Infection Chain
Summary by MalvaGPT
Characteristics

Symbol Ofbuscation Score

Low

Hash
Hash Value
MD5
f8674f5c7350f80376a06440b694c1ea
Sha1
bfe5b5cb453b087f8c7a54ed6ae6a57c192ccf7d
Sha256
e4e31b07b240c202b2912730a926b494a5984f3ba6c706ffc80015262c158f04
Sha384
63cdc42380c26bc7a08d3c17e19c17e1fcc41bf6717416b3bddc8a6578025c49f5b611da22d57b3df45f9f4469cfebd2
Sha512
3821c46b29d2849c3d91a7560aa9a966984800080244a0b3032bca10632862daf9c6c3ed04e93826d0dbd4bf983800ed7e374120cb9ba7c7bbda603967314784
SSDeep
98304:2h/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIU:2h/ev5eTeW90kSIbDoUcfOhzT9cEt72L
TLSH
B2461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual C++ v6.0 DLL
Microsoft Visual Studio .NET
UPolyX 0.3 -> delikon
File Structure
[Authenticode]_710c4798.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Installer.NETProgressView.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Installer.Properties.Resources.resources
[Authenticode]_2e255469.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Installer.FrmProgress.resources
$this.Icon
[NBF]root.IconData
Kabuto.Installer.Resources.ISRG_Root_x1.cer
Kabuto.Installer.Resources.syncro-logo.ico
[Authenticode]_29deed15.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
[Authenticode]_929ebf03.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.install.bat
costura.autofac.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Autofac.Builder.BuildCallbackServiceResources.resources
Autofac.Builder.RegistrationBuilderResources.resources
Autofac.ContainerBuilderResources.resources
Autofac.Core.Activators.Delegate.DelegateActivatorResources.resources
Autofac.Core.Activators.InstanceActivatorResources.resources
Autofac.Core.Activators.ProvidedInstance.ProvidedInstanceActivatorResources.resources
Autofac.Core.Activators.Reflection.ConstructorParameterBindingResources.resources
Autofac.Core.Activators.Reflection.MatchingSignatureConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.MostParametersConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.NoConstructorsFoundExceptionResources.resources
Autofac.Core.Activators.Reflection.ReflectionActivatorResources.resources
Autofac.Core.ContainerResources.resources
Autofac.Core.DisposerResources.resources
Autofac.Core.Lifetime.LifetimeScopeResources.resources
Autofac.Core.Lifetime.MatchingScopeLifetimeResources.resources
Autofac.Core.Registration.ComponentNotRegisteredExceptionResources.resources
Autofac.Core.Registration.ComponentRegistrationResources.resources
Autofac.Core.Registration.ServiceRegistrationInfoResources.resources
Autofac.Core.Resolving.CircularDependencyDetectorResources.resources
Autofac.Core.Resolving.ComponentActivationResources.resources
Autofac.Core.Resolving.ResolveOperationResources.resources
Autofac.Core.ServiceResources.resources
Autofac.Features.Collections.CollectionRegistrationSourceResources.resources
Autofac.Features.GeneratedFactories.GeneratedFactoryRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyWithMetadataRegistrationSourceResources.resources
Autofac.Features.LightweightAdapters.LightweightAdapterRegistrationSourceResources.resources
Autofac.Features.Metadata.MetadataViewProviderResources.resources
Autofac.Features.Metadata.MetaRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorActivatorDataResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationExtensionsResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericServiceBinderResources.resources
Autofac.Features.OwnedInstances.OwnedInstanceRegistrationSourceResources.resources
Autofac.Features.ResolveAnything.AnyConcreteTypeNotAlreadyRegisteredSourceResources.resources
Autofac.ModuleResources.resources
Autofac.RegistrationExtensionsResources.resources
Autofac.TypeExtensionsResources.resources
Autofac.Util.EnforceResources.resources
Autofac.Util.FallbackDictionaryResources.resources
Autofac.Util.ReflectionExtensionsResources.resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.csharpfunctionalextensions.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.destructurama.attributed.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.fluentcommandlineparser.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.http.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ipnetwork.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.jetbrains.annotations.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
JetBrains.Annotations.Source.cs
costura.sharpsnmplib.dll.compressed
[Authenticode]_d7423556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.design.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.fonts.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Fonts.Resources.Open_Sans_Bold.ttf
MetroFramework.Fonts.Resources.Open_Sans_Light.ttf
MetroFramework.Fonts.Resources.Open_Sans.ttf
costura.metroframework.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Controls.MetroGrid.resources
MetroFramework.Controls.MetroTextBox.resources
lnkClear.Image
[NBF]root.Data
[NBF]root.Data-preview.png
lnkClear.NoFocusImage
[NBF]root.Data
[NBF]root.Data-preview.png
MetroFramework.Localization.de.MetroToggle.xml
MetroFramework.Localization.en.MetroToggle.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
[Authenticode]_7bbedf97.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.abstractions.dll.compressed
[Authenticode]_98b08d7f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.memory.dll.compressed
[Authenticode]_f456ed73.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Caching.Memory.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.dependencyinjection.abstractions.dll.compressed
[Authenticode]_6f772489.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.DependencyInjection.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.logging.abstractions.dll.compressed
[Authenticode]_07094d6f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Logging.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.options.dll.compressed
[Authenticode]_20703a50.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Options.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.primitives.dll.compressed
[Authenticode]_f99fc7eb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Primitives.SR.resources
ILLink.Substitutions.xml
costura.microsoft.win32.registry.dll.compressed
[Authenticode]_4a73ed43.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.Registry.SR.resources
ILLink.Substitutions.xml
costura.newtonsoft.json.dll.compressed
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.rollbarsharp.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.formatting.compact.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.console.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.file.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.sevenzipsharp.dll.compressed
7z-stream @ 0x00023560.7z
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
SevenZip.sfx.Configs.xml
SevenZip.sfx.Configs.xsd
SevenZip.arch.Test.bzip2.7z
SevenZip.arch.Test.lzma.7z
SevenZip.arch.Test.lzma2.7z
SevenZip.arch.Test.ppmd.7z
SevenZip.arch.Test.rar
SevenZip.arch.Test.tar
SevenZip.arch.Test.txt.bz2
SevenZip.arch.Test.txt.gz
SevenZip.arch.Test.txt.xz
SevenZip.arch.Test.zip
costura.icsharpcode.sharpziplib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.splat.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
[Authenticode]_35d2433a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.diagnostics.diagnosticsource.dll.compressed
[Authenticode]_dfc1d433.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.DiagnosticSource.SR.resources
ILLink.Substitutions.xml
costura.system.diagnostics.eventlog.dll.compressed
[Authenticode]_85f42e61.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.EventLog.SR.resources
