.system.xml.xpath.xdocument.dll
[Authenticode]_13755e7c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Kabuto.Service.Resources.Module.psm1
Malicious
[PowerShell Command]
Malicious
costura.syncro.service.models.dll.compressed
costura.syncro.service.models.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.services.dll.compressed
costura.syncro.service.services.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.tools.dll.compressed
costura.syncro.tools.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.resources
costura.syncro.uninstaller.exe.compressed
costura.syncro.uninstaller.exe
[Authenticode]_75921e10.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Kabuto.Uninstaller.logos.syncro-logo.png
Kabuto.Uninstaller.logos.syncro-logo.png-preview.png
costura.syncro.service.configuration.dll.compressed
costura.syncro.service.configuration.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.interfaces.dll.compressed
costura.syncro.service.interfaces.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.squirrel.dll.compressed
costura.squirrel.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.nuget.squirrel.dll.compressed
costura.nuget.squirrel.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
costura.phoenix.dll.compressed
costura.phoenix.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.win32.taskscheduler.dll.compressed
costura.microsoft.win32.taskscheduler.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Win32.TaskScheduler.Properties.Resources.resources
Microsoft.Win32.TaskScheduler.V1.TaskSchedulerV1Schema.xsd
Microsoft.Win32.TaskScheduler.TaskService.bmp
costura.interop.wuapilib.dll.compressed
costura.interop.wuapilib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.netfwtypelib.dll.compressed
costura.interop.netfwtypelib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.iwshruntimelibrary.dll.compressed
costura.interop.iwshruntimelibrary.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.deltacompressiondotnet.dll.compressed
costura.deltacompressiondotnet.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.mono.cecil.dll.compressed
costura.mono.cecil.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.web.xmltransform.dll.compressed
costura.microsoft.web.xmltransform.dll
[Authenticode]_c5462488.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Web.XmlTransform.SR.resources
costura.en.syncro.uninstaller.resources.dll.compressed
costura.en.syncro.uninstaller.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.en.resources
costura.ar-sa.syncro.tools.resources.dll.compressed
costura.ar-sa.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ar-SA.resources
costura.cs-cz.syncro.tools.resources.dll.compressed
costura.cs-cz.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.cs-CZ.resources
costura.da-dk.syncro.tools.resources.dll.compressed
costura.da-dk.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.da-DK.resources
costura.de-de.syncro.tools.resources.dll.compressed
costura.de-de.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.de-DE.resources
costura.el-gr.syncro.tools.resources.dll.compressed
costura.el-gr.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.el-GR.resources
costura.en.syncro.tools.resources.dll.compressed
costura.en.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.en.resources
costura.es-es.syncro.tools.resources.dll.compressed
costura.es-es.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.es-ES.resources
costura.fi-fi.syncro.tools.resources.dll.compressed
costura.fi-fi.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fi-FI.resources
costura.fr-fr.syncro.tools.resources.dll.compressed
costura.fr-fr.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fr-FR.resources
costura.it-it.syncro.tools.resources.dll.compressed
costura.it-it.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.it-IT.resources
costura.ja-jp.syncro.tools.resources.dll.compressed
costura.ja-jp.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ja-JP.resources
costura.nl-nl.syncro.tools.resources.dll.compressed
costura.nl-nl.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.nl-NL.resources
costura.pt-br.syncro.tools.resources.dll.compressed
costura.pt-br.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.pt-BR.resources
costura.ru-ru.syncro.tools.resources.dll.compressed
costura.ru-ru.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ru-RU.resources
costura.sl-si.syncro.tools.resources.dll.compressed
costura.sl-si.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.sl-SI.resources
costura.zh-chs.syncro.tools.resources.dll.compressed
costura.zh-chs.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.zh-CHS.resources
costura.metadata
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0x593720 size 12040 bytes
Info 
PDB Path: C:\GitLab-Runner\builds\MvqzSHEmm\0\syncromsp\team-rmm-agent\kabuto-app\Installer\obj\Release\Installer.pdb
Module Name
Installer.exe
Full Name
Installer.exe
EntryPoint
System.Int32 Installer.Program::Main(System.String[])
Scope Name
Installer.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Installer
Assembly Version
1.0.191.18060
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
166
Main Method
System.Int32 Installer.Program::Main(System.String[])
Main IL Instruction Count
416
Main IL 
call System.Void Installer.Program::DebugHook()
ldarg.0 <null>
ldloca.s V_0
ldflda Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
ldloca.s V_0
ldflda System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
call System.Void Installer.Program::ParseArgs(System.String[],Installer.InstallerOptions&,System.Collections.Generic.List`1<System.String>&)
call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly()
stloc.1 <null>
ldloc.1 <null>
callvirt System.Reflection.AssemblyName System.Reflection.Assembly::GetName()
stloc.2 <null>
ldloca.s V_0
ldloc.1 <null>
callvirt System.String System.Reflection.Assembly::get_Location()
stfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation
ldstr Syncro
ldloca.s V_3
call System.Threading.Mutex RepairTech.Common.Tools.InstallerMutex::GetInstallMutex(System.String,System.Boolean&)
stloc.s V_4
ldloca.s V_5
ldstr Syncro
call System.String Installer.Program::MakeLogFilePath(System.String)
newobj System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::.ctor(System.String)
stfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
brfalse.s IL_008B: ldloc.3
call System.Boolean Installer.ConsoleUtils::EnableConsole()
brtrue.s IL_008B: ldloc.3
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Failed to initialize console, error: {0}
call System.Int32 System.Runtime.InteropServices.Marshal::GetLastWin32Error()
box System.Int32
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Error(System.String)
ldloc.3 <null>
brtrue.s IL_00A5: call System.String System.Environment::get_CommandLine()
ldstr Error starting the installer because another instance is running at the moment. Please try again later or contact support for assistance
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.s -2
stloc.s V_9
leave IL_05B8: ldloc.s V_9
call System.String System.Environment::get_CommandLine()
call System.String Kabuto.Installer.CommandLine::Mask(System.String)
stloc.s V_6
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Starting {0} {1}, version {2}
ldstr Syncro
ldloc.2 <null>
callvirt System.String System.Reflection.AssemblyName::get_Name()
dup <null>
brtrue.s IL_00D1: ldloc.2
pop <null>
ldstr ?
