.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS                                                            !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    34acc4c0b61b5ce0b37c3589f97d1f23e6d84011a241e6f85683ee517ce786f1
 
Date...........: 2013-09-02
Family.........: Ploutus
File name......: ploutusservice.exe
File size......: 38.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/having-a-fiesta-with-ploutus/

Entropy:


Binary Histogram:


=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 128 0x80 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 3 3 TimeDateStamp: "2013-08-26 13:54:34" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 8.0 SizeOfCode: 36864 0x9000 SizeOfInitializedData: 2048 0x800 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 44958 0xaf9e BaseOfCode: 8192 0x2000 BaseOfData: 0 0 ImageBase: 4194304 0x400000 SectionAlignment: 8192 0x2000 FileAlignment: 512 0x200 OperatingSystemVersion: 4.0 ImageVersion: 0.0 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 65536 0x10000 SizeOfHeaders: 512 0x200 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 34112 0x8540 DYNAMIC_BASE, NX_COMPAT, NO_SEH TERMINAL_SERVER_AWARE SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x af48 size:0x 53 RESOURCE rva:0x c000 size:0x 600 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x e000 size:0x c DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x 2000 size:0x 8 Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 2008 size:0x 48 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 2000 8fa4 9000 200 0 0 0 0 60000020 R-X CODE .rsrc c000 600 600 9200 0 0 0 0 40000040 R-- IDATA .reloc e000 c 200 9800 0 0 0 0 42000040 R-- IDATA DISCARDABLE === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x92a0 0 0 736 VERSION #1 0x9580 0 0 490 MANIFEST #1 === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME mscoree.dll 0 _CorExeMain === VERSION INFO === # VS_FIXEDFILEINFO: FileVersion : 1.0.0.0 ProductVersion : 1.0.0.0 StrucVersion : 0x10000 FileFlagsMask : 0x3f FileFlags : 0 FileOS : 4 FileType : 1 FileSubtype : 0 VarFileInfo : [ 0x0, 0x4b0 ] # StringTable 000004b0: FileDescription : "PloutusService" FileVersion : "1.0.0.0" InternalName : "PloutusService.exe" LegalCopyright : "Copyright \u00A9 2013" OriginalFilename : "PloutusService.exe" ProductName : "PloutusService" ProductVersion : "1.0.0.0" Assembly Version : "1.0.0.0" === Packer / Compiler === MS Visual C# / Basic .NET
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 000000000178 000000400178 0 .text 0000000001A0 0000004001A0 0 .rsrc 0000000001C7 0000004001C7 0 @.reloc 0000000002A1 0000004020A1 0 XYXa a 000000000382 000000402182 0 1<aXXa 0000000003C0 0000004021C0 0 ,O s 0000000006F2 0000004024F2 0 'a u]E 00000000071E 00000040251E 0 F@ Gc 000000000724 000000402524 0 7YYXaj! 000000000750 000000402550 0 !J0xx 0000000008A5 0000004026A5 0 aaYaYX! 000000000C12 000000402A12 0 :YaX 000000000C34 000000402A34 0 aaaaX 000000000C46 000000402A46 0 &PX h 000000000C4E 000000402A4E 0 XaYYY Z 000000000C8E 000000402A8E 0 ajYYYYaY L 000000000CCD 000000402ACD 0 Y <a9 000000000CDD 000000402ADD 0 8XX s+ 000000000CEE 000000402AEE 0 iXaYd 000000000D22 000000402B22 0 ,a 7s 000000000D39 000000402B39 0 qYaXXYX4 000000000DF5 000000402BF5 0 woXX 000000000DFE 000000402BFE 0 M<ZG 000000000E1D 000000402C1D 0 |aXYaXXYaaX} 000000000E7C 000000402C7C 0 c5XYX 000000000F61 000000402D61 0 RiaY 000000000F67 000000402D67 0 M49 y* 000000000F79 000000402D79 0 XaXa 000000000FA0 000000402DA0 0 /zzY 000000000FAD 000000402DAD 0 <XaaX t 000000000FD6 000000402DD6 0 TYaX 000000000FE3 000000402DE3 0 aXXY 000000000FF7 000000402DF7 0 aXaaYX_b 000000001054 000000402E54 0 J '{{+YX h 00000000106E 000000402E6E 0 /!YaXaaX 000000001095 000000402E95 0 YXYXa 00000000109C 000000402E9C 0 ndv B 0000000010B4 000000402EB4 0 DaYY_bj 000000001127 000000402F27 0 Qv XYYX_bY* 000000001198 000000402F98 0 %0Xa /c 0000000011B9 000000402FB9 0 XYXa 0000000011D4 000000402FD4 0 *e6a @ 0000000011E0 000000402FE0 0 F0XXY 0000000011ED 000000402FED 0 '*Xa 000000001211 000000403011 0 YaaaaY 00000000127E 00000040307E 0 5XX D 00000000129F 00000040309F 0 >cLa 9 0000000012A7 0000004030A7 0 =YYX c 0000000012CE 0000004030CE 0 UYaXaYaX_b 00000000135D 