ILLink.Substitutions.xml
costura.system.io.pipelines.dll.compressed
[Authenticode]_7fb91b46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
[Authenticode]_b502138b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
[Authenticode]_488676cc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.dll.compressed
[Authenticode]_d8e8a703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.unsafe.dll.compressed
[Authenticode]_04ff5a5b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.accesscontrol.dll.compressed
[Authenticode]_9a338e29.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.AccessControl.SR.resources
ILLink.Substitutions.xml
costura.system.security.cryptography.algorithms.dll.compressed
[Authenticode]_6dcbe3dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.encoding.dll.compressed
[Authenticode]_640c135d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
[Authenticode]_bb12d671.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
[Authenticode]_bc99acc3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.X509Certificates.SR.resources
costura.system.security.principal.windows.dll.compressed
[Authenticode]_2846fe66.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Substitutions.xml
costura.system.serviceprocess.servicecontroller.dll.compressed
[Authenticode]_65eeb668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
[Authenticode]_3300621d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
[Authenticode]_f27e5967.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
[Authenticode]_02d85556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
[Authenticode]_e10eb9d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.urlcombinelib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.websocket-sharp.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.repairtech.common.tools.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.contracts.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.exe.compressed
[Authenticode]_f6d4f6e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
costura.costura.pdb.compressed
costura.system.runtime.interopservices.runtimeinformation.dll.compressed
[Authenticode]_0b5039bc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.InteropServices.RuntimeInformation.SR.resources
costura.microsoft.win32.primitives.dll.compressed
[Authenticode]_0eace63a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.netstandard.dll.compressed
[Authenticode]_0c342621.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.appcontext.dll.compressed
[Authenticode]_a5aef8f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.concurrent.dll.compressed
[Authenticode]_5e25c536.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.dll.compressed
[Authenticode]_9323bd82.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.nongeneric.dll.compressed
[Authenticode]_eecaa1f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.specialized.dll.compressed
[Authenticode]_642764aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.dll.compressed
[Authenticode]_c81486e4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.eventbasedasync.dll.compressed
[Authenticode]_080d1a4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.primitives.dll.compressed
[Authenticode]_ccf0afa1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.typeconverter.dll.compressed
[Authenticode]_068bfba6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.console.dll.compressed
[Authenticode]_2b78bb38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.data.common.dll.compressed
[Authenticode]_8aac7822.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Common.SR.resources
costura.system.diagnostics.contracts.dll.compressed
[Authenticode]_b51e7343.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.debug.dll.compressed
[Authenticode]_c3857e3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.fileversioninfo.dll.compressed
[Authenticode]_d7308aba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.process.dll.compressed
[Authenticode]_03d7980b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.stacktrace.dll.compressed
[Authenticode]_222d4e88.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.textwritertracelistener.dll.compressed
[Authenticode]_24a5851e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tools.dll.compressed
[Authenticode]_ac4c7cab.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracesource.dll.compressed
[Authenticode]_4b8f538c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracing.dll.compressed
[Authenticode]_aad65d3b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.drawing.primitives.dll.compressed
[Authenticode]_acc8a69c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.dynamic.runtime.dll.compressed
[Authenticode]_0510daa9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.calendars.dll.compressed
[Authenticode]_be4c82a7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.dll.compressed
[Authenticode]_635c0d9d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.extensions.dll.compressed
[Authenticode]_1f7a856d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Globalization.Extensions.SR.resources
costura.system.io.compression.dll.compressed
[Authenticode]_699f4db4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Compression.SR.resources
costura.system.io.compression.zipfile.dll.compressed
[Authenticode]_54d9b491.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.dll.compressed
[Authenticode]_530654e8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.dll.compressed
[Authenticode]_58c1e0d1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.driveinfo.dll.compressed
[Authenticode]_21751744.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.primitives.dll.compressed
[Authenticode]_4219af30.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.watcher.dll.compressed
[Authenticode]_c52f1d42.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.isolatedstorage.dll.compressed
[Authenticode]_6269a131.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.memorymappedfiles.dll.compressed
[Authenticode]_6651444e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipes.dll.compressed
[Authenticode]_eb2dc0b4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.unmanagedmemorystream.dll.compressed
[Authenticode]_0d00f6b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.dll.compressed
[Authenticode]_63eab726.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.expressions.dll.compressed
[Authenticode]_5aaeae34.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.parallel.dll.compressed
[Authenticode]_127235ca.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.queryable.dll.compressed
[Authenticode]_1ec34698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.http.dll.compressed
[Authenticode]_0d652b08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Net.Http.SR.resources
costura.system.net.nameresolution.dll.compressed
[Authenticode]_a2bda845.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.networkinformation.dll.compressed
[Authenticode]_fd5380c5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ping.dll.compressed
[Authenticode]_2b3c76e6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.primitives.dll.compressed
[Authenticode]_f0102ad0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.requests.dll.compressed
[Authenticode]_33f96ed7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.security.dll.compressed
[Authenticode]_2b71b5f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.sockets.dll.compressed
[Authenticode]_c249877a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.webheadercollection.dll.compressed