ldloc.2 <null>
callvirt System.Version System.Reflection.AssemblyName::get_Version()
call System.String System.String::Format(System.String,System.Object,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Product: 'Syncro'
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     ImageName: '
ldloc.0 <null>
ldfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation
ldstr '
call System.String System.String::Concat(System.String,System.String,System.String)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Arguments: '
ldloc.s V_6
ldstr '
call System.String System.String::Concat(System.String,System.String,System.String)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     OS Version: '{0}'
call System.OperatingSystem System.Environment::get_OSVersion()
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     OS Is64Bit: '{0}' / '{1}'
call System.Boolean System.Environment::get_Is64BitOperatingSystem()
box System.Boolean
call System.Boolean System.Environment::get_Is64BitProcess()
box System.Boolean
call System.String System.String::Format(System.String,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Interactive: '{0}'
call System.Boolean System.Environment::get_UserInteractive()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     ConsoleMode: '{0}'
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     AllowForceReboot: '{0}'
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__AssignDefaultArguments|3_2(Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
call System.Boolean System.StringHelper::IsNoe(System.String)
brfalse.s IL_020E: ldloc.0
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
call System.Boolean System.StringHelper::IsNoe(System.String)
brtrue.s IL_0220: ldstr "There was an error locating the configuration data. Please check your account and try again."
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ConfigJson()
call System.Boolean System.StringHelper::IsNoe(System.String)
brfalse.s IL_0236: ldloc.s V_5
ldstr There was an error locating the configuration data. Please check your account and try again.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Auth payload v0: {0} {1} {2}
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_CustomerId()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_PolicyId()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
call System.String System.String::Format(System.String,System.Object,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Auth payload v1: {0}
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
ldstr --key
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_PolicyId()
ldstr --policyid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_FolderId()
ldstr --folderid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_CustomerId()
ldstr --customerid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
ldstr --jwt-payload
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ConfigJson()
ldstr --config-json
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
call System.Boolean Kabuto.FrameworkInstaller::IsFramework462Installed()
brfalse.s IL_0369: ldloc.s V_5
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr .NET Framework 4.6.2 is already installed, proceeding...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
br IL_04AF: ldstr "Syncro.Installer.exe"
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr .NET Framework 4.6.2 is not installed, trying to install it...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot()
call System.Boolean Installer.Program::AllowForceReboot(System.Boolean,System.Boolean)
brtrue.s IL_03B0: nop
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr User disallowed force reboot, exiting...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
nop <null>
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
newobj System.Void Kabuto.FrameworkInstaller::.ctor(RepairTech.Common.Tools.Logging.ICustomLogger)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
ldc.i4.0 <null>
ceq <null>
callvirt Kabuto.NETFrameworkInstallerReturnCode Kabuto.FrameworkInstaller::Install(System.Boolean)
stloc.s V_10
ldloc.s V_10
ldc.i4 1603
bgt.s IL_03F6: ldloc.s V_10
ldloc.s V_10
brfalse IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 1602
beq.s IL_043F: ldstr ".NET Framework setup has been cancelled, the installation cannot continue."
ldloc.s V_10
ldc.i4 1603
beq.s IL_0428: ldstr ".NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains"
br.s IL_0456: ldstr "Unknown return code: {0}"
ldloc.s V_10
ldc.i4 1641
beq.s IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 3010
beq.s IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 5100
bne.un.s IL_0456: ldstr "Unknown return code: {0}"
ldstr .NET Framework installer has reported that your computer doesn't meet system requirements. This can be due to missing updates or there's not enough space left on disk. At least 2 GB is required. Please check free disk space, Windows Update and try again
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr .NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr .NET Framework setup has been cancelled, the installation cannot continue.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr Unknown return code: {0}
ldloc.s V_10
box Kabuto.NETFrameworkInstallerReturnCode
call System.String System.String::Format(System.String,System.Object)
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
leave.s IL_049F: ldloc.0
pop <null>
ldstr .NET Framework setup has been cancelled, the installation cannot continue.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
callvirt System.String System.Exception::get_Message()
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.m1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldloc.0 <null>
ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
ldstr --net462
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
ldstr Syncro.Installer.exe
stloc.s V_7
call System.String System.IO.Path::GetTempPath()
ldloc.s V_7
call System.String System.IO.Path::Combine(System.String,System.String)
stloc.s V_8
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldc.i4.5 <null>
newarr System.String
dup <null>
ldc.i4.0 <null>
ldstr Next stage installer: `
stelem.ref <null>
dup <null>
ldc.i4.1 <null>
ldloc.s V_7
stelem.ref <null>
dup <null>
ldc.i4.2 <null>
ldstr `, '
stelem.ref <null>
dup <null>
ldc.i4.3 <null>
ldloc.s V_8
stelem.ref <null>
dup <null>
ldc.i4.4 <null>
ldstr '
stelem.ref <null>
call System.String System.String::Concat(System.String[])
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_8
call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String)
ldstr Installer.
ldloc.s V_7
call System.String System.String::Concat(System.String,System.String)
ldloc.s V_8
call System.Void Kabuto.ResourceManager::ExtractToFile(System.String,System.String)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
dup <null>
ldloc.s V_8
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
dup <null>
ldstr  
ldloc.0 <null>
ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>)
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
dup <null>
call System.String System.IO.Path::GetTempPath()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Next stage installer is starting.