00000040315D 0 @:Xx [@ 00000000138F 00000040318F 0 qhX N 0000000013A0 0000004031A0 0 g0aaX 000000001455 000000403255 0 R0Y !8 000000001472 000000403272 0 0aXa 0000000014A5 0000004032A5 0 :YX d 0000000014B1 0000004032B1 0 AXaYXXa(# 000000001509 000000403309 0 zXXa 000000001515 000000403315 0 ( X )> 00000000152B 00000040332B 0 _XXXYY File pos Mem pos ID Text ======== ======= == ==== 000000001554 000000403354 0 dvXYXXX B 000000001564 000000403364 0 2YY_b 0000000016B0 0000004034B0 0 SfaXaX 0000000016D6 0000004034D6 0 KaX " 000000001AC2 0000004038C2 0 YYY_bX 000000001CAF 000000403AAF 0 |Z b\bkaa_b 000000001CEF 000000403AEF 0 m/X M 000000001D0D 000000403B0D 0 XYXa_b 000000001D7C 000000403B7C 0 FYX w<J 000000001D8D 000000403B8D 0 &XaX 000000001D95 000000403B95 0 laaX_b 000000001DE3 000000403BE3 0 na Pr! 000000001DF0 000000403BF0 0 |'zGXa 000000001DFF 000000403BFF 0 "gXY_b 000000001E1F 000000403C1F 0 yWb " 000000001E2F 000000403C2F 0 bWaX 6QXWY f8 000000001E42 000000403C42 0 ]XXaYYX 000000001E7E 000000403C7E 0 LAXaXX 000000001E97 000000403C97 0 s(YX b 000000001EB1 000000403CB1 0 XaXa_cX* 000000001F15 000000403D15 0 8MY v 000000001F31 000000403D31 0 H'YX 000000001F3E 000000403D3E 0 &YYY Y 000000001F49 000000403D49 0 "S3X 000000001F61 000000403D61 0 DaYX 000000001F95 000000403D95 0 ! XYX 000000001FA6 000000403DA6 0 E?l S]rx 000000001FB3 000000403DB3 0 YaaXa [D 000000001FC1 000000403DC1 0 HnXaa 000000002024 000000403E24 0 7?YY 00000000206B 000000403E6B 0 1YYX 000000002074 000000403E74 0 eZ{SXYa 000000002095 000000403E95 0 *XYXXa 0000000020D9 000000403ED9 0 +a y$ 0000000020DF 000000403EDF 0 W "eQ 0000000020FB 000000403EFB 0 :OYX 000000002112 000000403F12 0 oXaXXY 000000002139 000000403F39 0 ;iIX 6 000000002153 000000403F53 0 YaXaYYY 0000000021DF 000000403FDF 0 2~{{X ? 000000002218 000000404018 0 aXYYX 000000002227 000000404027 0 y[ kP 00000000223A 00000040403A 0 2AOaaa 00000000224D 00000040404D 0 aYaYD 000000002270 000000404070 0 /,sZ$P 0000000024DF 0000004042DF 0 ;"W;ND 000000002661 000000404461 0 >-=:, 00000000275B 00000040455B 0 H9EpA 0000000027D6 0000004045D6 0 &tmf 0000000027F9 0000004045F9 0 wwgpBJV 000000002808 000000404608 0 EFJ % 000000002914 000000404714 0 7iBA} 0000000029B7 0000004047B7 0 AK18' 000000002B51 000000404951 0 0T6as0 000000002BA2 0000004049A2 0 Zo D\ 000000002BC5 0000004049C5 0 utqTF 000000002E32 000000404C32 0 {KE2T 000000002F9D 000000404D9D 0 UTVz? 000000002FAF 000000404DAF 0 : ?\- 000000002FFE 000000404DFE 0 LRq31 File pos Mem pos ID Text ======== ======= == ==== 000000003051 000000404E51 0 OGt@H 000000003072 000000404E72 0 I\@O3U_ 000000003174 000000404F74 0 /y#3s 0000000031FD 000000404FFD 0 R@p"d 000000003254 000000405054 0 d70Wx 000000003299 000000405099 0 dmr'=a # 0000000033B4 0000004051B4 0 B?9. 0000000033E9 0000004051E9 0 Y\_ts2 000000003402 000000405202 0 #NyX<S 00000000346A 00000040526A 0 cecJpce 00000000376E 00000040556E 0 ;l{uqioe- 00000000390D 00000040570D 0 U{h8| 000000003D06 000000405B06 0 ck}ob 000000003D1C 000000405B1C 0 <?%|R 000000003D4C 000000405B4C 0 rao4v 000000003D59 000000405B59 0 XV'v9D 000000003F08 000000405D08 0 e;PKO 000000004056 000000405E56 0 1YjxD 0000000040DC 000000405EDC 0 FDsp{n 000000004293 000000406093 0 y4Pew 0000000042BC 0000004060BC 0 XUM4= 0000000042E1 0000004060E1 0 oO#Y!) 000000004330 000000406130 0 &'TkO 00000000439F 00000040619F 0 !\>34 000000004402 000000406202 0 ,u'yl 0000000044BC 0000004062BC 0 Pn2M 000000004515 000000406315 0 ( Lq; 0000000045F2 0000004063F2 0 LX\!, 000000004661 000000406461 0 >C(G/&<%N 00000000468B 00000040648B 0 MwU,s 000000004797 000000406597 0 hnMFW 000000004A0C 00000040680C 0 C84h\ 000000004A22 000000406822 0 }8GO 000000004CC8 000000406AC8 0 BkRM4 000000004E07 000000406C07 0 [iEUp 000000004FDE 000000406DDE 0 tCmYp 0000000050BC 000000406EBC 0 qb+.< 0000000050C9 000000406EC9 0 ~>ZOs 000000005160 000000406F60 0 w5#zzO 000000005483 000000407283 0 nI26.R 00000000553A 00000040733A 0 '[,;& 000000005845 000000407645 0 ?;+yj 0000000058F2 0000004076F2 0 ZN'+l 00000000592A 00000040772A 0 edS<m 000000005D75 000000407B75 0 dXQg39 000000005E42 000000407C42 0 z\6L-T=B 000000006057 000000407E57 0 0B56H 00000000645B 00000040825B 0 s_\@Q 0000000065A8 0000004083A8 0 \|<kT 000000006693 000000408493 0 5T#XmK@ 0000000066C2 0000004084C2 0 ;/f=D" 000000006759 000000408559 0 3$C!