Analysis Date2018-06-10 04:47:01
MD5ff854ed257cb1c893e8918252e45f8d2
SHA10b8a608aaffccf46e5e6f32a777270f4d3977b77

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section7Bb1fhoS md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section1rt61pNd md5: 90cd8cfb46629a6d247ae06cc943161c sha1: d0b11089271169c11f23384522f0441baca24ff2 size: 316416
Section.rsrc md5: b8e07dc7c74b81022f3697fd91be1e18 sha1: 9b4e0d06ca28e62b6b80f1102fd18d1eb43f09bd size: 15360
Timestamp2014-07-02 09:20:44
VersionLegalCopyright: Copyright (C) 2014
InternalName: SoftonicDownloader.exe
FileVersion: 1.41.2.1
CompanyName: Softonic
ProductName: Softonic Downloader
ProductVersion: 1.41.2.1
FileDescription: Softonic Downloader
OriginalFilename: SoftonicDownloader.exe
PackerUPX -> www.upx.sourceforge.net
PEhash6aec6a41f92ccb42d6a16dfc14fd30f6acb1a954
IMPhashaab36afeb968b65be092351d12c8f52f
AV360 Safeno_virus
AVAd-Awareno_virus
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)no_virus
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftno_virus
AVEset (nod32)no_virus
AVFortinetRiskware/Agent
AVFrisk (f-prot)no_virus
AVF-Secureno_virus
AVGrisoft (avg)no_virus
AVIkarusPUA.Softonic
AVK7Unwanted-Program ( 0040f81d1 )
AVKasperskyDownloader.Win32.Agent.bxib
AVMalwareBytesPUP.Optional.Softonic.A
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)no_virus
AVNormanno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Users\Phil\AppData\Local\Temp\0b8a608aaffccf46e5e6f32a777270f4d3977b77.exe

Creates FileC:\Users\Phil\AppData\Local\Temp\0b8a608aaffccf46e5e6f32a777270f4d3977b77.exe
Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates Mutex

Process
↳ C:\Windows\explorer.exe

Network Details:

DNSphotoscape.sd.softonic.com
Type: A
46.28.209.70
HTTP GEThttp://photoscape.sd.softonic.com/63689/universaldownloader-prefetch
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) SoftonicDownloader/1.41.2
HTTP GEThttp://photoscape.sd.softonic.com/63689/universaldownloader-prefetch
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) SoftonicDownloader/1.41.2
HTTP GEThttp://photoscape.sd.softonic.com/63689/universaldownloader-prefetch
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) SoftonicDownloader/1.41.2
HTTP GEThttp://photoscape.sd.softonic.com/63689/universaldownloader-prefetch
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) SoftonicDownloader/1.41.2
Flows TCP192.168.1.1:1032 ➝ 46.28.209.70:80
Flows TCP192.168.1.1:1033 ➝ 46.28.209.70:80
Flows TCP192.168.1.1:1034 ➝ 46.28.209.70:80
Flows TCP192.168.1.1:1035 ➝ 46.28.209.70:80

