Static | ZeroBOX

PE Compile Time

2056-01-18 12:14:04

PDB Path

BNMKLP987.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000445a4 0x00044600 7.92555099896
.rsrc 0x00048000 0x00029822 0x00029a00 5.01990236661
.reloc 0x00072000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00070e30 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00071298 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0007131c 0x0000031c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00071638 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
I?F.x!
t $Pd7
sOfDmu
E$x:{Q
1}r"v2)
hdJVe>
J^9C^o
whCJ$x
*svZBX
Zmll*p
Y\akAf
06'XR|0
"(.UGw
rc{, .T!
C2do%(t
a.l4in
N1:`S@
am/?)P
!.nI.`
A@V1s1
}'Y",Y
1r:\?G
d,y#K\
k4#"62
&*e/5n
`"\o.v
I/K3\
!jj?_R
| \sq
0eUj#`
..JC$p
=PG?f
^1^z>t
OYcFW>
?gl ?B
<Yi6)ak
4S!FHM
lA+xi+
Vmp"8kD
8^{GLSkY
E/Er)
xookh]
YMT@L7
bD=~.oNJ_r
doQqN3
+*&#`-J
eKN.So
-MQ\rP
NF2<}O
E=U-I3-
NC%J+qa
tw|b*
M5:t~S
m5qdWDW
*}_;7U6
''jn5W
i^'Oy
OCg,/L^
3`x V-\
*|@ @P
6U0x+o
?3AE!=
Pn{2d9Bt
/T((Vo
g)M.A.
#~=)P~
r!tC(*c<\
Ai-> 4:
"5~~&,
+}GOW%A|
lGF+\M
XlO 1"
q&rT9O
fsO<73
zJf'U$!
PK%h|F$A
0Uii<a
_OM4xw|
US;X6'
s`?sKA&Gz
d|A!a1H
I+cZXtW-Z
0+|S;X
0j?^ez
s;M[@k_
&;<h,JIm({
k9GtM$rF
WC%]jC
Sb:wRb
YJ&']l
i4fl#,
9|3*R4f
'6i?"{
YM]5$V@Cy
4m& NG
F[6}5Ecd
<OM"E)ohD(
J7g>%.
,:)1P\X
.u'W[np
/Q}Gcd
?ra{$|R4
ZtTj#{
?o`\vl
Ul+h`c
z6WoZT
,3x5:;
M5W+mO4
gGoEdV
/&Ojzl
s6?r/k3
7w0?]l
<.++BZYq
<-q5Zv2
ox9V{f
2$);m29
b4*/:%w
NCgiuv
7/U}Ze
N~8>\P
3g~W+c
4r-d.m9
%vJTFR
ZSLr!?
lj1_r(
\KrWix
BdG!V}
s@m2I
[qv=%P>
&O{b+<
lh8;fQ-
g#xb&`
\~6v);5
WT)JA+
0N4!i
qn>Met
.m||t[
G&<Y+d
P~Z)wU
h#nxAk9S
4$j>Ni*
rpY7 >
%voY`n
r>H~e[
&06O>h/H
D*jEb*
0ny|y>6
vIVFDR
CeH`"8Q;
*Apdph
.f13BJ
hl'gkxW
crlNx'
F=MD;W
a[xq53
Y::)Tp
;Sh<Do
s)H\.;
uVoL'P
C=8='EZ
V ~xDU_N
[C}W4[
`@<+YT~w
TQLDVG3s
C5J*w-
2!0`cF|
bOo6m"
m(}om$
)+Qz[>
UY_fSJ
L1R=@$g5
b;6{i>
#'J+m@W
'7"I-4s
j3(@^`Ra
Qy~/Cn0
K &D/
jX~U0N!U
QZ>,o(
6J):#0
hHSXXx+`vj
vonT:Z
$8%OVG
Hw+syU
ZFEa>BZ(
t\-Gck
WOX8s'
NV[L,gE
+BMg:s
4j6'}{
?`$_rY
`S8X[_
'@QFr3T
+w-n*F
-fB*Au{P
SU=%^)*BKx
RVp(pW
.!Ae|5
wO}XpD
fPoVq9
}IN,/H?
fcHADYG
&>p1-@
S=ep9@
O(Gi>Y%
Xsuvx}
,Hvf~\,
2Z0%K"
dk7I"I
Z/]0wF
rPh4P?