| 0000000068CA 0000004086CA 0 3C[_ 000000006909 000000408709 0 30}"- 000000006918 000000408718 0 x;lS0 0000000069AE 0000004087AE 0 PU7W7 000000006AAB 0000004088AB 0 44v-C 000000006AB2 0000004088B2 0 YL$9A 000000006BB2 0000004089B2 0 >P0VG 000000006C59 000000408A59 0 ZYT} File pos Mem pos ID Text ======== ======= == ==== 000000006D64 000000408B64 0 ]oK=T 000000006DD6 000000408BD6 0 z55>D 000000006E09 000000408C09 0 (% V'A 000000006E2C 000000408C2C 0 qsFI4 000000006E59 000000408C59 0 9'4bH 000000006F31 000000408D31 0 pi7P0 000000006F9B 000000408D9B 0 0EJ ! 000000006FBE 000000408DBE 0 5xAm>k 000000006FD9 000000408DD9 0 V%3[n 0000000071AE 000000408FAE 0 #c "V 000000007239 000000409039 0 F1 &t 0000000073B4 0000004091B4 0 NME}1j 00000000788A 00000040968A 0 &tsYb 0000000078CA 0000004096CA 0 MYf.h 0000000078E6 0000004096E6 0 }GZ6{_ 000000007A3F 00000040983F 0 Bgf!Y 000000007B66 000000409966 0 C|gk* 000000007B9A 00000040999A 0 N4mt8 000000007BA7 0000004099A7 0 ([P:X 000000007CB3 000000409AB3 0 #BSJB 000000007CC4 000000409AC4 0 v2.0.50727 000000007CE8 000000409AE8 0 #Strings 000000007D08 000000409B08 0 #GUID 000000007D18 000000409B18 0 #Blob 0000000085D1 00000040A3D1 0 PloutusService.exe 0000000085E4 00000040A3E4 0 PloutusService 0000000085F3 00000040A3F3 0 mscorlib 000000008615 00000040A415 0 <Module> 00000000861E 00000040A41E 0 .cctor 000000008625 00000040A425 0 CompressShell 000000008633 00000040A433 0 Object 00000000863A 00000040A43A 0 System 00000000864D 00000040A44D 0 Module 000000008654 00000040A454 0 System.Reflection 000000008666 00000040A466 0 GetLenToPosState 00000000867B 00000040A47B 0 Assembly 000000008684 00000040A484 0 Stream 00000000868B 00000040A48B 0 System.IO 000000008695 00000040A495 0 BinaryReader 0000000086A2 00000040A4A2 0 Encoding 0000000086AB 00000040A4AB 0 System.Text 0000000086B7 00000040A4B7 0 get_UTF8 0000000086C0 00000040A4C0 0 ResolveEventArgs 0000000086D1 00000040A4D1 0 get_Name 0000000086DA 00000040A4DA 0 GetBytes 0000000086E3 00000040A4E3 0 GetString 0000000086F2 00000040A4F2 0 GetTypeFromHandle 000000008704 00000040A504 0 RuntimeTypeHandle 000000008716 00000040A516 0 get_Assembly 000000008723 00000040A523 0 GetManifestResourceStream 00000000873D 00000040A53D 0 .ctor 000000008743 00000040A543 0 get_Length 00000000874E 00000040A54E 0 ReadBytes 000000008758 00000040A558 0 IDisposable 000000008764 00000040A564 0 Dispose 000000008776 00000040A576 0 Buffer 00000000877D 00000040A57D 0 BlockCopy 000000008787 00000040A587 0 Array 00000000878D 00000040A58D 0 DecryptAsm 000000008798 00000040A598 0 sender File pos Mem pos ID Text ======== ======= == ==== 0000000087A1 00000040A5A1 0 ResolveResource 0000000087B1 00000040A5B1 0 CryptoStream 0000000087BE 00000040A5BE 0 System.Security.Cryptography 0000000087DB 00000040A5DB 0 RijndaelManaged 0000000087EB 00000040A5EB 0 MemoryStream 0000000087F8 00000040A5F8 0 ReadInt32 000000008802 00000040A602 0 SymmetricAlgorithm 000000008815 00000040A615 0 CreateDecryptor 000000008825 00000040A625 0 ICryptoTransform 000000008836 00000040A636 0 CryptoStreamMode 00000000884C 00000040A64C 0 BitConverter 000000008859 00000040A659 0 ToUInt32 000000008862 00000040A662 0 ReadByte 00000000886B 00000040A66B 0 Exception 000000008875 00000040A675 0 Decrypt 000000008881 00000040A681 0 modPow 000000008894 00000040A694 0 MethodBase 00000000889F 00000040A69F 0 GetEntryAssembly 0000000088B0 00000040A6B0 0 LoadModule 0000000088BB 00000040A6BB 0 AppDomain 0000000088C5 00000040A6C5 0 get_CurrentDomain 0000000088D7 00000040A6D7 0 ResolveEventHandler 0000000088EB 00000040A6EB 0 add_AssemblyResolve 0000000088FF 00000040A6FF 0 ResolveMethod 00000000890D 00000040A70D 0 GetParameters 00000000891B 00000040A71B 0 ParameterInfo 000000008929 00000040A729 0 Invoke 000000008930 00000040A730 0 Int32 000000008940 00000040A740 0 STAThreadAttribute 000000008953 00000040A753 0 State 000000008959 00000040A759 0 ValueType 000000008963 00000040A763 0 Index 00000000896E 00000040A76E 0 UpdateChar 000000008979 00000040A779 0 UpdateMatch 000000008985 00000040A785 0 UpdateRep 00000000898F 00000040A78F 0 UpdateShortRep 00000000899E 00000040A79E 0 IsCharState 0000000089AA 00000040A7AA 0 OutWindow 0000000089B4 00000040A7B4 