.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
34acc4c0b61b5ce0b37c3589f97d1f23e6d84011a241e6f85683ee517ce786f1
Date...........: 2013-09-02
Family.........: Ploutus
File name......: ploutusservice.exe
File size......: 38.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/having-a-fiesta-with-ploutus/
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 128 0x80
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 3 3
TimeDateStamp: "2013-08-26 13:54:34"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 8.0
SizeOfCode: 36864 0x9000
SizeOfInitializedData: 2048 0x800
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 44958 0xaf9e
BaseOfCode: 8192 0x2000
BaseOfData: 0 0
ImageBase: 4194304 0x400000
SectionAlignment: 8192 0x2000
FileAlignment: 512 0x200
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 65536 0x10000
SizeOfHeaders: 512 0x200
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 34112 0x8540 DYNAMIC_BASE, NX_COMPAT, NO_SEH
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x af48 size:0x 53
RESOURCE rva:0x c000 size:0x 600
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x e000 size:0x c
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 2000 size:0x 8
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 2008 size:0x 48
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 2000 8fa4 9000 200 0 0 0 0 60000020 R-X CODE
.rsrc c000 600 600 9200 0 0 0 0 40000040 R-- IDATA
.reloc e000 c 200 9800 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x92a0 0 0 736 VERSION #1
0x9580 0 0 490 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
mscoree.dll 0 _CorExeMain
=== VERSION INFO ===
# VS_FIXEDFILEINFO:
FileVersion : 1.0.0.0
ProductVersion : 1.0.0.0
StrucVersion : 0x10000
FileFlagsMask : 0x3f
FileFlags : 0
FileOS : 4
FileType : 1
FileSubtype : 0
VarFileInfo : [ 0x0, 0x4b0 ]
# StringTable 000004b0:
FileDescription : "PloutusService"
FileVersion : "1.0.0.0"
InternalName : "PloutusService.exe"
LegalCopyright : "Copyright \u00A9 2013"
OriginalFilename : "PloutusService.exe"
ProductName : "PloutusService"
ProductVersion : "1.0.0.0"
Assembly Version : "1.0.0.0"
=== Packer / Compiler ===
MS Visual C# / Basic .NET
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
000000000178 000000400178 0 .text
0000000001A0 0000004001A0 0 .rsrc
0000000001C7 0000004001C7 0 @.reloc
0000000002A1 0000004020A1 0 XYXa a
000000000382 000000402182 0 1<aXXa
0000000003C0 0000004021C0 0 ,O s
0000000006F2 0000004024F2 0 'a u]E
00000000071E 00000040251E 0 F@ Gc
000000000724 000000402524 0 7YYXaj!
000000000750 000000402550 0 !J0xx
0000000008A5 0000004026A5 0 aaYaYX!
000000000C12 000000402A12 0 :YaX
000000000C34 000000402A34 0 aaaaX
000000000C46 000000402A46 0 &PX h
000000000C4E 000000402A4E 0 XaYYY Z
000000000C8E 000000402A8E 0 ajYYYYaY L
000000000CCD 000000402ACD 0 Y <a9
000000000CDD 000000402ADD 0 8XX s+
000000000CEE 000000402AEE 0 iXaYd
000000000D22 000000402B22 0 ,a 7s
000000000D39 000000402B39 0 qYaXXYX4
000000000DF5 000000402BF5 0 woXX
000000000DFE 000000402BFE 0 M<ZG
000000000E1D 000000402C1D 0 |aXYaXXYaaX}
000000000E7C 000000402C7C 0 c5XYX
000000000F61 000000402D61 0 RiaY
000000000F67 000000402D67 0 M49 y*
000000000F79 000000402D79 0 XaXa
000000000FA0 000000402DA0 0 /zzY
000000000FAD 000000402DAD 0 <XaaX t
000000000FD6 000000402DD6 0 TYaX
000000000FE3 000000402DE3 0 aXXY
000000000FF7 000000402DF7 0 aXaaYX_b
000000001054 000000402E54 0 J '{{+YX h
00000000106E 000000402E6E 0 /!YaXaaX
000000001095 000000402E95 0 YXYXa
00000000109C 000000402E9C 0 ndv B
0000000010B4 000000402EB4 0 DaYY_bj
000000001127 000000402F27 0 Qv XYYX_bY*
000000001198 000000402F98 0 %0Xa /c
0000000011B9 000000402FB9 0 XYXa
0000000011D4 000000402FD4 0 *e6a @
0000000011E0 000000402FE0 0 F0XXY
0000000011ED 000000402FED 0 '*Xa
000000001211 000000403011 0 YaaaaY
00000000127E 00000040307E 0 5XX D
00000000129F 00000040309F 0 >cLa 9
0000000012A7 0000004030A7 0 =YYX c
0000000012CE 0000004030CE 0 UYaXaYaX_b
00000000135D 00000040315D 0 @:Xx [@
00000000138F 00000040318F 0 qhX N
0000000013A0 0000004031A0 0 g0aaX
000000001455 000000403255 0 R0Y !8
000000001472 000000403272 0 0aXa
0000000014A5 0000004032A5 0 :YX d
0000000014B1 0000004032B1 0 AXaYXXa(#
000000001509 000000403309 0 zXXa
000000001515 000000403315 0 ( X )>
00000000152B 00000040332B 0 _XXXYY
File pos Mem pos ID Text
======== ======= == ====
000000001554 000000403354 0 dvXYXXX B
000000001564 000000403364 0 2YY_b
0000000016B0 0000004034B0 0 SfaXaX
0000000016D6 0000004034D6 0 KaX "
000000001AC2 0000004038C2 0 YYY_bX
000000001CAF 000000403AAF 0 |Z b\bkaa_b
000000001CEF 000000403AEF 0 m/X M
000000001D0D 000000403B0D 0 XYXa_b
000000001D7C 000000403B7C 0 FYX w<J
000000001D8D 000000403B8D 0 &XaX
000000001D95 000000403B95 0 laaX_b
000000001DE3 000000403BE3 0 na Pr!