5($)T^
wp1?zCL
nR&we<
Na,bqs
|bq57l
lsVsA;
zv;Z}&
5wM%4?
aATt&y
M%L&WC
u&vn@/
T.%MS$
jJ\z[X,
542`abd
klm>aD
t|<y)t
5*E5ks9
O{4?p
>E)NEy
:JZ!;,]5t
5*s6,
k%M%};Yr:d
//$<aV
;_vg}Rb@
{lZ]cU
8_:np"
-")Pg}
MZ1lEZ
Z{Racy
#)f}IY
!r^/y?
~|veKKx
y.bZg
2cXMC
iEGdX"
.YF;f_
`\o>0Rg
5j5-P)
stjPIh0
3rXl!8
=&QuAO..y
u`6zZ
V3Xp}1j
V+Ojx6
lJ"vI1
/ZJNhP
dqg)8
#T,-}!v
^iB>8R
Jf;3AZ
*F|`doa9
o\Ql%t
zh-6\U
L}GS2M<C
16e.!lp
klPnyL
n]r0:f1u
RT+6kQ
FwU_)t
9LmU!Q
UiJ8~\
aV1_DC#
:PmH1@
rM/|N^
#6@\H6,+
%zXbM|
pY5Jt-
:(Te[\
oLR(*_^{f
O;t\!}
&EiB}F
nF>E0l
_6;.lj
iHS6Q
zPd3~e"
d9Tpnhua
m}u@kB
2i^*8R<D2
Y?D-Wp
{q}lPY.
)cM_~F
W,wlRF
Q/@<`=|a
~U!R`DX
?Y:*C{OvA
uULux-
`TJw0M
9g;!5s_
Q_/gB<R
4HD9)su
*>2zJd
)mgeZKj
uLWS<C
F#RZPS
C~wNk]
NOkvkW`V.RY
tY!I0p
?\`k
ZK_E@p
0V=*Mh3
8*Lo q
~>vZwn
,a2Q"^
,&yo'?
%e+O9E
oo0+o`
OQ-bta
>v=fv;
{![#Cb
dvrS]f
?Gy3|l%
kJfZ]k
RS1&zE]HBw
+9%dTO1
=tmY*>,
Dw(iy(^L
1CJZFc
j#jr]`u
@lJiRSyX
aT{n4
1)&<hn
wj1E|V
lhzA"J
='JjI(
`)|a{I
Y]0Wv5h
H92yagD
CQ<|AW:l
SSw,`tS&fX
,e+~z!
(~2?ZL
&PlMu@v
so\qc1Y
KKJD,
<'R$8dP{
9_])j;
t:~z0kRP
W|Yd7<
^qT~w.0
lJ#gX(n
UGUxt?
-c:jXl3
mxyLtn
vYrD%d
Dv[?F}
HB ;$H
A6{ XZ
)PMNUr
-)5|rR
/UI1G,
!9JtUM
id/m2;
yV5QP-
."(]}/
9qCp5yC
[~TYx_R;
q+C$>jX
~gqW6fg
t?K0$5
)t1.j6
9C|^CaE
@Pa3W{^@8
0`;hC|
`Y+C!+R
Epv$MV
{2Xvu~[
0nmq1
T`rVPk
|AQ]#>
3zmb,~
gwP1,\k
[0rdpz
G9@N%A
$XjFoeR
wifV,V
z`u[)
=K?b<
rF$__,9
.&un<<R
a,Nh'rZ
R7a\vyp
&z:,_N
M-9q,v
'VLm2@
&@T88fj
VXB'z}|
8w2~r H
lCOgf[
UEmZn~
!o=G:j
LZL2~S
/j2c`+
20nsv
NDj~<[N
YZ)TNAp
-}@^,G
#J-|Xa
+@H;w^
M)HEM
Wor(;p
Pw5GnR0
PFxBqR
MqjIn4JH
]s~=rX
B=i*t`
KRolK]@
aLBr&i
*D[SIEl
cz~:IU
&t)u&r
cygp0n
`Ez,N*)[%
^zh\e
QVLD5u
0yfq72
+E%U+
.U,vL=
hao*@
Jd["\5
<DwVVS
/^+S`F2P
z"(< 6
N%L3vp
I$5_t;z
75c,52's[Q/
^$:1`s$
s8`iH"-
d5,{%[
DvZipL!(5v*
^QJiGuH
hd)+@K
d693Qs
FQxbzGb4
[qr* O
~_SGQ_
!QT_9@
~;2IuZg
_*6>d(
2mTX;T
_P4OTh
Z qUP>a8
Z 247la8
NsZa8%
GPDa8;
5Z G@K
Z 08/Wa8
Z +E)a8
#xZ PW
Z ;,P_a8
2_&a8P
/{Ia8V
&q#aZa8
deyZ Z
!7Ss8k
?]T%&8/
_bj2
Z vF'ga+
_bY*
z-NyZ
q;Ma89
7vZ 7\=a+
)n%a8\
{2#a8j
RCsJZ
>\X8%&8
xx{mZ
&iC%8e
/u$8Za8%
Z_bX
+. @)q
LZ Ry~
Y_cX*
G bqlFa%
d'!Z \y
hq1%&80
1:I=
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
v4.0.30319
#Strings
UInt32
ToInt32
BNMKLP987
get_UTF8
<Module>
System.IO
mscorlib
Synchronized
Replace
distance
CreateInstance
defaultInstance
set_AutoScaleMode
IDisposable
RuntimeFieldHandle
RuntimeTypeHandle
GetTypeFromHandle