[Authenticode]_fad07e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.client.dll.compressed
[Authenticode]_9bb58c63.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.dll.compressed
[Authenticode]_2732510c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.objectmodel.dll.compressed
[Authenticode]_8fe20591.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.dll.compressed
[Authenticode]_670bc0af.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.extensions.dll.compressed
[Authenticode]_81abba16.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.primitives.dll.compressed
[Authenticode]_188738dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.reader.dll.compressed
[Authenticode]_a0e0aace.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.resourcemanager.dll.compressed
[Authenticode]_6e5731cb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.writer.dll.compressed
[Authenticode]_119ea529.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.visualc.dll.compressed
[Authenticode]_6e32766f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.dll.compressed
[Authenticode]_e520829d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.extensions.dll.compressed
[Authenticode]_99a87f52.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.handles.dll.compressed
[Authenticode]_ad62d44f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.interopservices.dll.compressed
[Authenticode]_c2ad3a24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.numerics.dll.compressed
[Authenticode]_73283d38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.formatters.dll.compressed
[Authenticode]_ae937b14.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.json.dll.compressed
[Authenticode]_9c48f595.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.primitives.dll.compressed
[Authenticode]_f4a4d29e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.Serialization.Primitives.SR.resources
System.Runtime.Serialization.Primitives.Resources.System.Runtime.Serialization.Primitives.rd.xml
costura.system.runtime.serialization.xml.dll.compressed
[Authenticode]_9769b5c2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.claims.dll.compressed
[Authenticode]_3cd511d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.algorithms.dll.compressed
[Authenticode]_10a18c39.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.csp.dll.compressed
[Authenticode]_bf30f82d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.encoding.dll.compressed
[Authenticode]_3080adeb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
[Authenticode]_24bf2532.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
[Authenticode]_bf8940c8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.principal.dll.compressed
[Authenticode]_dd9ccd84.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.securestring.dll.compressed
[Authenticode]_ad433084.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.dll.compressed
[Authenticode]_d0773109.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.extensions.dll.compressed
[Authenticode]_ce6d8642.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.regularexpressions.dll.compressed
[Authenticode]_85efe86b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.dll.compressed
[Authenticode]_ae7221ce.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.overlapped.dll.compressed
[Authenticode]_afabacc9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Threading.Overlapped.SR.resources
costura.system.threading.tasks.dll.compressed
[Authenticode]_0587f69f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.tasks.parallel.dll.compressed
[Authenticode]_f2e6a8e3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.thread.dll.compressed
[Authenticode]_0cd7adcf.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.threadpool.dll.compressed
[Authenticode]_4cd1bac9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.timer.dll.compressed
[Authenticode]_4169e48c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
[Authenticode]_a5fa7839.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.readerwriter.dll.compressed
[Authenticode]_ff80124f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xdocument.dll.compressed
[Authenticode]_4fe05443.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmldocument.dll.compressed
[Authenticode]_67e85641.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmlserializer.dll.compressed
[Authenticode]_20f5d261.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.dll.compressed
[Authenticode]_c5c34065.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.xdocument.dll.compressed
[Authenticode]_13755e7c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Kabuto.Service.Resources.Module.psm1
Malicious
[PowerShell Command]
Malicious
costura.syncro.service.models.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.services.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.tools.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.resources
costura.syncro.uninstaller.exe.compressed
[Authenticode]_75921e10.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Kabuto.Uninstaller.logos.syncro-logo.png
Kabuto.Uninstaller.logos.syncro-logo.png-preview.png
costura.syncro.service.configuration.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.interfaces.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.squirrel.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.nuget.squirrel.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
costura.phoenix.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.win32.taskscheduler.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Win32.TaskScheduler.Properties.Resources.resources
Microsoft.Win32.TaskScheduler.V1.TaskSchedulerV1Schema.xsd
Microsoft.Win32.TaskScheduler.TaskService.bmp
costura.interop.wuapilib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.netfwtypelib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.iwshruntimelibrary.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.deltacompressiondotnet.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.mono.cecil.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.web.xmltransform.dll.compressed
[Authenticode]_c5462488.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Web.XmlTransform.SR.resources
costura.en.syncro.uninstaller.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.en.resources
costura.ar-sa.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ar-SA.resources
costura.cs-cz.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.cs-CZ.resources
costura.da-dk.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.da-DK.resources
costura.de-de.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.de-DE.resources
costura.el-gr.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.el-GR.resources
costura.en.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.en.resources
costura.es-es.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.es-ES.resources
costura.fi-fi.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fi-FI.resources
costura.fr-fr.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fr-FR.resources
costura.it-it.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.it-IT.resources
costura.ja-jp.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ja-JP.resources
costura.nl-nl.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.nl-NL.resources
costura.pt-br.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.pt-BR.resources
costura.ru-ru.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ru-RU.resources
costura.sl-si.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.sl-SI.resources
costura.zh-chs.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.zh-CHS.resources
costura.metadata
Informations
Name
Value
Info