000000001DF0 000000403BF0 0 |'zGXa
000000001DFF 000000403BFF 0 "gXY_b
000000001E1F 000000403C1F 0 yWb "
000000001E2F 000000403C2F 0 bWaX 6QXWY f8
000000001E42 000000403C42 0 ]XXaYYX
000000001E7E 000000403C7E 0 LAXaXX
000000001E97 000000403C97 0 s(YX b
000000001EB1 000000403CB1 0 XaXa_cX*
000000001F15 000000403D15 0 8MY v
000000001F31 000000403D31 0 H'YX
000000001F3E 000000403D3E 0 &YYY Y
000000001F49 000000403D49 0 "S3X
000000001F61 000000403D61 0 DaYX
000000001F95 000000403D95 0 ! XYX
000000001FA6 000000403DA6 0 E?l S]rx
000000001FB3 000000403DB3 0 YaaXa [D
000000001FC1 000000403DC1 0 HnXaa
000000002024 000000403E24 0 7?YY
00000000206B 000000403E6B 0 1YYX
000000002074 000000403E74 0 eZ{SXYa
000000002095 000000403E95 0 *XYXXa
0000000020D9 000000403ED9 0 +a y$
0000000020DF 000000403EDF 0 W "eQ
0000000020FB 000000403EFB 0 :OYX
000000002112 000000403F12 0 oXaXXY
000000002139 000000403F39 0 ;iIX 6
000000002153 000000403F53 0 YaXaYYY
0000000021DF 000000403FDF 0 2~{{X ?
000000002218 000000404018 0 aXYYX
000000002227 000000404027 0 y[ kP
00000000223A 00000040403A 0 2AOaaa
00000000224D 00000040404D 0 aYaYD
000000002270 000000404070 0 /,sZ$P
0000000024DF 0000004042DF 0 ;"W;ND
000000002661 000000404461 0 >-=:,
00000000275B 00000040455B 0 H9EpA
0000000027D6 0000004045D6 0 &tmf
0000000027F9 0000004045F9 0 wwgpBJV
000000002808 000000404608 0 EFJ %
000000002914 000000404714 0 7iBA}
0000000029B7 0000004047B7 0 AK18'
000000002B51 000000404951 0 0T6as0
000000002BA2 0000004049A2 0 Zo D\
000000002BC5 0000004049C5 0 utqTF
000000002E32 000000404C32 0 {KE2T
000000002F9D 000000404D9D 0 UTVz?
000000002FAF 000000404DAF 0 : ?\-
000000002FFE 000000404DFE 0 LRq31
File pos Mem pos ID Text
======== ======= == ====
000000003051 000000404E51 0 OGt@H
000000003072 000000404E72 0 I\@O3U_
000000003174 000000404F74 0 /y#3s
0000000031FD 000000404FFD 0 R@p"d
000000003254 000000405054 0 d70Wx
000000003299 000000405099 0 dmr'=a #
0000000033B4 0000004051B4 0 B?9.
0000000033E9 0000004051E9 0 Y\_ts2
000000003402 000000405202 0 #NyX<S
00000000346A 00000040526A 0 cecJpce
00000000376E 00000040556E 0 ;l{uqioe-
00000000390D 00000040570D 0 U{h8|
000000003D06 000000405B06 0 ck}ob
000000003D1C 000000405B1C 0 <?%|R
000000003D4C 000000405B4C 0 rao4v
000000003D59 000000405B59 0 XV'v9D
000000003F08 000000405D08 0 e;PKO
000000004056 000000405E56 0 1YjxD
0000000040DC 000000405EDC 0 FDsp{n
000000004293 000000406093 0 y4Pew
0000000042BC 0000004060BC 0 XUM4=
0000000042E1 0000004060E1 0 oO#Y!)
000000004330 000000406130 0 &'TkO
00000000439F 00000040619F 0 !\>34
000000004402 000000406202 0 ,u'yl
0000000044BC 0000004062BC 0 Pn2M
000000004515 000000406315 0 ( Lq;
0000000045F2 0000004063F2 0 LX\!,
000000004661 000000406461 0 >C(G/&<%N
00000000468B 00000040648B 0 MwU,s
000000004797 000000406597 0 hnMFW
000000004A0C 00000040680C 0 C84h\
000000004A22 000000406822 0 }8GO
000000004CC8 000000406AC8 0 BkRM4
000000004E07 000000406C07 0 [iEUp
000000004FDE 000000406DDE 0 tCmYp
0000000050BC 000000406EBC 0 qb+.<
0000000050C9 000000406EC9 0 ~>ZOs
000000005160 000000406F60 0 w5#zzO
000000005483 000000407283 0 nI26.R
00000000553A 00000040733A 0 '[,;&
000000005845 000000407645 0 ?;+yj
0000000058F2 0000004076F2 0 ZN'+l
00000000592A 00000040772A 0 edS<m
000000005D75 000000407B75 0 dXQg39
000000005E42 000000407C42 0 z\6L-T=B
000000006057 000000407E57 0 0B56H
00000000645B 00000040825B 0 s_\@Q
0000000065A8 0000004083A8 0 \|<kT
000000006693 000000408493 0 5T#XmK@
0000000066C2 0000004084C2 0 ;/f=D"
000000006759 000000408559 0 3$C!|
0000000068CA 0000004086CA 0 3C[_
000000006909 000000408709 0 30}"-
000000006918 000000408718 0 x;lS0
0000000069AE 0000004087AE 0 PU7W7
000000006AAB 0000004088AB 0 44v-C
000000006AB2 0000004088B2 0 YL$9A
000000006BB2 0000004089B2 0 >P0VG
000000006C59 000000408A59 0 ZYT}
File pos Mem pos ID Text
======== ======= == ====
000000006D64 000000408B64 0 ]oK=T
000000006DD6 000000408BD6 0 z55>D
000000006E09 000000408C09 0 (% V'A
000000006E2C 000000408C2C 0 qsFI4
000000006E59 000000408C59 0 9'4bH
000000006F31 000000408D31 0 pi7P0
000000006F9B 000000408D9B 0 0EJ !