ValueType
GetType
GetElementType
get_Culture
set_Culture
resourceCulture
ApplicationSettingsBase
Dispose
Reverse
EditorBrowsableState
posState
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
GeneratedCodeAttribute
DebuggerNonUserCodeAttribute
DebuggableAttribute
EditorBrowsableAttribute
ComVisibleAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
TargetFrameworkAttribute
SuppressIldasmAttribute
AssemblyFileVersionAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
CompilationRelaxationsAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
ConfusedByAttribute
AssemblyCompanyAttribute
RuntimeCompatibilityAttribute
ReadByte
matchByte
prevByte
BNMKLP987.exe
inSize
set_ClientSize
outSize
windowSize
dictionarySize
Encoding
System.Runtime.Versioning
FromBase64String
GetString
disposing
System.Drawing
get_Length
System.ComponentModel
ContainerControl
inStream
outStream
MemoryStream
stream
program
System
resourceMan
Boolean
IsLittleEndian
System.Configuration
System.Globalization
System.Reflection
Intern
CultureInfo
InvokeMember
Binder
rangeDecoder
Buffer
get_ResourceManager
System.CodeDom.Compiler
IContainer
BitConverter
.cctor
System.Diagnostics
System.Runtime.InteropServices
System.Runtime.CompilerServices
System.Resources
BNMKLP987.Properties.Resources.resources
DebuggingModes
BNMKLP987.Properties
properties
numPosStates
BindingFlags
Settings
Equals
Models
NumBitLevels
numBitLevels
System.Windows.Forms
RuntimeHelpers
numTotalBits
numPosBits
numPrevBits
components
Object
get_Default
InitializeComponent
Convert
System.Text
set_Text
startIndex
InitializeArray
get_Assembly
GetCallingAssembly
GetExecutingAssembly
BlockCopy
Confuser.Core 1.6.0+447341964f
WrapNonExceptionThrows
BNMKLP987
Copyright
2023
$0f20373b-120c-4373-81d1-d5ee3f5d753b
1.0.0.0
.NETFramework,Version=v4.5
FrameworkDisplayName
.NET Framework 4.5
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
BNMKLP987.pdb
_CorExeMain
mscoree.dll
h9|k\h
kC1\95
e~9y)a
JdG=g.*
<W_J"cr?|[o
\1:$!:$
]m:;;]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
CompanyName
FileDescription
BNMKLP987
FileVersion
1.0.0.0
InternalName
BNMKLP987.exe
LegalCopyright
Copyright
2023
LegalTrademarks
OriginalFilename
BNMKLP987.exe
ProductName
BNMKLP987
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
No antivirus signatures available.
No IRMA results available.