0 _buffer 0000000089C1 00000040A7C1 0 _windowSize 0000000089CD 00000040A7CD 0 _streamPos 0000000089D8 00000040A7D8 0 _stream 0000000089E0 00000040A7E0 0 Create 0000000089E7 00000040A7E7 0 windowSize 0000000089F2 00000040A7F2 0 stream 0000000089F9 00000040A7F9 0 solid 0000000089FF 00000040A7FF 0 ReleaseStream 000000008A0D 00000040A80D 0 Write 000000008A13 00000040A813 0 Flush 000000008A19 00000040A819 0 CopyBlock 000000008A23 00000040A823 0 distance 000000008A2C 00000040A82C 0 PutByte 000000008A36 00000040A836 0 GetByte 000000008A3E 00000040A83E 0 Decoder 000000008A46 00000040A846 0 Range 000000008A51 00000040A851 0 Normalize 000000008A5B 00000040A85B 0 DecodeDirectBits 000000008A6C 00000040A86C 0 numTotalBits 000000008A79 00000040A879 0 BitDecoder 000000008A89 00000040A889 0 Decode File pos Mem pos ID Text ======== ======= == ==== 000000008A90 00000040A890 0 rangeDecoder 000000008A9D 00000040A89D 0 BitTreeDecoder 000000008AAC 00000040A8AC 0 Models 000000008AB3 00000040A8B3 0 NumBitLevels 000000008AC0 00000040A8C0 0 numBitLevels 000000008ACD 00000040A8CD 0 ReverseDecode 000000008ADB 00000040A8DB 0 startIndex 000000008AE6 00000040A8E6 0 LzmaDecoder 000000008AF2 00000040A8F2 0 m_OutWindow 000000008AFE 00000040A8FE 0 m_RangeDecoder 000000008B0D 00000040A90D 0 m_IsMatchDecoders 000000008B1F 00000040A91F 0 m_IsRepDecoders 000000008B2F 00000040A92F 0 m_IsRepG0Decoders 000000008B41 00000040A941 0 m_IsRepG1Decoders 000000008B53 00000040A953 0 m_IsRepG2Decoders 000000008B65 00000040A965 0 m_IsRep0LongDecoders 000000008B7A 00000040A97A 0 m_PosSlotDecoder 000000008B8B 00000040A98B 0 m_PosDecoders 000000008B99 00000040A999 0 m_PosAlignDecoder 000000008BAB 00000040A9AB 0 m_LenDecoder 000000008BB8 00000040A9B8 0 m_RepLenDecoder 000000008BC8 00000040A9C8 0 m_LiteralDecoder 000000008BD9 00000040A9D9 0 m_DictionarySize 000000008BEA 00000040A9EA 0 m_DictionarySizeCheck 000000008C00 00000040AA00 0 m_PosStateMask 000000008C0F 00000040AA0F 0 _solid 000000008C1F 00000040AA1F 0 SetDictionarySize 000000008C31 00000040AA31 0 dictionarySize 000000008C40 00000040AA40 0 SetLiteralProperties 000000008C5B 00000040AA5B 0 SetPosBitsProperties 000000008C73 00000040AA73 0 inStream 000000008C7C 00000040AA7C 0 outStream 000000008C86 00000040AA86 0 inSize 000000008C8D 00000040AA8D 0 outSize 000000008C95 00000040AA95 0 SetDecoderProperties 000000008CAA 00000040AAAA 0 properties 000000008CB5 00000040AAB5 0 LenDecoder 000000008CC0 00000040AAC0 0 m_Choice 000000008CC9 00000040AAC9 0 m_Choice2 000000008CD3 00000040AAD3 0 m_LowCoder 000000008CDE 00000040AADE 0 m_MidCoder 000000008CE9 00000040AAE9 0 m_HighCoder 000000008CF5 00000040AAF5 0 m_NumPosStates 000000008D04 00000040AB04 0 numPosStates 000000008D11 00000040AB11 0 posState 000000008D1A 00000040AB1A 0 LiteralDecoder 000000008D29 00000040AB29 0 m_Coders 000000008D32 00000040AB32 0 m_NumPrevBits 000000008D40 00000040AB40 0 m_NumPosBits 000000008D4D 00000040AB4D 0 m_PosMask 000000008D57 00000040AB57 0 numPosBits 000000008D62 00000040AB62 0 numPrevBits 000000008D6E 00000040AB6E 0 GetState 000000008D7B 00000040AB7B 0 prevByte 000000008D84 00000040AB84 0 DecodeNormal 000000008D91 00000040AB91 0 DecodeWithMatchByte 000000008DA5 00000040ABA5 0 matchByte 000000008DAF 00000040ABAF 0 Decoder2 000000008DB8 00000040ABB8 0 m_Decoders 000000008DC3 00000040ABC3 0 ConfusedByAttribute File pos Mem pos ID Text ======== ======= == ==== 000000008DD7 00000040ABD7 0 Attribute 000000008DE1 00000040ABE1 0 ___.netmodule 000000008DEF 00000040ABEF 0 PloutusService.NCR.resources 000000008E0C 00000040AC0C 0 PloutusService.Properties.Resources.resources 000000008E3A 00000040AC3A 0 PloutusService.ProjectInstaller.resources 00000000911E 00000040AF1E 0 Confuser v1.9.0.0 000000009182 00000040AF82 0 _CorExeMain 00000000918E 00000040AF8E 0 mscoree.dll 000000009583 00000040C383 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?