000000006FBE 000000408DBE 0 5xAm>k
000000006FD9 000000408DD9 0 V%3[n
0000000071AE 000000408FAE 0 #c "V
000000007239 000000409039 0 F1 &t
0000000073B4 0000004091B4 0 NME}1j
00000000788A 00000040968A 0 &tsYb
0000000078CA 0000004096CA 0 MYf.h
0000000078E6 0000004096E6 0 }GZ6{_
000000007A3F 00000040983F 0 Bgf!Y
000000007B66 000000409966 0 C|gk*
000000007B9A 00000040999A 0 N4mt8
000000007BA7 0000004099A7 0 ([P:X
000000007CB3 000000409AB3 0 #BSJB
000000007CC4 000000409AC4 0 v2.0.50727
000000007CE8 000000409AE8 0 #Strings
000000007D08 000000409B08 0 #GUID
000000007D18 000000409B18 0 #Blob
0000000085D1 00000040A3D1 0 PloutusService.exe
0000000085E4 00000040A3E4 0 PloutusService
0000000085F3 00000040A3F3 0 mscorlib
000000008615 00000040A415 0 <Module>
00000000861E 00000040A41E 0 .cctor
000000008625 00000040A425 0 CompressShell
000000008633 00000040A433 0 Object
00000000863A 00000040A43A 0 System
00000000864D 00000040A44D 0 Module
000000008654 00000040A454 0 System.Reflection
000000008666 00000040A466 0 GetLenToPosState
00000000867B 00000040A47B 0 Assembly
000000008684 00000040A484 0 Stream
00000000868B 00000040A48B 0 System.IO
000000008695 00000040A495 0 BinaryReader
0000000086A2 00000040A4A2 0 Encoding
0000000086AB 00000040A4AB 0 System.Text
0000000086B7 00000040A4B7 0 get_UTF8
0000000086C0 00000040A4C0 0 ResolveEventArgs
0000000086D1 00000040A4D1 0 get_Name
0000000086DA 00000040A4DA 0 GetBytes
0000000086E3 00000040A4E3 0 GetString
0000000086F2 00000040A4F2 0 GetTypeFromHandle
000000008704 00000040A504 0 RuntimeTypeHandle
000000008716 00000040A516 0 get_Assembly
000000008723 00000040A523 0 GetManifestResourceStream
00000000873D 00000040A53D 0 .ctor
000000008743 00000040A543 0 get_Length
00000000874E 00000040A54E 0 ReadBytes
000000008758 00000040A558 0 IDisposable
000000008764 00000040A564 0 Dispose
000000008776 00000040A576 0 Buffer
00000000877D 00000040A57D 0 BlockCopy
000000008787 00000040A587 0 Array
00000000878D 00000040A58D 0 DecryptAsm
000000008798 00000040A598 0 sender
File pos Mem pos ID Text
======== ======= == ====
0000000087A1 00000040A5A1 0 ResolveResource
0000000087B1 00000040A5B1 0 CryptoStream
0000000087BE 00000040A5BE 0 System.Security.Cryptography
0000000087DB 00000040A5DB 0 RijndaelManaged
0000000087EB 00000040A5EB 0 MemoryStream
0000000087F8 00000040A5F8 0 ReadInt32
000000008802 00000040A602 0 SymmetricAlgorithm
000000008815 00000040A615 0 CreateDecryptor
000000008825 00000040A625 0 ICryptoTransform
000000008836 00000040A636 0 CryptoStreamMode
00000000884C 00000040A64C 0 BitConverter
000000008859 00000040A659 0 ToUInt32
000000008862 00000040A662 0 ReadByte
00000000886B 00000040A66B 0 Exception
000000008875 00000040A675 0 Decrypt
000000008881 00000040A681 0 modPow
000000008894 00000040A694 0 MethodBase
00000000889F 00000040A69F 0 GetEntryAssembly
0000000088B0 00000040A6B0 0 LoadModule
0000000088BB 00000040A6BB 0 AppDomain
0000000088C5 00000040A6C5 0 get_CurrentDomain
0000000088D7 00000040A6D7 0 ResolveEventHandler
0000000088EB 00000040A6EB 0 add_AssemblyResolve
0000000088FF 00000040A6FF 0 ResolveMethod
00000000890D 00000040A70D 0 GetParameters
00000000891B 00000040A71B 0 ParameterInfo
000000008929 00000040A729 0 Invoke
000000008930 00000040A730 0 Int32
000000008940 00000040A740 0 STAThreadAttribute
000000008953 00000040A753 0 State
000000008959 00000040A759 0 ValueType
000000008963 00000040A763 0 Index
00000000896E 00000040A76E 0 UpdateChar
000000008979 00000040A779 0 UpdateMatch
000000008985 00000040A785 0 UpdateRep
00000000898F 00000040A78F 0 UpdateShortRep
00000000899E 00000040A79E 0 IsCharState
0000000089AA 00000040A7AA 0 OutWindow
0000000089B4 00000040A7B4 0 _buffer
0000000089C1 00000040A7C1 0 _windowSize
0000000089CD 00000040A7CD 0 _streamPos
0000000089D8 00000040A7D8 0 _stream
0000000089E0 00000040A7E0 0 Create
0000000089E7 00000040A7E7 0 windowSize
0000000089F2 00000040A7F2 0 stream
0000000089F9 00000040A7F9 0 solid
0000000089FF 00000040A7FF 0 ReleaseStream
000000008A0D 00000040A80D 0 Write
000000008A13 00000040A813 0 Flush
000000008A19 00000040A819 0 CopyBlock
000000008A23 00000040A823 0 distance
000000008A2C 00000040A82C 0 PutByte
000000008A36 00000040A836 0 GetByte
000000008A3E 00000040A83E 0 Decoder
000000008A46 00000040A846 0 Range
000000008A51 00000040A851 0 Normalize
000000008A5B 00000040A85B 0 DecodeDirectBits
000000008A6C 00000040A86C 0 numTotalBits
000000008A79 00000040A879 0 BitDecoder
000000008A89 00000040A889 0 Decode
File pos Mem pos ID Text
======== ======= == ====
000000008A90 00000040A890 0 rangeDecoder
000000008A9D 00000040A89D 0 BitTreeDecoder
000000008AAC 00000040A8AC 0 Models
000000008AB3 00000040A8B3 0 NumBitLevels
000000008AC0 00000040A8C0 0 numBitLevels
000000008ACD 00000040A8CD 0 ReverseDecode