PE Detect: PeReader OK (file layout)

Info

Authenticode present at 0x593720 size 12032 bytes

Info

PDB Path: C:\GitLab-Runner\builds\MvqzSHEmm\0\syncromsp\team-rmm-agent\kabuto-app\Installer\obj\Release\Installer.pdb

Module Name

Installer.exe

Full Name

Installer.exe

EntryPoint

System.Int32 Installer.Program::Main(System.String[])

Scope Name

Installer.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Installer

Assembly Version

1.0.191.18060

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

166

Main Method

System.Int32 Installer.Program::Main(System.String[])

Main IL Instruction Count

416

Main IL

call System.Void Installer.Program::DebugHook() ldarg.0 <null> ldloca.s V_0 ldflda Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions ldloca.s V_0 ldflda System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments call System.Void Installer.Program::ParseArgs(System.String[],Installer.InstallerOptions&,System.Collections.Generic.List`1<System.String>&) call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldloc.1 <null> callvirt System.Reflection.AssemblyName System.Reflection.Assembly::GetName() stloc.2 <null> ldloca.s V_0 ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() stfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation ldstr Syncro ldloca.s V_3 call System.Threading.Mutex RepairTech.Common.Tools.InstallerMutex::GetInstallMutex(System.String,System.Boolean&) stloc.s V_4 ldloca.s V_5 ldstr Syncro call System.String Installer.Program::MakeLogFilePath(System.String) newobj System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::.ctor(System.String) stfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() brfalse.s IL_008B: ldloc.3 call System.Boolean Installer.ConsoleUtils::EnableConsole() brtrue.s IL_008B: ldloc.3 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Failed to initialize console, error: {0} call System.Int32 System.Runtime.InteropServices.Marshal::GetLastWin32Error() box System.Int32 call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Error(System.String) ldloc.3 <null> brtrue.s IL_00A5: call System.String System.Environment::get_CommandLine() ldstr Error starting the installer because another instance is running at the moment. Please try again later or contact support for assistance ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.s -2 stloc.s V_9 leave IL_05B8: ldloc.s V_9 call System.String System.Environment::get_CommandLine() call System.String Kabuto.Installer.CommandLine::Mask(System.String) stloc.s V_6 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Starting {0} {1}, version {2} ldstr Syncro ldloc.2 <null> callvirt System.String System.Reflection.AssemblyName::get_Name() dup <null> brtrue.s IL_00D1: ldloc.2 pop <null> ldstr ? ldloc.2 <null> callvirt System.Version System.Reflection.AssemblyName::get_Version() call System.String System.String::Format(System.String,System.Object,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Product: 'Syncro' callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr ImageName: ' ldloc.0 <null> ldfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation ldstr ' call System.String System.String::Concat(System.String,System.String,System.String) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Arguments: ' ldloc.s V_6 ldstr ' call System.String System.String::Concat(System.String,System.String,System.String) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr OS Version: '{0}' call System.OperatingSystem System.Environment::get_OSVersion() call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr OS Is64Bit: '{0}' / '{1}' call System.Boolean System.Environment::get_Is64BitOperatingSystem() box System.Boolean call System.Boolean System.Environment::get_Is64BitProcess() box System.Boolean call System.String System.String::Format(System.String,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Interactive: '{0}' call System.Boolean System.Environment::get_UserInteractive() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr ConsoleMode: '{0}' ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr AllowForceReboot: '{0}' ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__AssignDefaultArguments|3_2(Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() call System.Boolean System.StringHelper::IsNoe(System.String) brfalse.s IL_020E: ldloc.0 ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() call System.Boolean System.StringHelper::IsNoe(System.String) brtrue.s IL_0220: ldstr "There was an error locating the configuration data. Please check your account and try again." ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ConfigJson() call System.Boolean System.StringHelper::IsNoe(System.String) brfalse.s IL_0236: ldloc.s V_5 ldstr There was an error locating the configuration data. Please check your account and try again. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Auth payload v0: {0} {1} {2} ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_CustomerId() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_PolicyId() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean call System.String System.String::Format(System.String,System.Object,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Auth payload v1: {0} ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() ldstr --key ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_PolicyId() ldstr --policyid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_FolderId() ldstr --folderid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_CustomerId() ldstr --customerid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() ldstr --jwt-payload ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ConfigJson() ldstr --config-json ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) call System.Boolean Kabuto.FrameworkInstaller::IsFramework462Installed() brfalse.s IL_0369: ldloc.s V_5 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr .NET Framework 4.6.2 is already installed, proceeding... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) br IL_04AF: ldstr "Syncro.Installer.exe" ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr .NET Framework 4.6.2 is not installed, trying to install it... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot() call System.Boolean Installer.Program::AllowForceReboot(System.Boolean,System.Boolean) brtrue.s IL_03B0: nop ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr User disallowed force reboot, exiting... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 nop <null> ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger newobj System.Void Kabuto.FrameworkInstaller::.ctor(RepairTech.Common.Tools.Logging.ICustomLogger) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() ldc.i4.0 <null> ceq <null> callvirt Kabuto.NETFrameworkInstallerReturnCode Kabuto.FrameworkInstaller::Install(System.Boolean) stloc.s V_10 ldloc.s V_10 ldc.i4 1603 bgt.s IL_03F6: ldloc.s V_10 ldloc.s V_10 brfalse IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 1602 beq.s IL_043F: ldstr ".NET Framework setup has been cancelled, the installation cannot continue." ldloc.s V_10 ldc.i4 1603 beq.s IL_0428: ldstr ".NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains" br.s IL_0456: ldstr "Unknown return code: {0}" ldloc.s V_10 ldc.i4 1641 beq.s IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 3010 beq.s IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 5100 bne.un.s IL_0456: ldstr "Unknown return code: {0}" ldstr .NET Framework installer has reported that your computer doesn't meet system requirements. This can be due to missing updates or there's not enough space left on disk. At least 2 GB is required. Please check free disk space, Windows Update and try again ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr .NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr .NET Framework setup has been cancelled, the installation cannot continue. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr Unknown return code: {0} ldloc.s V_10 box Kabuto.NETFrameworkInstallerReturnCode call System.String System.String::Format(System.String,System.Object) ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) leave.s IL_049F: ldloc.0 pop <null> ldstr .NET Framework setup has been cancelled, the installation cannot continue. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 callvirt System.String System.Exception::get_Message() ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.m1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldloc.0 <null> ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments ldstr --net462 callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String) ldstr Syncro.Installer.exe stloc.s V_7 call System.String System.IO.Path::GetTempPath() ldloc.s V_7 call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_8 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldc.i4.5 <null> newarr System.String dup <null> ldc.i4.0 <null> ldstr Next stage installer: ` stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_7 stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr `, ' stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_8 stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr ' stelem.ref <null> call System.String System.String::Concat(System.String[]) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_8 call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String) ldstr Installer. ldloc.s V_7 call System.String System.String::Concat(System.String,System.String) ldloc.s V_8 call System.Void Kabuto.ResourceManager::ExtractToFile(System.String,System.String) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() dup <null> ldloc.s V_8 callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) dup <null> ldstr ldloc.0 <null> ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) dup <null> call System.String System.IO.Path::GetTempPath() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Next stage installer is starting. callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_11 ldloc.s V_11 callvirt System.Void System.Diagnostics.Process::WaitForExit() ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Next stage installer returned with code {0} ldloc.s V_11 callvirt System.Int32 System.Diagnostics.Process::get_ExitCode() box System.Int32 call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_11 callvirt System.Int32 System.Diagnostics.Process::get_ExitCode() stloc.s V_9 leave.s IL_05B8: ldloc.s V_9 ldloc.s V_8 call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String) endfinally <null> ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() brfalse.s IL_05AB: endfinally call System.Void Installer.ConsoleUtils::Exit() endfinally <null> ldloc.s V_4 brfalse.s IL_05B7: endfinally ldloc.s V_4 callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_9 ret <null>

Module Name

Installer.exe

Full Name

Installer.exe

EntryPoint

System.Int32 Installer.Program::Main(System.String[])

Scope Name

Installer.exe

Scope Type

ModuleDef

Kind

Windows

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Installer

Assembly Version

1.0.191.18060

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.0

Total Strings

166

Main Method

System.Int32 Installer.Program::Main(System.String[])