> 0000000095BC 00000040C3BC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 000000009607 00000040C407 0 <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> 000000009649 00000040C449 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> 000000009681 00000040C481 0 <security> 000000009691 00000040C491 0 <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> 0000000096D7 00000040C4D7 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"/> 00000000971E 00000040C51E 0 </requestedPrivileges> 00000000973C 00000040C53C 0 </security> 00000000974D 00000040C54D 0 </trustInfo> 00000000975D 00000040C55D 0 </assembly> 000000008E67 00000040AC67 0 Can't Read 1 000000008E81 00000040AC81 0 ___.netmodule 0000000092A6 00000040C0A6 0 VS_VERSION_INFO 000000009302 00000040C102 0 VarFileInfo 000000009322 00000040C122 0 Translation 000000009346 00000040C146 0 StringFileInfo 00000000936A 00000040C16A 0 000004b0 000000009382 00000040C182 0 FileDescription 0000000093A4 00000040C1A4 0 PloutusService 0000000093CA 00000040C1CA 0 FileVersion 0000000093E4 00000040C1E4 0 1.0.0.0 0000000093FA 00000040C1FA 0 InternalName 000000009414 00000040C214 0 PloutusService.exe 000000009442 00000040C242 0 LegalCopyright 000000009476 00000040C276 0 2013 00000000948A 00000040C28A 0 OriginalFilename 0000000094AC 00000040C2AC 0 PloutusService.exe 0000000094DA 00000040C2DA 0 ProductName 0000000094F4 00000040C2F4 0 PloutusService 00000000951A 00000040C31A 0 ProductVersion 000000009538 00000040C338 0 1.0.0.0 00000000954E 00000040C34E 0 Assembly Version 000000009570 00000040C370 0 1.0.0.0 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 000000000178 000000400178 0 .text 0000000001A0 0000004001A0 0 .rsrc 0000000001C7 0000004001C7 0 @.reloc 0000000002A1 0000004020A1 0 XYXa a 000000000382 000000402182 0 1<aXXa 0000000003C0 0000004021C0 0 ,O s 0000000006F2 0000004024F2 0 'a u]E 00000000071E 00000040251E 0 F@ Gc 000000000724 000000402524 0 7YYXaj! 000000000750 000000402550 0 !J0xx 0000000008A5 0000004026A5 0 aaYaYX! 000000000C12 000000402A12 0 :YaX 000000000C34 000000402A34 0 aaaaX 000000000C46 000000402A46 0 &PX h 000000000C4E 000000402A4E 0 XaYYY Z 000000000C8E 000000402A8E 0 ajYYYYaY L 000000000CCD 000000402ACD 0 Y <a9 File pos Mem pos ID Text ======== ======= == ==== 000000000CDD 000000402ADD 0 8XX s+ 000000000CEE 000000402AEE 0 iXaYd 000000000D22 000000402B22 0 ,a 7s 000000000D39 000000402B39 0 qYaXXYX4 000000000DF5 000000402BF5 0 woXX 000000000DFE 000000402BFE 0 M<ZG 000000000E1D 000000402C1D 0 |aXYaXXYaaX} 000000000E7C 000000402C7C 0 c5XYX 000000000F61 000000402D61 0 RiaY 000000000F67 000000402D67 0 M49 y* 000000000F79 000000402D79 0 XaXa 000000000FA0 000000402DA0 0 /zzY 000000000FAD 000000402DAD 0 <XaaX t 000000000FD6 000000402DD6 0 TYaX 000000000FE3 000000402DE3 0 aXXY 000000000FF7 000000402DF7 0 aXaaYX_b 000000001054 000000402E54 0 J '{{+YX h 00000000106E 000000402E6E 0 /!YaXaaX 000000001095 000000402E95 0 YXYXa 00000000109C 000000402E9C 0 ndv B 0000000010B4 000000402EB4 0 DaYY_bj 000000001127 000000402F27 0 Qv XYYX_bY* 000000001198 000000402F98 0 %0Xa /c 0000000011B9 000000402FB9 0 XYXa 0000000011D4 000000402FD4 0 *e6a @ 0000000011E0 000000402FE0 0 F0XXY 0000000011ED 000000402FED 0 '*Xa 000000001211 000000403011 0 YaaaaY 00000000127E 00000040307E 0 5XX D 00000000129F 00000040309F 0 >cLa 9 0000000012A7 0000004030A7 0 =YYX c 0000000012CE 0000004030CE 0 UYaXaYaX_b 00000000135D 00000040315D 0 @:Xx [@ 00000000138F 00000040318F 0 qhX N 0000000013A0 0000004031A0 0 g0aaX 000000001455 000000403255 0 R0Y !8 000000001472 000000403272 0 0aXa 0000000014A5 0000004032A5 0 :YX d 0000000014B1 0000004032B1 0 AXaYXXa(# 000000001509 000000403309 0 zXXa 000000001515 000000403315 0 ( X )> 00000000152B 00000040332B 0 _XXXYY 000000001554 000000403354 0 dvXYXXX B 000000001564 000000403364 0 2YY_b 0000000016B0 0000004034B0 0 SfaXaX 0000000016D6 0000004034D6 0 KaX " 000000001AC2 0000004038C2 0 YYY_bX 000000001CAF 000000403AAF 0 |Z b\bkaa_b 000000001CEF 000000403AEF 0 m/X M 000000001D0D 000000403B0D 0 XYXa_b 000000001D7C 000000403B7C 0 FYX w<J 000000001D8D 000000403B8D 0 &XaX 000000001D95 000000403B95 0 laaX_b 000000001DE3 000000403BE3 0 na Pr! 000000001DF0 000000403BF0 0 |'zGXa 000000001DFF 000000403BFF 0 "gXY_b 000000001E1F 000000403C1F 0 yWb " 000000001E2F 000000403C2F 0 bWaX 6QXWY f8 000000001E42 000000403C42 0 ]XXaYYX 000000001E7E 000000403C7E 0 LAXaXX File pos Mem pos ID Text ======== ======= == ==== 000000001E97 000000403C97 0 s(YX b 000000001EB1 000000403CB1 0 XaXa_cX* 000000001F15 000000403D15 0 8MY v 000000001F31 000000403D31 0 H'YX 000000001F3E 000000403D3E 0 &YYY Y 000000001F49 000000403D49 0 "S3X 000000001F61 000000403D61 0 DaYX 000000001F95 000000403D95 0 ! XYX 000000001FA6 000000403DA6 0 E?l S]rx 000000001FB3 000000403DB3 0 YaaXa [D 000000001FC1 000000403DC1 0 HnXaa 000000002024 000000403E24 0 7?YY 00000000206B 000000403E6B 0 1YYX 000000002074 000000403E74 0 eZ{SXYa 000000002095 000000403E95 0 *XYXXa 0000000020D9 000000403ED9 0 +a y$ 0000000020DF 000000403EDF 0 W "eQ 0000000020FB 000000403EFB 0 :OYX 000000002112 000000403F12 0 oXaXXY 000000002139 000000403F39 0 ;iIX 6 000000002153 000000403F53 0 YaXaYYY 0000000021DF 000000403FDF 0 2~{{X ? 