000000008ADB 00000040A8DB 0 startIndex
000000008AE6 00000040A8E6 0 LzmaDecoder
000000008AF2 00000040A8F2 0 m_OutWindow
000000008AFE 00000040A8FE 0 m_RangeDecoder
000000008B0D 00000040A90D 0 m_IsMatchDecoders
000000008B1F 00000040A91F 0 m_IsRepDecoders
000000008B2F 00000040A92F 0 m_IsRepG0Decoders
000000008B41 00000040A941 0 m_IsRepG1Decoders
000000008B53 00000040A953 0 m_IsRepG2Decoders
000000008B65 00000040A965 0 m_IsRep0LongDecoders
000000008B7A 00000040A97A 0 m_PosSlotDecoder
000000008B8B 00000040A98B 0 m_PosDecoders
000000008B99 00000040A999 0 m_PosAlignDecoder
000000008BAB 00000040A9AB 0 m_LenDecoder
000000008BB8 00000040A9B8 0 m_RepLenDecoder
000000008BC8 00000040A9C8 0 m_LiteralDecoder
000000008BD9 00000040A9D9 0 m_DictionarySize
000000008BEA 00000040A9EA 0 m_DictionarySizeCheck
000000008C00 00000040AA00 0 m_PosStateMask
000000008C0F 00000040AA0F 0 _solid
000000008C1F 00000040AA1F 0 SetDictionarySize
000000008C31 00000040AA31 0 dictionarySize
000000008C40 00000040AA40 0 SetLiteralProperties
000000008C5B 00000040AA5B 0 SetPosBitsProperties
000000008C73 00000040AA73 0 inStream
000000008C7C 00000040AA7C 0 outStream
000000008C86 00000040AA86 0 inSize
000000008C8D 00000040AA8D 0 outSize
000000008C95 00000040AA95 0 SetDecoderProperties
000000008CAA 00000040AAAA 0 properties
000000008CB5 00000040AAB5 0 LenDecoder
000000008CC0 00000040AAC0 0 m_Choice
000000008CC9 00000040AAC9 0 m_Choice2
000000008CD3 00000040AAD3 0 m_LowCoder
000000008CDE 00000040AADE 0 m_MidCoder
000000008CE9 00000040AAE9 0 m_HighCoder
000000008CF5 00000040AAF5 0 m_NumPosStates
000000008D04 00000040AB04 0 numPosStates
000000008D11 00000040AB11 0 posState
000000008D1A 00000040AB1A 0 LiteralDecoder
000000008D29 00000040AB29 0 m_Coders
000000008D32 00000040AB32 0 m_NumPrevBits
000000008D40 00000040AB40 0 m_NumPosBits
000000008D4D 00000040AB4D 0 m_PosMask
000000008D57 00000040AB57 0 numPosBits
000000008D62 00000040AB62 0 numPrevBits
000000008D6E 00000040AB6E 0 GetState
000000008D7B 00000040AB7B 0 prevByte
000000008D84 00000040AB84 0 DecodeNormal
000000008D91 00000040AB91 0 DecodeWithMatchByte
000000008DA5 00000040ABA5 0 matchByte
000000008DAF 00000040ABAF 0 Decoder2
000000008DB8 00000040ABB8 0 m_Decoders
000000008DC3 00000040ABC3 0 ConfusedByAttribute
File pos Mem pos ID Text
======== ======= == ====
000000008DD7 00000040ABD7 0 Attribute
000000008DE1 00000040ABE1 0 ___.netmodule
000000008DEF 00000040ABEF 0 PloutusService.NCR.resources
000000008E0C 00000040AC0C 0 PloutusService.Properties.Resources.resources
000000008E3A 00000040AC3A 0 PloutusService.ProjectInstaller.resources
00000000911E 00000040AF1E 0 Confuser v1.9.0.0
000000009182 00000040AF82 0 _CorExeMain
00000000918E 00000040AF8E 0 mscoree.dll
000000009583 00000040C383 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
0000000095BC 00000040C3BC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000009607 00000040C407 0 <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
000000009649 00000040C449 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
000000009681 00000040C481 0 <security>
000000009691 00000040C491 0 <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
0000000096D7 00000040C4D7 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
00000000971E 00000040C51E 0 </requestedPrivileges>
00000000973C 00000040C53C 0 </security>
00000000974D 00000040C54D 0 </trustInfo>
00000000975D 00000040C55D 0 </assembly>
000000008E67 00000040AC67 0 Can't Read 1
000000008E81 00000040AC81 0 ___.netmodule
0000000092A6 00000040C0A6 0 VS_VERSION_INFO
000000009302 00000040C102 0 VarFileInfo
000000009322 00000040C122 0 Translation
000000009346 00000040C146 0 StringFileInfo
00000000936A 00000040C16A 0 000004b0
000000009382 00000040C182 0 FileDescription
0000000093A4 00000040C1A4 0 PloutusService
0000000093CA 00000040C1CA 0 FileVersion
0000000093E4 00000040C1E4 0 1.0.0.0
0000000093FA 00000040C1FA 0 InternalName
000000009414 00000040C214 0 PloutusService.exe
000000009442 00000040C242 0 LegalCopyright
000000009476 00000040C276 0 2013
00000000948A 00000040C28A 0 OriginalFilename
0000000094AC 00000040C2AC 0 PloutusService.exe
0000000094DA 00000040C2DA 0 ProductName
0000000094F4 00000040C2F4 0 PloutusService
00000000951A 00000040C31A 0 ProductVersion
000000009538 00000040C338 0 1.0.0.0
00000000954E 00000040C34E 0 Assembly Version
000000009570 00000040C370 0 1.0.0.0
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
000000000178 000000400178 0 .text
0000000001A0 0000004001A0 0 .rsrc
0000000001C7 0000004001C7 0 @.reloc
0000000002A1 0000004020A1 0 XYXa a
000000000382 000000402182 0 1<aXXa
0000000003C0 0000004021C0 0 ,O s
0000000006F2 0000004024F2 0 'a u]E
00000000071E 00000040251E 0 F@ Gc
000000000724 000000402524 0 7YYXaj!