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
stloc.s V_11
ldloc.s V_11
callvirt System.Void System.Diagnostics.Process::WaitForExit()
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Next stage installer returned with code {0}
ldloc.s V_11
callvirt System.Int32 System.Diagnostics.Process::get_ExitCode()
box System.Int32
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_11
callvirt System.Int32 System.Diagnostics.Process::get_ExitCode()
stloc.s V_9
leave.s IL_05B8: ldloc.s V_9
ldloc.s V_8
call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String)
endfinally <null>
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
brfalse.s IL_05AB: endfinally
call System.Void Installer.ConsoleUtils::Exit()
endfinally <null>
ldloc.s V_4
brfalse.s IL_05B7: endfinally
ldloc.s V_4
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
ldloc.s V_9
ret <null>
Module Name
Installer.exe
Full Name
Installer.exe
EntryPoint
System.Int32 Installer.Program::Main(System.String[])
Scope Name
Installer.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Installer
Assembly Version
1.0.191.18060
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
166
Main Method
System.Int32 Installer.Program::Main(System.String[])
Main IL Instruction Count
416
Main IL 
call System.Void Installer.Program::DebugHook()
ldarg.0 <null>
ldloca.s V_0
ldflda Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
ldloca.s V_0
ldflda System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
call System.Void Installer.Program::ParseArgs(System.String[],Installer.InstallerOptions&,System.Collections.Generic.List`1<System.String>&)
call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly()
stloc.1 <null>
ldloc.1 <null>
callvirt System.Reflection.AssemblyName System.Reflection.Assembly::GetName()
stloc.2 <null>
ldloca.s V_0
ldloc.1 <null>
callvirt System.String System.Reflection.Assembly::get_Location()
stfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation
ldstr Syncro
ldloca.s V_3
call System.Threading.Mutex RepairTech.Common.Tools.InstallerMutex::GetInstallMutex(System.String,System.Boolean&)
stloc.s V_4
ldloca.s V_5
ldstr Syncro
call System.String Installer.Program::MakeLogFilePath(System.String)
newobj System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::.ctor(System.String)
stfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
brfalse.s IL_008B: ldloc.3
call System.Boolean Installer.ConsoleUtils::EnableConsole()
brtrue.s IL_008B: ldloc.3
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Failed to initialize console, error: {0}
call System.Int32 System.Runtime.InteropServices.Marshal::GetLastWin32Error()
box System.Int32
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Error(System.String)
ldloc.3 <null>
brtrue.s IL_00A5: call System.String System.Environment::get_CommandLine()
ldstr Error starting the installer because another instance is running at the moment. Please try again later or contact support for assistance
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.s -2
stloc.s V_9
leave IL_05B8: ldloc.s V_9
call System.String System.Environment::get_CommandLine()
call System.String Kabuto.Installer.CommandLine::Mask(System.String)
stloc.s V_6
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Starting {0} {1}, version {2}
ldstr Syncro
ldloc.2 <null>
callvirt System.String System.Reflection.AssemblyName::get_Name()
dup <null>
brtrue.s IL_00D1: ldloc.2
pop <null>
ldstr ?
ldloc.2 <null>
callvirt System.Version System.Reflection.AssemblyName::get_Version()
call System.String System.String::Format(System.String,System.Object,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Product: 'Syncro'
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     ImageName: '
ldloc.0 <null>
ldfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation
ldstr '
call System.String System.String::Concat(System.String,System.String,System.String)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Arguments: '
ldloc.s V_6
ldstr '
call System.String System.String::Concat(System.String,System.String,System.String)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     OS Version: '{0}'
call System.OperatingSystem System.Environment::get_OSVersion()
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     OS Is64Bit: '{0}' / '{1}'
call System.Boolean System.Environment::get_Is64BitOperatingSystem()
box System.Boolean
call System.Boolean System.Environment::get_Is64BitProcess()
box System.Boolean
call System.String System.String::Format(System.String,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Interactive: '{0}'
call System.Boolean System.Environment::get_UserInteractive()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     ConsoleMode: '{0}'
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     AllowForceReboot: '{0}'
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot()
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__AssignDefaultArguments|3_2(Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
call System.Boolean System.StringHelper::IsNoe(System.String)
brfalse.s IL_020E: ldloc.0
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
call System.Boolean System.StringHelper::IsNoe(System.String)
brtrue.s IL_0220: ldstr "There was an error locating the configuration data. Please check your account and try again."
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ConfigJson()
call System.Boolean System.StringHelper::IsNoe(System.String)
brfalse.s IL_0236: ldloc.s V_5
ldstr There was an error locating the configuration data. Please check your account and try again.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Auth payload v0: {0} {1} {2}
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_CustomerId()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_PolicyId()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
call System.String System.String::Format(System.String,System.Object,System.Object,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr     Auth payload v1: {0}
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
call System.Boolean System.StringHelper::IsNoe(System.String)
ldc.i4.0 <null>
ceq <null>
box System.Boolean
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ApiKey()
ldstr --key
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_PolicyId()
ldstr --policyid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_FolderId()
ldstr --folderid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_CustomerId()
ldstr --customerid
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_JwtPayload()
ldstr --jwt-payload
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.String Installer.InstallerOptions::get_ConfigJson()
ldstr --config-json
ldloca.s V_0
call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&)
call System.Boolean Kabuto.FrameworkInstaller::IsFramework462Installed()
brfalse.s IL_0369: ldloc.s V_5
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr .NET Framework 4.6.2 is already installed, proceeding...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
br IL_04AF: ldstr "Syncro.Installer.exe"
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr .NET Framework 4.6.2 is not installed, trying to install it...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot()
call System.Boolean Installer.Program::AllowForceReboot(System.Boolean,System.Boolean)
brtrue.s IL_03B0: nop
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr User disallowed force reboot, exiting...