000000002218 000000404018 0 aXYYX 000000002227 000000404027 0 y[ kP 00000000223A 00000040403A 0 2AOaaa 00000000224D 00000040404D 0 aYaYD 000000002270 000000404070 0 /,sZ$P 0000000024DF 0000004042DF 0 ;"W;ND 000000002661 000000404461 0 >-=:, 00000000275B 00000040455B 0 H9EpA 0000000027D6 0000004045D6 0 &tmf 0000000027F9 0000004045F9 0 wwgpBJV 000000002808 000000404608 0 EFJ % 000000002914 000000404714 0 7iBA} 0000000029B7 0000004047B7 0 AK18' 000000002B51 000000404951 0 0T6as0 000000002BA2 0000004049A2 0 Zo D\ 000000002BC5 0000004049C5 0 utqTF 000000002E32 000000404C32 0 {KE2T 000000002F9D 000000404D9D 0 UTVz? 000000002FAF 000000404DAF 0 : ?\- 000000002FFE 000000404DFE 0 LRq31 000000003051 000000404E51 0 OGt@H 000000003072 000000404E72 0 I\@O3U_ 000000003174 000000404F74 0 /y#3s 0000000031FD 000000404FFD 0 R@p"d 000000003254 000000405054 0 d70Wx 000000003299 000000405099 0 dmr'=a # 0000000033B4 0000004051B4 0 B?9. 0000000033E9 0000004051E9 0 Y\_ts2 000000003402 000000405202 0 #NyX<S 00000000346A 00000040526A 0 cecJpce 00000000376E 00000040556E 0 ;l{uqioe- 00000000390D 00000040570D 0 U{h8| 000000003D06 000000405B06 0 ck}ob 000000003D1C 000000405B1C 0 <?%|R 000000003D4C 000000405B4C 0 rao4v 000000003D59 000000405B59 0 XV'v9D 000000003F08 000000405D08 0 e;PKO 000000004056 000000405E56 0 1YjxD File pos Mem pos ID Text ======== ======= == ==== 0000000040DC 000000405EDC 0 FDsp{n 000000004293 000000406093 0 y4Pew 0000000042BC 0000004060BC 0 XUM4= 0000000042E1 0000004060E1 0 oO#Y!) 000000004330 000000406130 0 &'TkO 00000000439F 00000040619F 0 !\>34 000000004402 000000406202 0 ,u'yl 0000000044BC 0000004062BC 0 Pn2M 000000004515 000000406315 0 ( Lq; 0000000045F2 0000004063F2 0 LX\!, 000000004661 000000406461 0 >C(G/&<%N 00000000468B 00000040648B 0 MwU,s 000000004797 000000406597 0 hnMFW 000000004A0C 00000040680C 0 C84h\ 000000004A22 000000406822 0 }8GO 000000004CC8 000000406AC8 0 BkRM4 000000004E07 000000406C07 0 [iEUp 000000004FDE 000000406DDE 0 tCmYp 0000000050BC 000000406EBC 0 qb+.< 0000000050C9 000000406EC9 0 ~>ZOs 000000005160 000000406F60 0 w5#zzO 000000005483 000000407283 0 nI26.R 00000000553A 00000040733A 0 '[,;& 000000005845 000000407645 0 ?;+yj 0000000058F2 0000004076F2 0 ZN'+l 00000000592A 00000040772A 0 edS<m 000000005D75 000000407B75 0 dXQg39 000000005E42 000000407C42 0 z\6L-T=B 000000006057 000000407E57 0 0B56H 00000000645B 00000040825B 0 s_\@Q 0000000065A8 0000004083A8 0 \|<kT 000000006693 000000408493 0 5T#XmK@ 0000000066C2 0000004084C2 0 ;/f=D" 000000006759 000000408559 0 3$C!| 0000000068CA 0000004086CA 0 3C[_ 000000006909 000000408709 0 30}"- 000000006918 000000408718 0 x;lS0 0000000069AE 0000004087AE 0 PU7W7 000000006AAB 0000004088AB 0 44v-C 000000006AB2 0000004088B2 0 YL$9A 000000006BB2 0000004089B2 0 >P0VG 000000006C59 000000408A59 0 ZYT} 000000006D64 000000408B64 0 ]oK=T 000000006DD6 000000408BD6 0 z55>D 000000006E09 000000408C09 0 (% V'A 000000006E2C 000000408C2C 0 qsFI4 000000006E59 000000408C59 0 9'4bH 000000006F31 000000408D31 0 pi7P0 000000006F9B 000000408D9B 0 0EJ ! 000000006FBE 000000408DBE 0 5xAm>k 000000006FD9 000000408DD9 0 V%3[n 0000000071AE 000000408FAE 0 #c "V 000000007239 000000409039 0 F1 &t 0000000073B4 0000004091B4 0 NME}1j 00000000788A 00000040968A 0 &tsYb 0000000078CA 0000004096CA 0 MYf.h 0000000078E6 0000004096E6 0 }GZ6{_ 000000007A3F 00000040983F 0 Bgf!Y 000000007B66 000000409966 0 C|gk* 000000007B9A 00000040999A 0 N4mt8 File pos Mem pos ID Text ======== ======= == ==== 000000007BA7 0000004099A7 0 ([P:X 000000007CB3 000000409AB3 0 #BSJB 000000007CC4 000000409AC4 0 v2.0.50727 000000007CE8 000000409AE8 0 #Strings 000000007D08 000000409B08 0 #GUID 000000007D18 000000409B18 0 #Blob 0000000085D1 