000000000750 000000402550 0 !J0xx
0000000008A5 0000004026A5 0 aaYaYX!
000000000C12 000000402A12 0 :YaX
000000000C34 000000402A34 0 aaaaX
000000000C46 000000402A46 0 &PX h
000000000C4E 000000402A4E 0 XaYYY Z
000000000C8E 000000402A8E 0 ajYYYYaY L
000000000CCD 000000402ACD 0 Y <a9
File pos Mem pos ID Text
======== ======= == ====
000000000CDD 000000402ADD 0 8XX s+
000000000CEE 000000402AEE 0 iXaYd
000000000D22 000000402B22 0 ,a 7s
000000000D39 000000402B39 0 qYaXXYX4
000000000DF5 000000402BF5 0 woXX
000000000DFE 000000402BFE 0 M<ZG
000000000E1D 000000402C1D 0 |aXYaXXYaaX}
000000000E7C 000000402C7C 0 c5XYX
000000000F61 000000402D61 0 RiaY
000000000F67 000000402D67 0 M49 y*
000000000F79 000000402D79 0 XaXa
000000000FA0 000000402DA0 0 /zzY
000000000FAD 000000402DAD 0 <XaaX t
000000000FD6 000000402DD6 0 TYaX
000000000FE3 000000402DE3 0 aXXY
000000000FF7 000000402DF7 0 aXaaYX_b
000000001054 000000402E54 0 J '{{+YX h
00000000106E 000000402E6E 0 /!YaXaaX
000000001095 000000402E95 0 YXYXa
00000000109C 000000402E9C 0 ndv B
0000000010B4 000000402EB4 0 DaYY_bj
000000001127 000000402F27 0 Qv XYYX_bY*
000000001198 000000402F98 0 %0Xa /c
0000000011B9 000000402FB9 0 XYXa
0000000011D4 000000402FD4 0 *e6a @
0000000011E0 000000402FE0 0 F0XXY
0000000011ED 000000402FED 0 '*Xa
000000001211 000000403011 0 YaaaaY
00000000127E 00000040307E 0 5XX D
00000000129F 00000040309F 0 >cLa 9
0000000012A7 0000004030A7 0 =YYX c
0000000012CE 0000004030CE 0 UYaXaYaX_b
00000000135D 00000040315D 0 @:Xx [@
00000000138F 00000040318F 0 qhX N
0000000013A0 0000004031A0 0 g0aaX
000000001455 000000403255 0 R0Y !8
000000001472 000000403272 0 0aXa
0000000014A5 0000004032A5 0 :YX d
0000000014B1 0000004032B1 0 AXaYXXa(#
000000001509 000000403309 0 zXXa
000000001515 000000403315 0 ( X )>
00000000152B 00000040332B 0 _XXXYY
000000001554 000000403354 0 dvXYXXX B
000000001564 000000403364 0 2YY_b
0000000016B0 0000004034B0 0 SfaXaX
0000000016D6 0000004034D6 0 KaX "
000000001AC2 0000004038C2 0 YYY_bX
000000001CAF 000000403AAF 0 |Z b\bkaa_b
000000001CEF 000000403AEF 0 m/X M
000000001D0D 000000403B0D 0 XYXa_b
000000001D7C 000000403B7C 0 FYX w<J
000000001D8D 000000403B8D 0 &XaX
000000001D95 000000403B95 0 laaX_b
000000001DE3 000000403BE3 0 na Pr!
000000001DF0 000000403BF0 0 |'zGXa
000000001DFF 000000403BFF 0 "gXY_b
000000001E1F 000000403C1F 0 yWb "
000000001E2F 000000403C2F 0 bWaX 6QXWY f8
000000001E42 000000403C42 0 ]XXaYYX
000000001E7E 000000403C7E 0 LAXaXX
File pos Mem pos ID Text
======== ======= == ====
000000001E97 000000403C97 0 s(YX b
000000001EB1 000000403CB1 0 XaXa_cX*
000000001F15 000000403D15 0 8MY v
000000001F31 000000403D31 0 H'YX
000000001F3E 000000403D3E 0 &YYY Y
000000001F49 000000403D49 0 "S3X
000000001F61 000000403D61 0 DaYX
000000001F95 000000403D95 0 ! XYX
000000001FA6 000000403DA6 0 E?l S]rx
000000001FB3 000000403DB3 0 YaaXa [D
000000001FC1 000000403DC1 0 HnXaa
000000002024 000000403E24 0 7?YY
00000000206B 000000403E6B 0 1YYX
000000002074 000000403E74 0 eZ{SXYa
000000002095 000000403E95 0 *XYXXa
0000000020D9 000000403ED9 0 +a y$
0000000020DF 000000403EDF 0 W "eQ
0000000020FB 000000403EFB 0 :OYX
000000002112 000000403F12 0 oXaXXY
000000002139 000000403F39 0 ;iIX 6
000000002153 000000403F53 0 YaXaYYY
0000000021DF 000000403FDF 0 2~{{X ?