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
nop <null>
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
newobj System.Void Kabuto.FrameworkInstaller::.ctor(RepairTech.Common.Tools.Logging.ICustomLogger)
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
ldc.i4.0 <null>
ceq <null>
callvirt Kabuto.NETFrameworkInstallerReturnCode Kabuto.FrameworkInstaller::Install(System.Boolean)
stloc.s V_10
ldloc.s V_10
ldc.i4 1603
bgt.s IL_03F6: ldloc.s V_10
ldloc.s V_10
brfalse IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 1602
beq.s IL_043F: ldstr ".NET Framework setup has been cancelled, the installation cannot continue."
ldloc.s V_10
ldc.i4 1603
beq.s IL_0428: ldstr ".NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains"
br.s IL_0456: ldstr "Unknown return code: {0}"
ldloc.s V_10
ldc.i4 1641
beq.s IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 3010
beq.s IL_0470: leave.s IL_049F
ldloc.s V_10
ldc.i4 5100
bne.un.s IL_0456: ldstr "Unknown return code: {0}"
ldstr .NET Framework installer has reported that your computer doesn't meet system requirements. This can be due to missing updates or there's not enough space left on disk. At least 2 GB is required. Please check free disk space, Windows Update and try again
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr .NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr .NET Framework setup has been cancelled, the installation cannot continue.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldloc.s V_10
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldstr Unknown return code: {0}
ldloc.s V_10
box Kabuto.NETFrameworkInstallerReturnCode
call System.String System.String::Format(System.String,System.Object)
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
leave.s IL_049F: ldloc.0
pop <null>
ldstr .NET Framework setup has been cancelled, the installation cannot continue.
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
callvirt System.String System.Exception::get_Message()
ldloca.s V_0
ldloca.s V_5
call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&)
ldc.i4.m1 <null>
stloc.s V_9
leave IL_05B8: ldloc.s V_9
ldloc.0 <null>
ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
ldstr --net462
callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String)
ldstr Syncro.Installer.exe
stloc.s V_7
call System.String System.IO.Path::GetTempPath()
ldloc.s V_7
call System.String System.IO.Path::Combine(System.String,System.String)
stloc.s V_8
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldc.i4.5 <null>
newarr System.String
dup <null>
ldc.i4.0 <null>
ldstr Next stage installer: `
stelem.ref <null>
dup <null>
ldc.i4.1 <null>
ldloc.s V_7
stelem.ref <null>
dup <null>
ldc.i4.2 <null>
ldstr `, '
stelem.ref <null>
dup <null>
ldc.i4.3 <null>
ldloc.s V_8
stelem.ref <null>
dup <null>
ldc.i4.4 <null>
ldstr '
stelem.ref <null>
call System.String System.String::Concat(System.String[])
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_8
call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String)
ldstr Installer.
ldloc.s V_7
call System.String System.String::Concat(System.String,System.String)
ldloc.s V_8
call System.Void Kabuto.ResourceManager::ExtractToFile(System.String,System.String)
newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor()
dup <null>
ldloc.s V_8
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String)
dup <null>
ldstr  
ldloc.0 <null>
ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments
call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>)
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String)
dup <null>
call System.String System.IO.Path::GetTempPath()
callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String)
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Next stage installer is starting.
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo)
stloc.s V_11
ldloc.s V_11
callvirt System.Void System.Diagnostics.Process::WaitForExit()
ldloc.s V_5
ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger
ldstr Next stage installer returned with code {0}
ldloc.s V_11
callvirt System.Int32 System.Diagnostics.Process::get_ExitCode()
box System.Int32
call System.String System.String::Format(System.String,System.Object)
callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String)
ldloc.s V_11
callvirt System.Int32 System.Diagnostics.Process::get_ExitCode()
stloc.s V_9
leave.s IL_05B8: ldloc.s V_9
ldloc.s V_8
call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String)
endfinally <null>
ldloc.0 <null>
ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions
callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode()
brfalse.s IL_05AB: endfinally
call System.Void Installer.ConsoleUtils::Exit()
endfinally <null>
ldloc.s V_4
brfalse.s IL_05B7: endfinally
ldloc.s V_4
callvirt System.Void System.IDisposable::Dispose()
endfinally <null>
ldloc.s V_9
ret <null>
60ce27c7ee2004f99611ecfb4e36347a
Malicious
[Authenticode]_b95a991b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Installer.NETProgressView.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Installer.Properties.Resources.resources
Installer.Syncro.Installer.exe
Malicious
[Authenticode]_2e255469.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Installer.FrmProgress.resources
$this.Icon
[NBF]root.IconData
Kabuto.Installer.Resources.ISRG_Root_x1.cer
Kabuto.Installer.Resources.syncro-logo.ico
Kabuto.Installer.Resources.Syncro.App.Runner.exe
[Authenticode]_29deed15.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.Syncro.Service.Runner.exe
[Authenticode]_929ebf03.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.install.bat
costura.autofac.dll.compressed
costura.autofac.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Autofac.Builder.BuildCallbackServiceResources.resources
Autofac.Builder.RegistrationBuilderResources.resources
Autofac.ContainerBuilderResources.resources
Autofac.Core.Activators.Delegate.DelegateActivatorResources.resources
Autofac.Core.Activators.InstanceActivatorResources.resources
Autofac.Core.Activators.ProvidedInstance.ProvidedInstanceActivatorResources.resources
Autofac.Core.Activators.Reflection.ConstructorParameterBindingResources.resources
Autofac.Core.Activators.Reflection.MatchingSignatureConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.MostParametersConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.NoConstructorsFoundExceptionResources.resources
Autofac.Core.Activators.Reflection.ReflectionActivatorResources.resources
Autofac.Core.ContainerResources.resources
Autofac.Core.DisposerResources.resources
Autofac.Core.Lifetime.LifetimeScopeResources.resources
Autofac.Core.Lifetime.MatchingScopeLifetimeResources.resources
Autofac.Core.Registration.ComponentNotRegisteredExceptionResources.resources
Autofac.Core.Registration.ComponentRegistrationResources.resources
Autofac.Core.Registration.ServiceRegistrationInfoResources.resources
Autofac.Core.Resolving.CircularDependencyDetectorResources.resources
Autofac.Core.Resolving.ComponentActivationResources.resources