Raw Pcap
0x00000000 (00000)   47455420 2f363336 38392f75 6e697665   GET /63689/unive
0x00000010 (00016)   7273616c 646f776e 6c6f6164 65722d70   rsaldownloader-p
0x00000020 (00032)   72656665 74636820 48545450 2f312e31   refetch HTTP/1.1
0x00000030 (00048)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000040 (00064)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000050 (00080)   656e2d75 730d0a41 63636570 742d456e   en-us..Accept-En
0x00000060 (00096)   636f6469 6e673a20 677a6970 2c206465   coding: gzip, de
0x00000070 (00112)   666c6174 650d0a55 7365722d 4167656e   flate..User-Agen
0x00000080 (00128)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x00000090 (00144)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000a0 (00160)   20372e30 3b205769 6e646f77 73204e54    7.0; Windows NT
0x000000b0 (00176)   20362e31 3b20574f 5736343b 20547269    6.1; WOW64; Tri
0x000000c0 (00192)   64656e74 2f342e30 3b20534c 4343323b   dent/4.0; SLCC2;
0x000000d0 (00208)   202e4e45 5420434c 5220322e 302e3530    .NET CLR 2.0.50
0x000000e0 (00224)   3732373b 202e4e45 5420434c 5220332e   727; .NET CLR 3.
0x000000f0 (00240)   352e3330 3732393b 202e4e45 5420434c   5.30729; .NET CL
0x00000100 (00256)   5220332e 302e3330 3732393b 204d6564   R 3.0.30729; Med
0x00000110 (00272)   69612043 656e7465 72205043 20362e30   ia Center PC 6.0
0x00000120 (00288)   2920536f 66746f6e 6963446f 776e6c6f   ) SoftonicDownlo
0x00000130 (00304)   61646572 2f312e34 312e320d 0a486f73   ader/1.41.2..Hos
0x00000140 (00320)   743a2070 686f746f 73636170 652e7364   t: photoscape.sd
0x00000150 (00336)   2e736f66 746f6e69 632e636f 6d0d0a43   .softonic.com..C
0x00000160 (00352)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000170 (00368)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f363336 38392f75 6e697665   GET /63689/unive
0x00000010 (00016)   7273616c 646f776e 6c6f6164 65722d70   rsaldownloader-p
0x00000020 (00032)   72656665 74636820 48545450 2f312e31   refetch HTTP/1.1
0x00000030 (00048)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000040 (00064)   63636570 742d4c61 6e677561 67653a20   ccept-Language: 
0x00000050 (00080)   656e2d75 730d0a41 63636570 742d456e   en-us..Accept-En
0x00000060 (00096)   636f6469 6e673a20 677a6970 2c206465   coding: gzip, de
0x00000070 (00112)   666c6174 650d0a55 7365722d 4167656e   flate..User-Agen
0x00000080 (00128)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x00000090 (00144)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000a0 (00160)   20372e30 3b205769 6e646f77 73204e54    7.0; Windows NT
0x000000b0 (00176)   20362e31 3b20574f 5736343b 20547269    6.1; WOW64; Tri
0x000000c0 (00192)   64656e74 2f342e30 3b20534c 4343323b   dent/4.0; SLCC2;
0x000000d0 (00208)   202e4e45 5420434c 5220322e 302e3530    .NET CLR 2.0.50
0x000000e0 (00224)   3732373b 202e4e45 5420434c 5220332e   727; .NET CLR 3.
0x000000f0 (00240)   352e3330 3732393b 202e4e45 5420434c   5.30729; .NET CL
0x00000100 (00256)   5220332e 302e3330 3732393b 204d6564   R 3.0.30729; Med
0x00000110 (00272)   69612043 656e7465 72205043 20362e30   ia Center PC 6.0
0x00000120 (00288)   2920536f 66746f6e 6963446f 776e6c6f   ) SoftonicDownlo
0x00000130 (00304)   61646572 2f312e34 312e3220 536f6674   ader/1.41.2 Soft
0x00000140 (00320)   6f6e6963 446f776e 6c6f6164 65722f31   onicDownloader/1
0x00000150 (00336)   2e34312e 320d0a48 6f73743a 2070686f   .41.2..Host: pho
0x00000160 (00352)   746f7363 6170652e 73642e73 6f66746f   toscape.sd.softo
0x00000170 (00368)   6e69632e 636f6d0d 0a436f6e 6e656374   nic.com..Connect
0x00000180 (00384)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x00000190 (00400)   0a0d0a                                ...