000000002218 000000404018 0 aXYYX
000000002227 000000404027 0 y[ kP
00000000223A 00000040403A 0 2AOaaa
00000000224D 00000040404D 0 aYaYD
000000002270 000000404070 0 /,sZ$P
0000000024DF 0000004042DF 0 ;"W;ND
000000002661 000000404461 0 >-=:,
00000000275B 00000040455B 0 H9EpA
0000000027D6 0000004045D6 0 &tmf
0000000027F9 0000004045F9 0 wwgpBJV
000000002808 000000404608 0 EFJ %
000000002914 000000404714 0 7iBA}
0000000029B7 0000004047B7 0 AK18'
000000002B51 000000404951 0 0T6as0
000000002BA2 0000004049A2 0 Zo D\
000000002BC5 0000004049C5 0 utqTF
000000002E32 000000404C32 0 {KE2T
000000002F9D 000000404D9D 0 UTVz?
000000002FAF 000000404DAF 0 : ?\-
000000002FFE 000000404DFE 0 LRq31
000000003051 000000404E51 0 OGt@H
000000003072 000000404E72 0 I\@O3U_
000000003174 000000404F74 0 /y#3s
0000000031FD 000000404FFD 0 R@p"d
000000003254 000000405054 0 d70Wx
000000003299 000000405099 0 dmr'=a #
0000000033B4 0000004051B4 0 B?9.
0000000033E9 0000004051E9 0 Y\_ts2
000000003402 000000405202 0 #NyX<S
00000000346A 00000040526A 0 cecJpce
00000000376E 00000040556E 0 ;l{uqioe-
00000000390D 00000040570D 0 U{h8|
000000003D06 000000405B06 0 ck}ob
000000003D1C 000000405B1C 0 <?%|R
000000003D4C 000000405B4C 0 rao4v
000000003D59 000000405B59 0 XV'v9D
000000003F08 000000405D08 0 e;PKO
000000004056 000000405E56 0 1YjxD
File pos Mem pos ID Text
======== ======= == ====
0000000040DC 000000405EDC 0 FDsp{n
000000004293 000000406093 0 y4Pew
0000000042BC 0000004060BC 0 XUM4=
0000000042E1 0000004060E1 0 oO#Y!)
000000004330 000000406130 0 &'TkO
00000000439F 00000040619F 0 !\>34
000000004402 000000406202 0 ,u'yl
0000000044BC 0000004062BC 0 Pn2M
000000004515 000000406315 0 ( Lq;
0000000045F2 0000004063F2 0 LX\!,
000000004661 000000406461 0 >C(G/&<%N
00000000468B 00000040648B 0 MwU,s
000000004797 000000406597 0 hnMFW
000000004A0C 00000040680C 0 C84h\
000000004A22 000000406822 0 }8GO
000000004CC8 000000406AC8 0 BkRM4
000000004E07 000000406C07 0 [iEUp
000000004FDE 000000406DDE 0 tCmYp
0000000050BC 000000406EBC 0 qb+.<
0000000050C9 000000406EC9 0 ~>ZOs
000000005160 000000406F60 0 w5#zzO
000000005483 000000407283 0 nI26.R
00000000553A 00000040733A 0 '[,;&
000000005845 000000407645 0 ?;+yj
0000000058F2 0000004076F2 0 ZN'+l
00000000592A 00000040772A 0 edS<m
000000005D75 000000407B75 0 dXQg39
000000005E42 000000407C42 0 z\6L-T=B
000000006057 000000407E57 0 0B56H
00000000645B 00000040825B 0 s_\@Q
0000000065A8 0000004083A8 0 \|<kT
000000006693 000000408493 0 5T#XmK@
0000000066C2 0000004084C2 0 ;/f=D"
000000006759 000000408559 0 3$C!|
0000000068CA 0000004086CA 0 3C[_
000000006909 000000408709 0 30}"-
000000006918 000000408718 0 x;lS0
0000000069AE 0000004087AE 0 PU7W7
000000006AAB 0000004088AB 0 44v-C
000000006AB2 0000004088B2 0 YL$9A
000000006BB2 0000004089B2 0 >P0VG
000000006C59 000000408A59 0 ZYT}
000000006D64 000000408B64 0 ]oK=T
000000006DD6 000000408BD6 0 z55>D
000000006E09 000000408C09 0 (% V'A
000000006E2C 000000408C2C 0 qsFI4
000000006E59 000000408C59 0 9'4bH
000000006F31 000000408D31 0 pi7P0
000000006F9B 000000408D9B 0 0EJ !