Autofac.Core.Resolving.ResolveOperationResources.resources
Autofac.Core.ServiceResources.resources
Autofac.Features.Collections.CollectionRegistrationSourceResources.resources
Autofac.Features.GeneratedFactories.GeneratedFactoryRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyWithMetadataRegistrationSourceResources.resources
Autofac.Features.LightweightAdapters.LightweightAdapterRegistrationSourceResources.resources
Autofac.Features.Metadata.MetadataViewProviderResources.resources
Autofac.Features.Metadata.MetaRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorActivatorDataResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationExtensionsResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericServiceBinderResources.resources
Autofac.Features.OwnedInstances.OwnedInstanceRegistrationSourceResources.resources
Autofac.Features.ResolveAnything.AnyConcreteTypeNotAlreadyRegisteredSourceResources.resources
Autofac.ModuleResources.resources
Autofac.RegistrationExtensionsResources.resources
Autofac.TypeExtensionsResources.resources
Autofac.Util.EnforceResources.resources
Autofac.Util.FallbackDictionaryResources.resources
Autofac.Util.ReflectionExtensionsResources.resources
costura.costura.dll.compressed
costura.costura.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.csharpfunctionalextensions.dll.compressed
costura.csharpfunctionalextensions.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.destructurama.attributed.dll.compressed
costura.destructurama.attributed.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.fluentcommandlineparser.dll.compressed
costura.fluentcommandlineparser.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.dll.compressed
costura.flurl.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.http.dll.compressed
costura.flurl.http.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ipnetwork.dll.compressed
costura.system.net.ipnetwork.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.jetbrains.annotations.dll.compressed
costura.jetbrains.annotations.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
JetBrains.Annotations.Source.cs
costura.sharpsnmplib.dll.compressed
costura.sharpsnmplib.dll
[Authenticode]_d7423556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.design.dll.compressed
costura.metroframework.design.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.fonts.dll.compressed
costura.metroframework.fonts.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Fonts.Resources.Open_Sans_Bold.ttf
MetroFramework.Fonts.Resources.Open_Sans_Light.ttf
MetroFramework.Fonts.Resources.Open_Sans.ttf
costura.metroframework.dll.compressed
costura.metroframework.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Controls.MetroGrid.resources
MetroFramework.Controls.MetroTextBox.resources
lnkClear.Image
[NBF]root.Data
[NBF]root.Data-preview.png
lnkClear.NoFocusImage
[NBF]root.Data
[NBF]root.Data-preview.png
MetroFramework.Localization.de.MetroToggle.xml
MetroFramework.Localization.en.MetroToggle.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
costura.microsoft.bcl.asyncinterfaces.dll
[Authenticode]_7bbedf97.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.abstractions.dll.compressed
costura.microsoft.extensions.caching.abstractions.dll
[Authenticode]_98b08d7f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.memory.dll.compressed
costura.microsoft.extensions.caching.memory.dll
[Authenticode]_f456ed73.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Caching.Memory.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.dependencyinjection.abstractions.dll.compressed
costura.microsoft.extensions.dependencyinjection.abstractions.dll
[Authenticode]_6f772489.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.DependencyInjection.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.logging.abstractions.dll.compressed
costura.microsoft.extensions.logging.abstractions.dll
[Authenticode]_07094d6f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Logging.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.options.dll.compressed
costura.microsoft.extensions.options.dll
[Authenticode]_20703a50.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Options.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.primitives.dll.compressed
costura.microsoft.extensions.primitives.dll
[Authenticode]_f99fc7eb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Primitives.SR.resources
ILLink.Substitutions.xml
costura.microsoft.win32.registry.dll.compressed
costura.microsoft.win32.registry.dll
[Authenticode]_4a73ed43.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.Registry.SR.resources
ILLink.Substitutions.xml
costura.newtonsoft.json.dll.compressed
costura.newtonsoft.json.dll
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.rollbarsharp.dll.compressed
costura.rollbarsharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.dll.compressed
costura.serilog.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.formatting.compact.dll.compressed
costura.serilog.formatting.compact.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.console.dll.compressed
costura.serilog.sinks.console.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.file.dll.compressed
costura.serilog.sinks.file.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.sevenzipsharp.dll.compressed
costura.sevenzipsharp.dll
7z-stream @ 0x00023560.7z
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
SevenZip.sfx.Configs.xml
SevenZip.sfx.Configs.xsd
SevenZip.arch.Test.bzip2.7z
SevenZip.arch.Test.lzma.7z
SevenZip.arch.Test.lzma2.7z
SevenZip.arch.Test.ppmd.7z
SevenZip.arch.Test.rar
SevenZip.arch.Test.tar
SevenZip.arch.Test.txt.bz2
SevenZip.arch.Test.txt.gz
SevenZip.arch.Test.txt.xz
SevenZip.arch.Test.zip
Test.txt
costura.icsharpcode.sharpziplib.dll.compressed
costura.icsharpcode.sharpziplib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.splat.dll.compressed
costura.splat.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
costura.system.buffers.dll
[Authenticode]_35d2433a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.diagnostics.diagnosticsource.dll.compressed
costura.system.diagnostics.diagnosticsource.dll
[Authenticode]_dfc1d433.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.DiagnosticSource.SR.resources
ILLink.Substitutions.xml
costura.system.diagnostics.eventlog.dll.compressed
costura.system.diagnostics.eventlog.dll
[Authenticode]_85f42e61.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.EventLog.SR.resources
ILLink.Substitutions.xml
costura.system.io.pipelines.dll.compressed
costura.system.io.pipelines.dll
[Authenticode]_7fb91b46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
costura.system.memory.dll
[Authenticode]_b502138b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
costura.system.numerics.vectors.dll
[Authenticode]_488676cc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.dll.compressed
costura.system.runtime.dll
[Authenticode]_d8e8a703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.unsafe.dll.compressed