00000040A3D1 0 PloutusService.exe 0000000085E4 00000040A3E4 0 PloutusService 0000000085F3 00000040A3F3 0 mscorlib 000000008615 00000040A415 0 <Module> 00000000861E 00000040A41E 0 .cctor 000000008625 00000040A425 0 CompressShell 000000008633 00000040A433 0 Object 00000000863A 00000040A43A 0 System 00000000864D 00000040A44D 0 Module 000000008654 00000040A454 0 System.Reflection 000000008666 00000040A466 0 GetLenToPosState 00000000867B 00000040A47B 0 Assembly 000000008684 00000040A484 0 Stream 00000000868B 00000040A48B 0 System.IO 000000008695 00000040A495 0 BinaryReader 0000000086A2 00000040A4A2 0 Encoding 0000000086AB 00000040A4AB 0 System.Text 0000000086B7 00000040A4B7 0 get_UTF8 0000000086C0 00000040A4C0 0 ResolveEventArgs 0000000086D1 00000040A4D1 0 get_Name 0000000086DA 00000040A4DA 0 GetBytes 0000000086E3 00000040A4E3 0 GetString 0000000086F2 00000040A4F2 0 GetTypeFromHandle 000000008704 00000040A504 0 RuntimeTypeHandle 000000008716 00000040A516 0 get_Assembly 000000008723 00000040A523 0 GetManifestResourceStream 00000000873D 00000040A53D 0 .ctor 000000008743 00000040A543 0 get_Length 00000000874E 00000040A54E 0 ReadBytes 000000008758 00000040A558 0 IDisposable 000000008764 00000040A564 0 Dispose 000000008776 00000040A576 0 Buffer 00000000877D 00000040A57D 0 BlockCopy 000000008787 00000040A587 0 Array 00000000878D 00000040A58D 0 DecryptAsm 000000008798 00000040A598 0 sender 0000000087A1 00000040A5A1 0 ResolveResource 0000000087B1 00000040A5B1 0 CryptoStream 0000000087BE 00000040A5BE 0 System.Security.Cryptography 0000000087DB 00000040A5DB 0 RijndaelManaged 0000000087EB 00000040A5EB 0 MemoryStream 0000000087F8 00000040A5F8 0 ReadInt32 000000008802 00000040A602 0 SymmetricAlgorithm 000000008815 00000040A615 0 CreateDecryptor 000000008825 00000040A625 0 ICryptoTransform 000000008836 00000040A636 0 CryptoStreamMode 00000000884C 00000040A64C 0 BitConverter 000000008859 00000040A659 0 ToUInt32 000000008862 00000040A662 0 ReadByte 00000000886B 00000040A66B 0 Exception 000000008875 00000040A675 0 Decrypt 000000008881 00000040A681 0 modPow 000000008894 00000040A694 0 MethodBase 00000000889F 00000040A69F 0 GetEntryAssembly File pos Mem pos ID Text ======== ======= == ==== 0000000088B0 00000040A6B0 0 LoadModule 0000000088BB 00000040A6BB 0 AppDomain 0000000088C5 00000040A6C5 0 get_CurrentDomain 0000000088D7 00000040A6D7 0 ResolveEventHandler 0000000088EB 00000040A6EB 0 add_AssemblyResolve 0000000088FF 00000040A6FF 0 ResolveMethod 00000000890D 00000040A70D 0 GetParameters 00000000891B 00000040A71B 0 ParameterInfo 000000008929 00000040A729 0 Invoke 000000008930 00000040A730 0 Int32 000000008940 00000040A740 0 STAThreadAttribute 000000008953 00000040A753 0 State 000000008959 00000040A759 0 ValueType 000000008963 00000040A763 0 Index 00000000896E 00000040A76E 0 UpdateChar 000000008979 00000040A779 0 UpdateMatch 000000008985 00000040A785 0 UpdateRep 00000000898F 00000040A78F 0 UpdateShortRep 00000000899E 00000040A79E 0 IsCharState 0000000089AA 00000040A7AA 0 OutWindow 0000000089B4 00000040A7B4 0 _buffer 0000000089C1 00000040A7C1 0 _windowSize 0000000089CD 00000040A7CD 0 _streamPos 0000000089D8 00000040A7D8 0 _stream 0000000089E0 00000040A7E0 0 Create 0000000089E7 00000040A7E7 0 windowSize 0000000089F2 00000040A7F2 0 stream 0000000089F9 00000040A7F9 0 solid 0000000089FF 00000040A7FF 0 ReleaseStream 000000008A0D 00000040A80D 0 Write 000000008A13 00000040A813 0 Flush 000000008A19 00000040A819 0 CopyBlock 000000008A23 00000040A823 0 distance 000000008A2C 00000040A82C 0 PutByte 000000008A36 00000040A836 0 GetByte 000000008A3E 00000040A83E 0 Decoder 000000008A46 00000040A846 0 Range 000000008A51 00000040A851 0 Normalize 000000008A5B 00000040A85B 0 DecodeDirectBits 000000008A6C 00000040A86C 0 numTotalBits 000000008A79 00000040A879 0 BitDecoder 000000008A89 00000040A889 0 Decode 000000008A90 00000040A890 0 rangeDecoder 000000008A9D 00000040A89D 0 BitTreeDecoder 000000008AAC 00000040A8AC 0 Models 000000008AB3 00000040A8B3 0 NumBitLevels 000000008AC0 00000040A8C0 0 numBitLevels 000000008ACD 00000040A8CD 0 ReverseDecode 000000008ADB 00000040A8DB 0 startIndex 000000008AE6 00000040A8E6 0 LzmaDecoder 000000008AF2 00000040A8F2 0 m_OutWindow 000000008AFE 00000040A8FE 0 m_RangeDecoder 000000008B0D 