000000006FBE 000000408DBE 0 5xAm>k
000000006FD9 000000408DD9 0 V%3[n
0000000071AE 000000408FAE 0 #c "V
000000007239 000000409039 0 F1 &t
0000000073B4 0000004091B4 0 NME}1j
00000000788A 00000040968A 0 &tsYb
0000000078CA 0000004096CA 0 MYf.h
0000000078E6 0000004096E6 0 }GZ6{_
000000007A3F 00000040983F 0 Bgf!Y
000000007B66 000000409966 0 C|gk*
000000007B9A 00000040999A 0 N4mt8
File pos Mem pos ID Text
======== ======= == ====
000000007BA7 0000004099A7 0 ([P:X
000000007CB3 000000409AB3 0 #BSJB
000000007CC4 000000409AC4 0 v2.0.50727
000000007CE8 000000409AE8 0 #Strings
000000007D08 000000409B08 0 #GUID
000000007D18 000000409B18 0 #Blob
0000000085D1 00000040A3D1 0 PloutusService.exe
0000000085E4 00000040A3E4 0 PloutusService
0000000085F3 00000040A3F3 0 mscorlib
000000008615 00000040A415 0 <Module>
00000000861E 00000040A41E 0 .cctor
000000008625 00000040A425 0 CompressShell
000000008633 00000040A433 0 Object
00000000863A 00000040A43A 0 System
00000000864D 00000040A44D 0 Module
000000008654 00000040A454 0 System.Reflection
000000008666 00000040A466 0 GetLenToPosState
00000000867B 00000040A47B 0 Assembly
000000008684 00000040A484 0 Stream
00000000868B 00000040A48B 0 System.IO
000000008695 00000040A495 0 BinaryReader
0000000086A2 00000040A4A2 0 Encoding
0000000086AB 00000040A4AB 0 System.Text
0000000086B7 00000040A4B7 0 get_UTF8
0000000086C0 00000040A4C0 0 ResolveEventArgs
0000000086D1 00000040A4D1 0 get_Name
0000000086DA 00000040A4DA 0 GetBytes
0000000086E3 00000040A4E3 0 GetString
0000000086F2 00000040A4F2 0 GetTypeFromHandle
000000008704 00000040A504 0 RuntimeTypeHandle
000000008716 00000040A516 0 get_Assembly
000000008723 00000040A523 0 GetManifestResourceStream
00000000873D 00000040A53D 0 .ctor
000000008743 00000040A543 0 get_Length
00000000874E 00000040A54E 0 ReadBytes
000000008758 00000040A558 0 IDisposable
000000008764 00000040A564 0 Dispose
000000008776 00000040A576 0 Buffer
00000000877D 00000040A57D 0 BlockCopy
000000008787 00000040A587 0 Array
00000000878D 00000040A58D 0 DecryptAsm
000000008798 00000040A598 0 sender
0000000087A1 00000040A5A1 0 ResolveResource
0000000087B1 00000040A5B1 0 CryptoStream
0000000087BE 00000040A5BE 0 System.Security.Cryptography
0000000087DB 00000040A5DB 0 RijndaelManaged
0000000087EB 00000040A5EB 0 MemoryStream
0000000087F8 00000040A5F8 0 ReadInt32
000000008802 00000040A602 0 SymmetricAlgorithm
000000008815 00000040A615 0 CreateDecryptor
000000008825 00000040A625 0 ICryptoTransform
000000008836 00000040A636 0 CryptoStreamMode
00000000884C 00000040A64C 0 BitConverter
000000008859 00000040A659 0 ToUInt32
000000008862 00000040A662 0 ReadByte
00000000886B 00000040A66B 0 Exception
000000008875 00000040A675 0 Decrypt
000000008881 00000040A681 0 modPow
000000008894 00000040A694 0 MethodBase
00000000889F 00000040A69F 0 GetEntryAssembly
File pos Mem pos ID Text
======== ======= == ====
0000000088B0 00000040A6B0 0 LoadModule
0000000088BB 00000040A6BB 0 AppDomain
0000000088C5 00000040A6C5 0 get_CurrentDomain
0000000088D7 00000040A6D7 0 ResolveEventHandler
0000000088EB 00000040A6EB 0 add_AssemblyResolve
0000000088FF 00000040A6FF 0 ResolveMethod
00000000890D 00000040A70D 0 GetParameters
00000000891B 00000040A71B 0 ParameterInfo
000000008929 00000040A729 0 Invoke
000000008930 00000040A730 0 Int32
000000008940 00000040A740 0 STAThreadAttribute
000000008953 00000040A753 0 State
000000008959 00000040A759 0 ValueType
000000008963 00000040A763 0 Index
00000000896E 00000040A76E 0 UpdateChar
000000008979 00000040A779 0 UpdateMatch
000000008985 00000040A785 0 UpdateRep
00000000898F 00000040A78F 0 UpdateShortRep
00000000899E 00000040A79E 0 IsCharState
0000000089AA 00000040A7AA 0 OutWindow
0000000089B4 00000040A7B4 0 _buffer
0000000089C1 00000040A7C1 0 _windowSize
0000000089CD 00000040A7CD 0 _streamPos
0000000089D8 00000040A7D8 0 _stream
0000000089E0 00000040A7E0 0 Create
0000000089E7 00000040A7E7 0 windowSize
0000000089F2 00000040A7F2 0 stream
0000000089F9 00000040A7F9 0 solid
0000000089FF 00000040A7FF 0 ReleaseStream
000000008A0D 00000040A80D 0 Write
000000008A13 00000040A813 0 Flush
000000008A19 00000040A819 0 CopyBlock
000000008A23 00000040A823 0 distance
000000008A2C 00000040A82C 0 PutByte
000000008A36 00000040A836 0 GetByte
000000008A3E 00000040A83E 0 Decoder
000000008A46 00000040A846 0 Range
000000008A51 00000040A851 0 Normalize
000000008A5B 00000040A85B 0 DecodeDirectBits
000000008A6C 00000040A86C 0 numTotalBits
000000008A79 00000040A879 0 BitDecoder
000000008A89 00000040A889 0 Decode
000000008A90 00000040A890 0 rangeDecoder
000000008A9D 00000040A89D 0 BitTreeDecoder