costura.system.runtime.compilerservices.unsafe.dll
[Authenticode]_04ff5a5b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.accesscontrol.dll.compressed
costura.system.security.accesscontrol.dll
[Authenticode]_9a338e29.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.AccessControl.SR.resources
ILLink.Substitutions.xml
costura.system.security.cryptography.algorithms.dll.compressed
costura.system.security.cryptography.algorithms.dll
[Authenticode]_6dcbe3dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.encoding.dll.compressed
costura.system.security.cryptography.encoding.dll
[Authenticode]_640c135d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
costura.system.security.cryptography.primitives.dll
[Authenticode]_bb12d671.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
costura.system.security.cryptography.x509certificates.dll
[Authenticode]_bc99acc3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.X509Certificates.SR.resources
costura.system.security.principal.windows.dll.compressed
costura.system.security.principal.windows.dll
[Authenticode]_2846fe66.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Substitutions.xml
costura.system.serviceprocess.servicecontroller.dll.compressed
costura.system.serviceprocess.servicecontroller.dll
[Authenticode]_65eeb668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
costura.system.text.encodings.web.dll
[Authenticode]_3300621d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
costura.system.text.json.dll
[Authenticode]_f27e5967.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
costura.system.threading.tasks.extensions.dll
[Authenticode]_02d85556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_e10eb9d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.urlcombinelib.dll.compressed
costura.urlcombinelib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.websocket-sharp.dll.compressed
costura.websocket-sharp.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.repairtech.common.tools.dll.compressed
costura.repairtech.common.tools.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.contracts.dll.compressed
costura.syncro.contracts.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.exe.compressed
costura.syncro.service.exe
Malicious
[Authenticode]_f6d4f6e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Service.Resources.FilePusher.exe
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
costura.costura.pdb.compressed
costura.costura.pdb
costura.system.runtime.interopservices.runtimeinformation.dll.compressed
costura.system.runtime.interopservices.runtimeinformation.dll
[Authenticode]_0b5039bc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.InteropServices.RuntimeInformation.SR.resources
costura.microsoft.win32.primitives.dll.compressed
costura.microsoft.win32.primitives.dll
[Authenticode]_0eace63a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.netstandard.dll.compressed
costura.netstandard.dll
[Authenticode]_0c342621.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.appcontext.dll.compressed
costura.system.appcontext.dll
[Authenticode]_a5aef8f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.concurrent.dll.compressed
costura.system.collections.concurrent.dll
[Authenticode]_5e25c536.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.dll.compressed
costura.system.collections.dll
[Authenticode]_9323bd82.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.nongeneric.dll.compressed
costura.system.collections.nongeneric.dll
[Authenticode]_eecaa1f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.specialized.dll.compressed
costura.system.collections.specialized.dll
[Authenticode]_642764aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.dll.compressed
costura.system.componentmodel.dll
[Authenticode]_c81486e4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.eventbasedasync.dll.compressed
costura.system.componentmodel.eventbasedasync.dll
[Authenticode]_080d1a4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.primitives.dll.compressed
costura.system.componentmodel.primitives.dll
[Authenticode]_ccf0afa1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.typeconverter.dll.compressed
costura.system.componentmodel.typeconverter.dll
[Authenticode]_068bfba6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.console.dll.compressed
costura.system.console.dll
[Authenticode]_2b78bb38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.data.common.dll.compressed
costura.system.data.common.dll
[Authenticode]_8aac7822.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Common.SR.resources
costura.system.diagnostics.contracts.dll.compressed
costura.system.diagnostics.contracts.dll
[Authenticode]_b51e7343.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.debug.dll.compressed
costura.system.diagnostics.debug.dll
[Authenticode]_c3857e3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.fileversioninfo.dll.compressed
costura.system.diagnostics.fileversioninfo.dll
[Authenticode]_d7308aba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.process.dll.compressed
costura.system.diagnostics.process.dll
[Authenticode]_03d7980b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.stacktrace.dll.compressed
costura.system.diagnostics.stacktrace.dll
[Authenticode]_222d4e88.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.textwritertracelistener.dll.compressed
costura.system.diagnostics.textwritertracelistener.dll
[Authenticode]_24a5851e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tools.dll.compressed
costura.system.diagnostics.tools.dll
[Authenticode]_ac4c7cab.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracesource.dll.compressed
costura.system.diagnostics.tracesource.dll
[Authenticode]_4b8f538c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracing.dll.compressed
costura.system.diagnostics.tracing.dll
[Authenticode]_aad65d3b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.drawing.primitives.dll.compressed
costura.system.drawing.primitives.dll
[Authenticode]_acc8a69c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.dynamic.runtime.dll.compressed
costura.system.dynamic.runtime.dll
[Authenticode]_0510daa9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.calendars.dll.compressed
costura.system.globalization.calendars.dll
[Authenticode]_be4c82a7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.dll.compressed
costura.system.globalization.dll
[Authenticode]_635c0d9d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.extensions.dll.compressed
costura.system.globalization.extensions.dll
[Authenticode]_1f7a856d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Globalization.Extensions.SR.resources
costura.system.io.compression.dll.compressed
costura.system.io.compression.dll
[Authenticode]_699f4db4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Compression.SR.resources
costura.system.io.compression.zipfile.dll.compressed
costura.system.io.compression.zipfile.dll
[Authenticode]_54d9b491.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.dll.compressed