Main IL Instruction Count

416

Main IL

call System.Void Installer.Program::DebugHook() ldarg.0 <null> ldloca.s V_0 ldflda Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions ldloca.s V_0 ldflda System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments call System.Void Installer.Program::ParseArgs(System.String[],Installer.InstallerOptions&,System.Collections.Generic.List`1<System.String>&) call System.Reflection.Assembly System.Reflection.Assembly::GetExecutingAssembly() stloc.1 <null> ldloc.1 <null> callvirt System.Reflection.AssemblyName System.Reflection.Assembly::GetName() stloc.2 <null> ldloca.s V_0 ldloc.1 <null> callvirt System.String System.Reflection.Assembly::get_Location() stfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation ldstr Syncro ldloca.s V_3 call System.Threading.Mutex RepairTech.Common.Tools.InstallerMutex::GetInstallMutex(System.String,System.Boolean&) stloc.s V_4 ldloca.s V_5 ldstr Syncro call System.String Installer.Program::MakeLogFilePath(System.String) newobj System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::.ctor(System.String) stfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() brfalse.s IL_008B: ldloc.3 call System.Boolean Installer.ConsoleUtils::EnableConsole() brtrue.s IL_008B: ldloc.3 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Failed to initialize console, error: {0} call System.Int32 System.Runtime.InteropServices.Marshal::GetLastWin32Error() box System.Int32 call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Error(System.String) ldloc.3 <null> brtrue.s IL_00A5: call System.String System.Environment::get_CommandLine() ldstr Error starting the installer because another instance is running at the moment. Please try again later or contact support for assistance ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.s -2 stloc.s V_9 leave IL_05B8: ldloc.s V_9 call System.String System.Environment::get_CommandLine() call System.String Kabuto.Installer.CommandLine::Mask(System.String) stloc.s V_6 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Starting {0} {1}, version {2} ldstr Syncro ldloc.2 <null> callvirt System.String System.Reflection.AssemblyName::get_Name() dup <null> brtrue.s IL_00D1: ldloc.2 pop <null> ldstr ? ldloc.2 <null> callvirt System.Version System.Reflection.AssemblyName::get_Version() call System.String System.String::Format(System.String,System.Object,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Product: 'Syncro' callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr ImageName: ' ldloc.0 <null> ldfld System.String Installer.Program/<>c__DisplayClass3_0::assemblyLocation ldstr ' call System.String System.String::Concat(System.String,System.String,System.String) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Arguments: ' ldloc.s V_6 ldstr ' call System.String System.String::Concat(System.String,System.String,System.String) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr OS Version: '{0}' call System.OperatingSystem System.Environment::get_OSVersion() call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr OS Is64Bit: '{0}' / '{1}' call System.Boolean System.Environment::get_Is64BitOperatingSystem() box System.Boolean call System.Boolean System.Environment::get_Is64BitProcess() box System.Boolean call System.String System.String::Format(System.String,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Interactive: '{0}' call System.Boolean System.Environment::get_UserInteractive() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr ConsoleMode: '{0}' ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr AllowForceReboot: '{0}' ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot() box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__AssignDefaultArguments|3_2(Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() call System.Boolean System.StringHelper::IsNoe(System.String) brfalse.s IL_020E: ldloc.0 ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() call System.Boolean System.StringHelper::IsNoe(System.String) brtrue.s IL_0220: ldstr "There was an error locating the configuration data. Please check your account and try again." ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ConfigJson() call System.Boolean System.StringHelper::IsNoe(System.String) brfalse.s IL_0236: ldloc.s V_5 ldstr There was an error locating the configuration data. Please check your account and try again. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Auth payload v0: {0} {1} {2} ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_CustomerId() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_PolicyId() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean call System.String System.String::Format(System.String,System.Object,System.Object,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Auth payload v1: {0} ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() call System.Boolean System.StringHelper::IsNoe(System.String) ldc.i4.0 <null> ceq <null> box System.Boolean call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ApiKey() ldstr --key ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_PolicyId() ldstr --policyid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_FolderId() ldstr --folderid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_CustomerId() ldstr --customerid ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_JwtPayload() ldstr --jwt-payload ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.String Installer.InstallerOptions::get_ConfigJson() ldstr --config-json ldloca.s V_0 call System.Void Installer.Program::<Main>g__AppendArg|3_0(System.String,System.String,Installer.Program/<>c__DisplayClass3_0&) call System.Boolean Kabuto.FrameworkInstaller::IsFramework462Installed() brfalse.s IL_0369: ldloc.s V_5 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr .NET Framework 4.6.2 is already installed, proceeding... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) br IL_04AF: ldstr "Syncro.Installer.exe" ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr .NET Framework 4.6.2 is not installed, trying to install it... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_AllowForceReboot() call System.Boolean Installer.Program::AllowForceReboot(System.Boolean,System.Boolean) brtrue.s IL_03B0: nop ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr User disallowed force reboot, exiting... callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 nop <null> ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger newobj System.Void Kabuto.FrameworkInstaller::.ctor(RepairTech.Common.Tools.Logging.ICustomLogger) ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() ldc.i4.0 <null> ceq <null> callvirt Kabuto.NETFrameworkInstallerReturnCode Kabuto.FrameworkInstaller::Install(System.Boolean) stloc.s V_10 ldloc.s V_10 ldc.i4 1603 bgt.s IL_03F6: ldloc.s V_10 ldloc.s V_10 brfalse IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 1602 beq.s IL_043F: ldstr ".NET Framework setup has been cancelled, the installation cannot continue." ldloc.s V_10 ldc.i4 1603 beq.s IL_0428: ldstr ".NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains" br.s IL_0456: ldstr "Unknown return code: {0}" ldloc.s V_10 ldc.i4 1641 beq.s IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 3010 beq.s IL_0470: leave.s IL_049F ldloc.s V_10 ldc.i4 5100 bne.un.s IL_0456: ldstr "Unknown return code: {0}" ldstr .NET Framework installer has reported that your computer doesn't meet system requirements. This can be due to missing updates or there's not enough space left on disk. At least 2 GB is required. Please check free disk space, Windows Update and try again ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr .NET Framework installer has failed with fatal error. Try to run this installer again to see if error remains ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr .NET Framework setup has been cancelled, the installation cannot continue. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldloc.s V_10 stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldstr Unknown return code: {0} ldloc.s V_10 box Kabuto.NETFrameworkInstallerReturnCode call System.String System.String::Format(System.String,System.Object) ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) leave.s IL_049F: ldloc.0 pop <null> ldstr .NET Framework setup has been cancelled, the installation cannot continue. ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 callvirt System.String System.Exception::get_Message() ldloca.s V_0 ldloca.s V_5 call System.Void Installer.Program::<Main>g__ShowErrorMessage|3_1(System.String,Installer.Program/<>c__DisplayClass3_0&,Installer.Program/<>c__DisplayClass3_1&) ldc.i4.m1 <null> stloc.s V_9 leave IL_05B8: ldloc.s V_9 ldloc.0 <null> ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments ldstr --net462 callvirt System.Void System.Collections.Generic.List`1<System.String>::Add(System.String) ldstr Syncro.Installer.exe stloc.s V_7 call System.String System.IO.Path::GetTempPath() ldloc.s V_7 call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_8 ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldc.i4.5 <null> newarr System.String dup <null> ldc.i4.0 <null> ldstr Next stage installer: ` stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_7 stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr `, ' stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_8 stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr ' stelem.ref <null> call System.String System.String::Concat(System.String[]) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_8 call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String) ldstr Installer. ldloc.s V_7 call System.String System.String::Concat(System.String,System.String) ldloc.s V_8 call System.Void Kabuto.ResourceManager::ExtractToFile(System.String,System.String) newobj System.Void System.Diagnostics.ProcessStartInfo::.ctor() dup <null> ldloc.s V_8 callvirt System.Void System.Diagnostics.ProcessStartInfo::set_FileName(System.String) dup <null> ldstr ldloc.0 <null> ldfld System.Collections.Generic.List`1<System.String> Installer.Program/<>c__DisplayClass3_0::installerArguments call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) callvirt System.Void System.Diagnostics.ProcessStartInfo::set_Arguments(System.String) dup <null> call System.String System.IO.Path::GetTempPath() callvirt System.Void System.Diagnostics.ProcessStartInfo::set_WorkingDirectory(System.String) ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Next stage installer is starting. callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) call System.Diagnostics.Process System.Diagnostics.Process::Start(System.Diagnostics.ProcessStartInfo) stloc.s V_11 ldloc.s V_11 callvirt System.Void System.Diagnostics.Process::WaitForExit() ldloc.s V_5 ldfld RepairTech.Common.Tools.Logging.SimpleCustomLogger Installer.Program/<>c__DisplayClass3_1::logger ldstr Next stage installer returned with code {0} ldloc.s V_11 callvirt System.Int32 System.Diagnostics.Process::get_ExitCode() box System.Int32 call System.String System.String::Format(System.String,System.Object) callvirt System.Void RepairTech.Common.Tools.Logging.SimpleCustomLogger::Information(System.String) ldloc.s V_11 callvirt System.Int32 System.Diagnostics.Process::get_ExitCode() stloc.s V_9 leave.s IL_05B8: ldloc.s V_9 ldloc.s V_8 call System.Void RepairTech.Common.Tools.FileUtils::DeleteFileIfExist(System.String) endfinally <null> ldloc.0 <null> ldfld Installer.InstallerOptions Installer.Program/<>c__DisplayClass3_0::installerOptions callvirt System.Boolean Installer.InstallerOptions::get_ConsoleMode() brfalse.s IL_05AB: endfinally call System.Void Installer.ConsoleUtils::Exit() endfinally <null> ldloc.s V_4 brfalse.s IL_05B7: endfinally ldloc.s V_4 callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_9 ret <null>