000000008AAC 00000040A8AC 0 Models
000000008AB3 00000040A8B3 0 NumBitLevels
000000008AC0 00000040A8C0 0 numBitLevels
000000008ACD 00000040A8CD 0 ReverseDecode
000000008ADB 00000040A8DB 0 startIndex
000000008AE6 00000040A8E6 0 LzmaDecoder
000000008AF2 00000040A8F2 0 m_OutWindow
000000008AFE 00000040A8FE 0 m_RangeDecoder
000000008B0D 00000040A90D 0 m_IsMatchDecoders
000000008B1F 00000040A91F 0 m_IsRepDecoders
000000008B2F 00000040A92F 0 m_IsRepG0Decoders
000000008B41 00000040A941 0 m_IsRepG1Decoders
000000008B53 00000040A953 0 m_IsRepG2Decoders
000000008B65 00000040A965 0 m_IsRep0LongDecoders
000000008B7A 00000040A97A 0 m_PosSlotDecoder
000000008B8B 00000040A98B 0 m_PosDecoders
File pos Mem pos ID Text
======== ======= == ====
000000008B99 00000040A999 0 m_PosAlignDecoder
000000008BAB 00000040A9AB 0 m_LenDecoder
000000008BB8 00000040A9B8 0 m_RepLenDecoder
000000008BC8 00000040A9C8 0 m_LiteralDecoder
000000008BD9 00000040A9D9 0 m_DictionarySize
000000008BEA 00000040A9EA 0 m_DictionarySizeCheck
000000008C00 00000040AA00 0 m_PosStateMask
000000008C0F 00000040AA0F 0 _solid
000000008C1F 00000040AA1F 0 SetDictionarySize
000000008C31 00000040AA31 0 dictionarySize
000000008C40 00000040AA40 0 SetLiteralProperties
000000008C5B 00000040AA5B 0 SetPosBitsProperties
000000008C73 00000040AA73 0 inStream
000000008C7C 00000040AA7C 0 outStream
000000008C86 00000040AA86 0 inSize
000000008C8D 00000040AA8D 0 outSize
000000008C95 00000040AA95 0 SetDecoderProperties
000000008CAA 00000040AAAA 0 properties
000000008CB5 00000040AAB5 0 LenDecoder
000000008CC0 00000040AAC0 0 m_Choice
000000008CC9 00000040AAC9 0 m_Choice2
000000008CD3 00000040AAD3 0 m_LowCoder
000000008CDE 00000040AADE 0 m_MidCoder
000000008CE9 00000040AAE9 0 m_HighCoder
000000008CF5 00000040AAF5 0 m_NumPosStates
000000008D04 00000040AB04 0 numPosStates
000000008D11 00000040AB11 0 posState
000000008D1A 00000040AB1A 0 LiteralDecoder
000000008D29 00000040AB29 0 m_Coders
000000008D32 00000040AB32 0 m_NumPrevBits
000000008D40 00000040AB40 0 m_NumPosBits
000000008D4D 00000040AB4D 0 m_PosMask
000000008D57 00000040AB57 0 numPosBits
000000008D62 00000040AB62 0 numPrevBits
000000008D6E 00000040AB6E 0 GetState
000000008D7B 00000040AB7B 0 prevByte
000000008D84 00000040AB84 0 DecodeNormal
000000008D91 00000040AB91 0 DecodeWithMatchByte
000000008DA5 00000040ABA5 0 matchByte
000000008DAF 00000040ABAF 0 Decoder2
000000008DB8 00000040ABB8 0 m_Decoders
000000008DC3 00000040ABC3 0 ConfusedByAttribute
000000008DD7 00000040ABD7 0 Attribute
000000008DE1 00000040ABE1 0 ___.netmodule
000000008DEF 00000040ABEF 0 PloutusService.NCR.resources
000000008E0C 00000040AC0C 0 PloutusService.Properties.Resources.resources
000000008E3A 00000040AC3A 0 PloutusService.ProjectInstaller.resources
00000000911E 00000040AF1E 0 Confuser v1.9.0.0
000000009182 00000040AF82 0 _CorExeMain
00000000918E 00000040AF8E 0 mscoree.dll
000000009583 00000040C383 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
0000000095BC 00000040C3BC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000009607 00000040C407 0 <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
000000009649 00000040C449 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
000000009681 00000040C481 0 <security>
000000009691 00000040C491 0 <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
0000000096D7 00000040C4D7 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
00000000971E 00000040C51E 0 </requestedPrivileges>
00000000973C 00000040C53C 0 </security>
00000000974D 00000040C54D 0 </trustInfo>
File pos Mem pos ID Text
======== ======= == ====
00000000975D 00000040C55D 0 </assembly>
000000008E67 00000040AC67 0 Can't Read 1
000000008E81 00000040AC81 0 ___.netmodule
0000000092A6 00000040C0A6 0 VS_VERSION_INFO
000000009302 00000040C102 0 VarFileInfo
000000009322 00000040C122 0 Translation
000000009346 00000040C146 0 StringFileInfo
00000000936A 00000040C16A 0 000004b0
000000009382 00000040C182 0 FileDescription
0000000093A4 00000040C1A4 0 PloutusService
0000000093CA 00000040C1CA 0 FileVersion
0000000093E4 00000040C1E4 0 1.0.0.0
0000000093FA 00000040C1FA 0 InternalName
000000009414 00000040C214 0 PloutusService.exe
000000009442 00000040C242 0 LegalCopyright
000000009476 00000040C276 0 2013
00000000948A 00000040C28A 0 OriginalFilename
0000000094AC 00000040C2AC 0 PloutusService.exe
0000000094DA 00000040C2DA 0 ProductName
0000000094F4 00000040C2F4 0 PloutusService
00000000951A 00000040C31A 0 ProductVersion
000000009538 00000040C338 0 1.0.0.0
00000000954E 00000040C34E 0 Assembly Version
000000009570 00000040C370 0 1.0.0.0