costura.system.io.dll
[Authenticode]_530654e8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.dll.compressed
costura.system.io.filesystem.dll
[Authenticode]_58c1e0d1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.driveinfo.dll.compressed
costura.system.io.filesystem.driveinfo.dll
[Authenticode]_21751744.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.primitives.dll.compressed
costura.system.io.filesystem.primitives.dll
[Authenticode]_4219af30.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.watcher.dll.compressed
costura.system.io.filesystem.watcher.dll
[Authenticode]_c52f1d42.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.isolatedstorage.dll.compressed
costura.system.io.isolatedstorage.dll
[Authenticode]_6269a131.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.memorymappedfiles.dll.compressed
costura.system.io.memorymappedfiles.dll
[Authenticode]_6651444e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipes.dll.compressed
costura.system.io.pipes.dll
[Authenticode]_eb2dc0b4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.unmanagedmemorystream.dll.compressed
costura.system.io.unmanagedmemorystream.dll
[Authenticode]_0d00f6b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.dll.compressed
costura.system.linq.dll
[Authenticode]_63eab726.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.expressions.dll.compressed
costura.system.linq.expressions.dll
[Authenticode]_5aaeae34.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.parallel.dll.compressed
costura.system.linq.parallel.dll
[Authenticode]_127235ca.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.queryable.dll.compressed
costura.system.linq.queryable.dll
[Authenticode]_1ec34698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.http.dll.compressed
costura.system.net.http.dll
[Authenticode]_0d652b08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Net.Http.SR.resources
costura.system.net.nameresolution.dll.compressed
costura.system.net.nameresolution.dll
[Authenticode]_a2bda845.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.networkinformation.dll.compressed
costura.system.net.networkinformation.dll
[Authenticode]_fd5380c5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ping.dll.compressed
costura.system.net.ping.dll
[Authenticode]_2b3c76e6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.primitives.dll.compressed
costura.system.net.primitives.dll
[Authenticode]_f0102ad0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.requests.dll.compressed
costura.system.net.requests.dll
[Authenticode]_33f96ed7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.security.dll.compressed
costura.system.net.security.dll
[Authenticode]_2b71b5f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.sockets.dll.compressed
costura.system.net.sockets.dll
[Authenticode]_c249877a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.webheadercollection.dll.compressed
costura.system.net.webheadercollection.dll
[Authenticode]_fad07e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.client.dll.compressed
costura.system.net.websockets.client.dll
[Authenticode]_9bb58c63.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.dll.compressed
costura.system.net.websockets.dll
[Authenticode]_2732510c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.objectmodel.dll.compressed
costura.system.objectmodel.dll
[Authenticode]_8fe20591.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.dll.compressed
costura.system.reflection.dll
[Authenticode]_670bc0af.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.extensions.dll.compressed
costura.system.reflection.extensions.dll
[Authenticode]_81abba16.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.primitives.dll.compressed
costura.system.reflection.primitives.dll
[Authenticode]_188738dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.reader.dll.compressed
costura.system.resources.reader.dll
[Authenticode]_a0e0aace.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.resourcemanager.dll.compressed
costura.system.resources.resourcemanager.dll
[Authenticode]_6e5731cb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.writer.dll.compressed
costura.system.resources.writer.dll
[Authenticode]_119ea529.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.visualc.dll.compressed
costura.system.runtime.compilerservices.visualc.dll
[Authenticode]_6e32766f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.dll.compressed
costura.system.runtime.dll
[Authenticode]_e520829d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.extensions.dll.compressed
costura.system.runtime.extensions.dll
[Authenticode]_99a87f52.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.handles.dll.compressed
costura.system.runtime.handles.dll
[Authenticode]_ad62d44f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.interopservices.dll.compressed
costura.system.runtime.interopservices.dll
[Authenticode]_c2ad3a24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.numerics.dll.compressed
costura.system.runtime.numerics.dll
[Authenticode]_73283d38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.formatters.dll.compressed
costura.system.runtime.serialization.formatters.dll
[Authenticode]_ae937b14.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.json.dll.compressed
costura.system.runtime.serialization.json.dll
[Authenticode]_9c48f595.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.primitives.dll.compressed
costura.system.runtime.serialization.primitives.dll
[Authenticode]_f4a4d29e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.Serialization.Primitives.SR.resources
System.Runtime.Serialization.Primitives.Resources.System.Runtime.Serialization.Primitives.rd.xml
costura.system.runtime.serialization.xml.dll.compressed
costura.system.runtime.serialization.xml.dll
[Authenticode]_9769b5c2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.claims.dll.compressed
costura.system.security.claims.dll
[Authenticode]_3cd511d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.algorithms.dll.compressed
costura.system.security.cryptography.algorithms.dll
[Authenticode]_10a18c39.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.csp.dll.compressed
costura.system.security.cryptography.csp.dll
[Authenticode]_bf30f82d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.encoding.dll.compressed
costura.system.security.cryptography.encoding.dll
[Authenticode]_3080adeb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
costura.system.security.cryptography.primitives.dll
[Authenticode]_24bf2532.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
costura.system.security.cryptography.x509certificates.dll
[Authenticode]_bf8940c8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.principal.dll.compressed
costura.system.security.principal.dll
[Authenticode]_dd9ccd84.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.securestring.dll.compressed
costura.system.security.securestring.dll
[Authenticode]_ad433084.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.dll.compressed