f8674f5c7350f80376a06440b694c1ea (5.86 MB)
File Structure
[Authenticode]_710c4798.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Installer.NETProgressView.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Installer.Properties.Resources.resources
[Authenticode]_2e255469.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Malicious
Kabuto.Installer.FrmProgress.resources
$this.Icon
[NBF]root.IconData
Kabuto.Installer.Resources.ISRG_Root_x1.cer
Kabuto.Installer.Resources.syncro-logo.ico
[Authenticode]_29deed15.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
[Authenticode]_929ebf03.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Kabuto.Installer.Resources.install.bat
costura.autofac.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Autofac.Builder.BuildCallbackServiceResources.resources
Autofac.Builder.RegistrationBuilderResources.resources
Autofac.ContainerBuilderResources.resources
Autofac.Core.Activators.Delegate.DelegateActivatorResources.resources
Autofac.Core.Activators.InstanceActivatorResources.resources
Autofac.Core.Activators.ProvidedInstance.ProvidedInstanceActivatorResources.resources
Autofac.Core.Activators.Reflection.ConstructorParameterBindingResources.resources
Autofac.Core.Activators.Reflection.MatchingSignatureConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.MostParametersConstructorSelectorResources.resources
Autofac.Core.Activators.Reflection.NoConstructorsFoundExceptionResources.resources
Autofac.Core.Activators.Reflection.ReflectionActivatorResources.resources
Autofac.Core.ContainerResources.resources
Autofac.Core.DisposerResources.resources
Autofac.Core.Lifetime.LifetimeScopeResources.resources
Autofac.Core.Lifetime.MatchingScopeLifetimeResources.resources
Autofac.Core.Registration.ComponentNotRegisteredExceptionResources.resources
Autofac.Core.Registration.ComponentRegistrationResources.resources
Autofac.Core.Registration.ServiceRegistrationInfoResources.resources
Autofac.Core.Resolving.CircularDependencyDetectorResources.resources
Autofac.Core.Resolving.ComponentActivationResources.resources
Autofac.Core.Resolving.ResolveOperationResources.resources
Autofac.Core.ServiceResources.resources
Autofac.Features.Collections.CollectionRegistrationSourceResources.resources
Autofac.Features.GeneratedFactories.GeneratedFactoryRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyRegistrationSourceResources.resources
Autofac.Features.LazyDependencies.LazyWithMetadataRegistrationSourceResources.resources
Autofac.Features.LightweightAdapters.LightweightAdapterRegistrationSourceResources.resources
Autofac.Features.Metadata.MetadataViewProviderResources.resources
Autofac.Features.Metadata.MetaRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorActivatorDataResources.resources
Autofac.Features.OpenGenerics.OpenGenericDecoratorRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationExtensionsResources.resources
Autofac.Features.OpenGenerics.OpenGenericRegistrationSourceResources.resources
Autofac.Features.OpenGenerics.OpenGenericServiceBinderResources.resources
Autofac.Features.OwnedInstances.OwnedInstanceRegistrationSourceResources.resources
Autofac.Features.ResolveAnything.AnyConcreteTypeNotAlreadyRegisteredSourceResources.resources
Autofac.ModuleResources.resources
Autofac.RegistrationExtensionsResources.resources
Autofac.TypeExtensionsResources.resources
Autofac.Util.EnforceResources.resources
Autofac.Util.FallbackDictionaryResources.resources
Autofac.Util.ReflectionExtensionsResources.resources
costura.costura.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.csharpfunctionalextensions.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.destructurama.attributed.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.fluentcommandlineparser.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.flurl.http.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ipnetwork.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.jetbrains.annotations.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
JetBrains.Annotations.Source.cs
costura.sharpsnmplib.dll.compressed
[Authenticode]_d7423556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.design.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metroframework.fonts.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Fonts.Resources.Open_Sans_Bold.ttf
MetroFramework.Fonts.Resources.Open_Sans_Light.ttf
MetroFramework.Fonts.Resources.Open_Sans.ttf
costura.metroframework.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
MetroFramework.Controls.MetroGrid.resources
MetroFramework.Controls.MetroTextBox.resources
lnkClear.Image
[NBF]root.Data
[NBF]root.Data-preview.png
lnkClear.NoFocusImage
[NBF]root.Data
[NBF]root.Data-preview.png
MetroFramework.Localization.de.MetroToggle.xml
MetroFramework.Localization.en.MetroToggle.xml
costura.microsoft.bcl.asyncinterfaces.dll.compressed
[Authenticode]_7bbedf97.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.abstractions.dll.compressed
[Authenticode]_98b08d7f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.extensions.caching.memory.dll.compressed
[Authenticode]_f456ed73.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Caching.Memory.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.dependencyinjection.abstractions.dll.compressed
[Authenticode]_6f772489.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.DependencyInjection.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.logging.abstractions.dll.compressed
[Authenticode]_07094d6f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Logging.Abstractions.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.options.dll.compressed
[Authenticode]_20703a50.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Options.SR.resources
ILLink.Substitutions.xml
costura.microsoft.extensions.primitives.dll.compressed
[Authenticode]_f99fc7eb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Extensions.Primitives.SR.resources
ILLink.Substitutions.xml
costura.microsoft.win32.registry.dll.compressed
[Authenticode]_4a73ed43.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.Microsoft.Win32.Registry.SR.resources
ILLink.Substitutions.xml
costura.newtonsoft.json.dll.compressed
[Authenticode]_220cad77.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.rollbarsharp.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.formatting.compact.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.console.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.serilog.sinks.file.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.sevenzipsharp.dll.compressed
7z-stream @ 0x00023560.7z
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
SevenZip.sfx.Configs.xml
SevenZip.sfx.Configs.xsd
SevenZip.arch.Test.bzip2.7z
SevenZip.arch.Test.lzma.7z
SevenZip.arch.Test.lzma2.7z
SevenZip.arch.Test.ppmd.7z
SevenZip.arch.Test.rar
SevenZip.arch.Test.tar
SevenZip.arch.Test.txt.bz2
SevenZip.arch.Test.txt.gz
SevenZip.arch.Test.txt.xz
SevenZip.arch.Test.zip
costura.icsharpcode.sharpziplib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.splat.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.buffers.dll.compressed
[Authenticode]_35d2433a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Buffers.SR.resources
costura.system.diagnostics.diagnosticsource.dll.compressed
[Authenticode]_dfc1d433.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.DiagnosticSource.SR.resources
ILLink.Substitutions.xml
costura.system.diagnostics.eventlog.dll.compressed
[Authenticode]_85f42e61.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Diagnostics.EventLog.SR.resources
ILLink.Substitutions.xml
costura.system.io.pipelines.dll.compressed
[Authenticode]_7fb91b46.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Pipelines.SR.resources
ILLink.Substitutions.xml
costura.system.memory.dll.compressed
[Authenticode]_b502138b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Memory.SR.resources
costura.system.numerics.vectors.dll.compressed
[Authenticode]_488676cc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Numerics.Vectors.SR.resources
costura.system.runtime.dll.compressed