00000040A90D 0 m_IsMatchDecoders 000000008B1F 00000040A91F 0 m_IsRepDecoders 000000008B2F 00000040A92F 0 m_IsRepG0Decoders 000000008B41 00000040A941 0 m_IsRepG1Decoders 000000008B53 00000040A953 0 m_IsRepG2Decoders 000000008B65 00000040A965 0 m_IsRep0LongDecoders 000000008B7A 00000040A97A 0 m_PosSlotDecoder 000000008B8B 00000040A98B 0 m_PosDecoders File pos Mem pos ID Text ======== ======= == ==== 000000008B99 00000040A999 0 m_PosAlignDecoder 000000008BAB 00000040A9AB 0 m_LenDecoder 000000008BB8 00000040A9B8 0 m_RepLenDecoder 000000008BC8 00000040A9C8 0 m_LiteralDecoder 000000008BD9 00000040A9D9 0 m_DictionarySize 000000008BEA 00000040A9EA 0 m_DictionarySizeCheck 000000008C00 00000040AA00 0 m_PosStateMask 000000008C0F 00000040AA0F 0 _solid 000000008C1F 00000040AA1F 0 SetDictionarySize 000000008C31 00000040AA31 0 dictionarySize 000000008C40 00000040AA40 0 SetLiteralProperties 000000008C5B 00000040AA5B 0 SetPosBitsProperties 000000008C73 00000040AA73 0 inStream 000000008C7C 00000040AA7C 0 outStream 000000008C86 00000040AA86 0 inSize 000000008C8D 00000040AA8D 0 outSize 000000008C95 00000040AA95 0 SetDecoderProperties 000000008CAA 00000040AAAA 0 properties 000000008CB5 00000040AAB5 0 LenDecoder 000000008CC0 00000040AAC0 0 m_Choice 000000008CC9 00000040AAC9 0 m_Choice2 000000008CD3 00000040AAD3 0 m_LowCoder 000000008CDE 00000040AADE 0 m_MidCoder 000000008CE9 00000040AAE9 0 m_HighCoder 000000008CF5 00000040AAF5 0 m_NumPosStates 000000008D04 00000040AB04 0 numPosStates 000000008D11 00000040AB11 0 posState 000000008D1A 00000040AB1A 0 LiteralDecoder 000000008D29 00000040AB29 0 m_Coders 000000008D32 00000040AB32 0 m_NumPrevBits 000000008D40 00000040AB40 0 m_NumPosBits 000000008D4D 00000040AB4D 0 m_PosMask 000000008D57 00000040AB57 0 numPosBits 000000008D62 00000040AB62 0 numPrevBits 000000008D6E 00000040AB6E 0 GetState 000000008D7B 00000040AB7B 0 prevByte 000000008D84 00000040AB84 0 DecodeNormal 000000008D91 00000040AB91 0 DecodeWithMatchByte 000000008DA5 00000040ABA5 0 matchByte 000000008DAF 00000040ABAF 0 Decoder2 000000008DB8 00000040ABB8 0 m_Decoders 000000008DC3 00000040ABC3 0 ConfusedByAttribute 000000008DD7 00000040ABD7 0 Attribute 000000008DE1 00000040ABE1 0 ___.netmodule 000000008DEF 00000040ABEF 0 PloutusService.NCR.resources 000000008E0C 00000040AC0C 0 PloutusService.Properties.Resources.resources 000000008E3A 00000040AC3A 0 PloutusService.ProjectInstaller.resources 00000000911E 00000040AF1E 0 Confuser v1.9.0.0 000000009182 00000040AF82 0 _CorExeMain 00000000918E 00000040AF8E 0 mscoree.dll 000000009583 00000040C383 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?> 0000000095BC 00000040C3BC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 000000009607 00000040C407 0 <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> 000000009649 00000040C449 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> 000000009681 00000040C481 0 <security> 000000009691 00000040C491 0 <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> 0000000096D7 00000040C4D7 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"/> 00000000971E 00000040C51E 0 </requestedPrivileges> 00000000973C 00000040C53C 0 </security> 00000000974D 00000040C54D 0 </trustInfo> File pos Mem pos ID Text ======== ======= == ==== 00000000975D 00000040C55D 0 </assembly> 000000008E67 00000040AC67 0 Can't Read 1 000000008E81 00000040AC81 0 ___.netmodule 0000000092A6 00000040C0A6 0 VS_VERSION_INFO 000000009302 00000040C102 0 VarFileInfo 000000009322 00000040C122 0 Translation 000000009346 00000040C146 0 StringFileInfo 00000000936A 00000040C16A 0 000004b0 000000009382 00000040C182 0 FileDescription 0000000093A4 00000040C1A4 0 PloutusService 0000000093CA 00000040C1CA 0 FileVersion 0000000093E4 00000040C1E4 0 1.0.0.0 0000000093FA 00000040C1FA 0 InternalName 000000009414 00000040C214 0 PloutusService.exe 000000009442 00000040C242 0 LegalCopyright 000000009476 00000040C276 0 2013 00000000948A 00000040C28A 0 OriginalFilename 0000000094AC 00000040C2AC 0 PloutusService.exe 0000000094DA 00000040C2DA 0 ProductName 0000000094F4 00000040C2F4 0 PloutusService 00000000951A 00000040C31A 0 ProductVersion 000000009538 00000040C338 0 1.0.0.0 00000000954E 00000040C34E 0 Assembly Version 000000009570 00000040C370 0 1.0.0.0
=== DOWNLOAD ===