costura.system.text.encoding.dll
[Authenticode]_d0773109.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.extensions.dll.compressed
costura.system.text.encoding.extensions.dll
[Authenticode]_ce6d8642.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.regularexpressions.dll.compressed
costura.system.text.regularexpressions.dll
[Authenticode]_85efe86b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.dll.compressed
costura.system.threading.dll
[Authenticode]_ae7221ce.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.overlapped.dll.compressed
costura.system.threading.overlapped.dll
[Authenticode]_afabacc9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Threading.Overlapped.SR.resources
costura.system.threading.tasks.dll.compressed
costura.system.threading.tasks.dll
[Authenticode]_0587f69f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.tasks.parallel.dll.compressed
costura.system.threading.tasks.parallel.dll
[Authenticode]_f2e6a8e3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.thread.dll.compressed
costura.system.threading.thread.dll
[Authenticode]_0cd7adcf.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.threadpool.dll.compressed
costura.system.threading.threadpool.dll
[Authenticode]_4cd1bac9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.timer.dll.compressed
costura.system.threading.timer.dll
[Authenticode]_4169e48c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
costura.system.valuetuple.dll
[Authenticode]_a5fa7839.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.readerwriter.dll.compressed
costura.system.xml.readerwriter.dll
[Authenticode]_ff80124f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xdocument.dll.compressed
costura.system.xml.xdocument.dll
[Authenticode]_4fe05443.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmldocument.dll.compressed
costura.system.xml.xmldocument.dll
[Authenticode]_67e85641.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmlserializer.dll.compressed
costura.system.xml.xmlserializer.dll
[Authenticode]_20f5d261.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.dll.compressed
costura.system.xml.xpath.dll
[Authenticode]_c5c34065.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.xdocument.dll.compressed
costura.system.xml.xpath.xdocument.dll
[Authenticode]_13755e7c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Kabuto.Service.Resources.Module.psm1
Malicious
[PowerShell Command]
Malicious
costura.syncro.service.models.dll.compressed
costura.syncro.service.models.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.services.dll.compressed
costura.syncro.service.services.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.tools.dll.compressed
costura.syncro.tools.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.resources
costura.syncro.uninstaller.exe.compressed
costura.syncro.uninstaller.exe
[Authenticode]_75921e10.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Kabuto.Uninstaller.logos.syncro-logo.png
Kabuto.Uninstaller.logos.syncro-logo.png-preview.png
costura.syncro.service.configuration.dll.compressed
costura.syncro.service.configuration.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.interfaces.dll.compressed
costura.syncro.service.interfaces.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.squirrel.dll.compressed
costura.squirrel.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.nuget.squirrel.dll.compressed
costura.nuget.squirrel.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
costura.phoenix.dll.compressed
costura.phoenix.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.win32.taskscheduler.dll.compressed
costura.microsoft.win32.taskscheduler.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Win32.TaskScheduler.Properties.Resources.resources
Microsoft.Win32.TaskScheduler.V1.TaskSchedulerV1Schema.xsd
Microsoft.Win32.TaskScheduler.TaskService.bmp
costura.interop.wuapilib.dll.compressed
costura.interop.wuapilib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.netfwtypelib.dll.compressed
costura.interop.netfwtypelib.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.iwshruntimelibrary.dll.compressed
costura.interop.iwshruntimelibrary.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.deltacompressiondotnet.dll.compressed
costura.deltacompressiondotnet.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.mono.cecil.dll.compressed
costura.mono.cecil.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.web.xmltransform.dll.compressed
costura.microsoft.web.xmltransform.dll
[Authenticode]_c5462488.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Web.XmlTransform.SR.resources
costura.en.syncro.uninstaller.resources.dll.compressed
costura.en.syncro.uninstaller.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.en.resources
costura.ar-sa.syncro.tools.resources.dll.compressed
costura.ar-sa.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ar-SA.resources
costura.cs-cz.syncro.tools.resources.dll.compressed
costura.cs-cz.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.cs-CZ.resources
costura.da-dk.syncro.tools.resources.dll.compressed
costura.da-dk.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.da-DK.resources
costura.de-de.syncro.tools.resources.dll.compressed
costura.de-de.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.de-DE.resources
costura.el-gr.syncro.tools.resources.dll.compressed
costura.el-gr.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.el-GR.resources
costura.en.syncro.tools.resources.dll.compressed
costura.en.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.en.resources
costura.es-es.syncro.tools.resources.dll.compressed
costura.es-es.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.es-ES.resources
costura.fi-fi.syncro.tools.resources.dll.compressed
costura.fi-fi.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fi-FI.resources
costura.fr-fr.syncro.tools.resources.dll.compressed
costura.fr-fr.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fr-FR.resources
costura.it-it.syncro.tools.resources.dll.compressed
costura.it-it.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.it-IT.resources
costura.ja-jp.syncro.tools.resources.dll.compressed
costura.ja-jp.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ja-JP.resources
costura.nl-nl.syncro.tools.resources.dll.compressed
costura.nl-nl.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.nl-NL.resources
costura.pt-br.syncro.tools.resources.dll.compressed
costura.pt-br.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.pt-BR.resources
costura.ru-ru.syncro.tools.resources.dll.compressed
costura.ru-ru.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ru-RU.resources
costura.sl-si.syncro.tools.resources.dll.compressed
costura.sl-si.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.sl-SI.resources
costura.zh-chs.syncro.tools.resources.dll.compressed
costura.zh-chs.syncro.tools.resources.dll
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.zh-CHS.resources
costura.metadata
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