[Authenticode]_d8e8a703.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.unsafe.dll.compressed
[Authenticode]_04ff5a5b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.accesscontrol.dll.compressed
[Authenticode]_9a338e29.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.AccessControl.SR.resources
ILLink.Substitutions.xml
costura.system.security.cryptography.algorithms.dll.compressed
[Authenticode]_6dcbe3dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.encoding.dll.compressed
[Authenticode]_640c135d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
[Authenticode]_bb12d671.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
[Authenticode]_bc99acc3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.X509Certificates.SR.resources
costura.system.security.principal.windows.dll.compressed
[Authenticode]_2846fe66.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
ILLink.Substitutions.xml
costura.system.serviceprocess.servicecontroller.dll.compressed
[Authenticode]_65eeb668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encodings.web.dll.compressed
[Authenticode]_3300621d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Encodings.Web.SR.resources
ILLink.Substitutions.xml
costura.system.text.json.dll.compressed
[Authenticode]_f27e5967.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Text.Json.SR.resources
ILLink.Substitutions.xml
costura.system.threading.tasks.extensions.dll.compressed
[Authenticode]_02d85556.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
[Authenticode]_e10eb9d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.ValueTuple.SR.resources
costura.urlcombinelib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.websocket-sharp.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.repairtech.common.tools.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.contracts.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.exe.compressed
[Authenticode]_f6d4f6e0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Malicious
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
costura.costura.pdb.compressed
costura.system.runtime.interopservices.runtimeinformation.dll.compressed
[Authenticode]_0b5039bc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.InteropServices.RuntimeInformation.SR.resources
costura.microsoft.win32.primitives.dll.compressed
[Authenticode]_0eace63a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.netstandard.dll.compressed
[Authenticode]_0c342621.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.appcontext.dll.compressed
[Authenticode]_a5aef8f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.concurrent.dll.compressed
[Authenticode]_5e25c536.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.dll.compressed
[Authenticode]_9323bd82.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.nongeneric.dll.compressed
[Authenticode]_eecaa1f0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.collections.specialized.dll.compressed
[Authenticode]_642764aa.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.dll.compressed
[Authenticode]_c81486e4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.eventbasedasync.dll.compressed
[Authenticode]_080d1a4d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.primitives.dll.compressed
[Authenticode]_ccf0afa1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.componentmodel.typeconverter.dll.compressed
[Authenticode]_068bfba6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.console.dll.compressed
[Authenticode]_2b78bb38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.data.common.dll.compressed
[Authenticode]_8aac7822.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Data.Common.SR.resources
costura.system.diagnostics.contracts.dll.compressed
[Authenticode]_b51e7343.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.debug.dll.compressed
[Authenticode]_c3857e3a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.fileversioninfo.dll.compressed
[Authenticode]_d7308aba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.process.dll.compressed
[Authenticode]_03d7980b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.stacktrace.dll.compressed
[Authenticode]_222d4e88.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.textwritertracelistener.dll.compressed
[Authenticode]_24a5851e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tools.dll.compressed
[Authenticode]_ac4c7cab.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracesource.dll.compressed
[Authenticode]_4b8f538c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.diagnostics.tracing.dll.compressed
[Authenticode]_aad65d3b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.drawing.primitives.dll.compressed
[Authenticode]_acc8a69c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.dynamic.runtime.dll.compressed
[Authenticode]_0510daa9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.calendars.dll.compressed
[Authenticode]_be4c82a7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.dll.compressed
[Authenticode]_635c0d9d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.globalization.extensions.dll.compressed
[Authenticode]_1f7a856d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Globalization.Extensions.SR.resources
costura.system.io.compression.dll.compressed
[Authenticode]_699f4db4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.IO.Compression.SR.resources
costura.system.io.compression.zipfile.dll.compressed
[Authenticode]_54d9b491.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.dll.compressed
[Authenticode]_530654e8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.dll.compressed
[Authenticode]_58c1e0d1.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.driveinfo.dll.compressed
[Authenticode]_21751744.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.primitives.dll.compressed
[Authenticode]_4219af30.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.filesystem.watcher.dll.compressed
[Authenticode]_c52f1d42.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.isolatedstorage.dll.compressed
[Authenticode]_6269a131.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.memorymappedfiles.dll.compressed
[Authenticode]_6651444e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.pipes.dll.compressed
[Authenticode]_eb2dc0b4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.io.unmanagedmemorystream.dll.compressed
[Authenticode]_0d00f6b7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.dll.compressed
[Authenticode]_63eab726.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.expressions.dll.compressed
[Authenticode]_5aaeae34.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.parallel.dll.compressed
[Authenticode]_127235ca.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.linq.queryable.dll.compressed
[Authenticode]_1ec34698.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.http.dll.compressed
[Authenticode]_0d652b08.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Net.Http.SR.resources
costura.system.net.nameresolution.dll.compressed
[Authenticode]_a2bda845.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.networkinformation.dll.compressed
[Authenticode]_fd5380c5.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.ping.dll.compressed
[Authenticode]_2b3c76e6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.primitives.dll.compressed
[Authenticode]_f0102ad0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.requests.dll.compressed
[Authenticode]_33f96ed7.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.security.dll.compressed
[Authenticode]_2b71b5f6.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.sockets.dll.compressed
[Authenticode]_c249877a.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.webheadercollection.dll.compressed
[Authenticode]_fad07e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.client.dll.compressed
[Authenticode]_9bb58c63.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.net.websockets.dll.compressed
[Authenticode]_2732510c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.objectmodel.dll.compressed
[Authenticode]_8fe20591.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.dll.compressed
[Authenticode]_670bc0af.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.extensions.dll.compressed
[Authenticode]_81abba16.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.reflection.primitives.dll.compressed
[Authenticode]_188738dc.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.reader.dll.compressed
[Authenticode]_a0e0aace.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.resourcemanager.dll.compressed
[Authenticode]_6e5731cb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.resources.writer.dll.compressed
[Authenticode]_119ea529.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.compilerservices.visualc.dll.compressed
[Authenticode]_6e32766f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.dll.compressed
[Authenticode]_e520829d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.extensions.dll.compressed
[Authenticode]_99a87f52.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.handles.dll.compressed
[Authenticode]_ad62d44f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.interopservices.dll.compressed
[Authenticode]_c2ad3a24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.numerics.dll.compressed
[Authenticode]_73283d38.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.formatters.dll.compressed
[Authenticode]_ae937b14.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.json.dll.compressed
[Authenticode]_9c48f595.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.runtime.serialization.primitives.dll.compressed
[Authenticode]_f4a4d29e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Runtime.Serialization.Primitives.SR.resources
System.Runtime.Serialization.Primitives.Resources.System.Runtime.Serialization.Primitives.rd.xml
costura.system.runtime.serialization.xml.dll.compressed
[Authenticode]_9769b5c2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.claims.dll.compressed
[Authenticode]_3cd511d0.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.algorithms.dll.compressed
[Authenticode]_10a18c39.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Security.Cryptography.Algorithms.SR.resources
costura.system.security.cryptography.csp.dll.compressed
[Authenticode]_bf30f82d.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.encoding.dll.compressed
[Authenticode]_3080adeb.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.primitives.dll.compressed
[Authenticode]_24bf2532.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.cryptography.x509certificates.dll.compressed
[Authenticode]_bf8940c8.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.principal.dll.compressed
[Authenticode]_dd9ccd84.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.security.securestring.dll.compressed
[Authenticode]_ad433084.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.dll.compressed
[Authenticode]_d0773109.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.encoding.extensions.dll.compressed
[Authenticode]_ce6d8642.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.text.regularexpressions.dll.compressed
[Authenticode]_85efe86b.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.dll.compressed
[Authenticode]_ae7221ce.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.overlapped.dll.compressed
[Authenticode]_afabacc9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
FxResources.System.Threading.Overlapped.SR.resources
costura.system.threading.tasks.dll.compressed
[Authenticode]_0587f69f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.tasks.parallel.dll.compressed
[Authenticode]_f2e6a8e3.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.thread.dll.compressed
[Authenticode]_0cd7adcf.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.threadpool.dll.compressed
[Authenticode]_4cd1bac9.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.threading.timer.dll.compressed
[Authenticode]_4169e48c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.valuetuple.dll.compressed
[Authenticode]_a5fa7839.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.readerwriter.dll.compressed
[Authenticode]_ff80124f.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xdocument.dll.compressed
[Authenticode]_4fe05443.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmldocument.dll.compressed
[Authenticode]_67e85641.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xmlserializer.dll.compressed
[Authenticode]_20f5d261.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.dll.compressed
[Authenticode]_c5c34065.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.system.xml.xpath.xdocument.dll.compressed
[Authenticode]_13755e7c.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.metadata
Kabuto.Service.Resources.Module.psm1
Malicious
[PowerShell Command]
Malicious
costura.syncro.service.models.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.services.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.tools.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.resources
costura.syncro.uninstaller.exe.compressed
[Authenticode]_75921e10.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.resources
picLogo.Image
[NBF]root.Data
[NBF]root.Data-preview.png
Kabuto.Uninstaller.logos.syncro-logo.png
Kabuto.Uninstaller.logos.syncro-logo.png-preview.png
costura.syncro.service.configuration.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.syncro.service.interfaces.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.squirrel.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.nuget.squirrel.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
NuGet.CommonResources.resources
NuGet.Resources.AnalysisResources.resources
NuGet.Resources.NuGetResources.resources
NuGet.Authoring.nuspec.xsd
costura.phoenix.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.win32.taskscheduler.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Win32.TaskScheduler.Properties.Resources.resources
Microsoft.Win32.TaskScheduler.V1.TaskSchedulerV1Schema.xsd
Microsoft.Win32.TaskScheduler.TaskService.bmp
costura.interop.wuapilib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.netfwtypelib.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.interop.iwshruntimelibrary.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.deltacompressiondotnet.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.mono.cecil.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
costura.microsoft.web.xmltransform.dll.compressed
[Authenticode]_c5462488.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Microsoft.Web.XmlTransform.SR.resources
costura.en.syncro.uninstaller.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Uninstaller.FrmUninstall.en.resources
costura.ar-sa.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ar-SA.resources
costura.cs-cz.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.cs-CZ.resources
costura.da-dk.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.da-DK.resources
costura.de-de.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.de-DE.resources
costura.el-gr.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.el-GR.resources
costura.en.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.en.resources
costura.es-es.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.es-ES.resources
costura.fi-fi.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fi-FI.resources
costura.fr-fr.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.fr-FR.resources
costura.it-it.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.it-IT.resources
costura.ja-jp.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ja-JP.resources
costura.nl-nl.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.nl-NL.resources
costura.pt-br.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.pt-BR.resources
costura.ru-ru.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.ru-RU.resources
costura.sl-si.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
.Net Resources
Kabuto.Tools.Internationalization.Localization.sl-SI.resources
costura.zh-chs.syncro.tools.resources.dll.compressed
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Kabuto.Tools.Internationalization.Localization.zh-CHS.resources
costura.metadata
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