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 36363a35 3335370d 0a0d0a3c   00.166:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a313134 61373133 342d3335 33312d34   :114a7134-3531-4
0x00000280 (00640)   3164632d 38353937 2d336437 34303864   1dc-8597-3d7408d
0x00000290 (00656)   63396165 303c2f77 73613a4d 65737361   c9ae0</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3637 61333838   >urn:uuid:67a388
0x00000340 (00832)   31642d38 6239382d 34613861 2d386436   1d-8b98-4a8a-8d6
0x00000350 (00848)   632d6435 66313634 64366234 38343c2f   c-d5f164d6b484</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>


Strings
.
.p
.
.
..I
J

0c0a04b0
1.41.2.1
CompanyName
Copyright (C) 2014
FileDescription
FileVersion
InternalName
LegalCopyright
<<<Obsolete>>
OriginalFilename
ProductName
ProductVersion
Softonic
Softonic Downloader
SoftonicDownloader.exe
StringFileInfo
Translation
VarFileInfo
VS_VERSION_INFO
>]?'[=~_
      
01/09/13E
0{5|Z04
061108000000Z
0,D^a[
'0hCjc
0=-n%&
0N[_}0
0,n(:-6
<0o'[i
0ShQ9!
0`V;^X
0>;XIx
\0:X!O
0)xx W
[0Y0W0U
0y~Aa4
0z2^E.
100208000000Z
'/^1@3=
130703000000Z
151002235959Z0
16B~}L
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
1G?[~Q0
1<(i(.
1=k-Pb
1O:!18> <
1q=Vqx
1"R.[M
1rt61pNd
}+1)sx
200207235959Z0
2$0:V"
2f^ ?k
2!O*LE
-,2P.WrB
2^&Q0jN
{?_$(~2s
2Terms of use at https://www.verisign.com/rpa (c)101.0,
 2w^Fk
}2'W%G
])]34J
360716235959Z0
3az j?xH
3E?0nF
3fMlJ7
3JY(I+;
3(!L[~
~3o]s2;
"3+R\{,
3wjQc"
3y*IJqN
3+YO..
4"22=Z
]4?F8-V 
4hv!f3
4(Hy|[?{4
4&Mj*uK
4o$afm
4*oPI`
[4,q.8
	_4sx@
4x@!t61oT
4y|;	1
`^51Y<7
?\56	r
5d cdz
5Digital ID Class 3 - Microsoft Software Validation v21
5e;6_b
5Ec|2i;
5fiGz,,*
5jfopF[
"_5_L}"
5lf'9,
%5p@%DVE
|5QBX/,
5r)o;!
5Sazg&
5uye_'
?6|?#"
6>2&Dr-
66Iu+@j
`6/C3.N
6][~D!:=
6dO&F/
6}dRz,
:6Fb@;~
#6jZG8
6,k(uTv}
6LF!3f
#6~LL7
-(6?Ngs
6Q4x{&>fr
6}u{T-
6y;kAk
/_70k<
7294fT
7){9_>
}[7B]>
7Bb1fhoS
^7H!:i
+7iFg&
^'7JE8P
~7jU`j
7LMI)!
^7l,Pn
7.&ME{i
7^=*N0qB
@~!7";oP4/
7SCIB+i
7s[;\pgY
~7)WGqO
81aS!7
8Bnp&8M4 
8@		|C
	,8?CS
8iT	\@(9W
8Ou	[X
8qqx7y=
=%8q.@:R
8rLIup
.8[Sv(
8V!mw+
#8wk,{	
"8WtFn
(8yrP!
91U1j5
9+7[HyD
9dje?z
9\K>Eyej
9L7Hv&
9l$\w_
9++RF 
9TyMx1
9~+w;pj&
9Y"Nw	
9/z5!4v
9*ZxZR&V
A0&@xp
\a7ABH
A b*NW|=
|aD'?1
aDHWd>U
Adobe Fireworks CS5q
Adobe ImageReadyq
ADVAPI32.dll
[Aef|H$
AeM;t4
AFA!Kr!v
a':h|h
A+I23YJ
Aig!GF
Ak-&'mp
aOCOoB
    </application>
    <application>
A_RGC4
-ASMSI]u-
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.1.1.0" processorArchitecture="X86" name="Softonic.UniversalDownloader" type="win32"></assemblyIdentity><description>Universal Downloader Download Helper.</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
?Au#\=.
.aU9QUC
AZkGoce
>b*-'*
\/^<&b
b1=9Hb
b!a#LS
	Barcelona1
b_b1Fm
%BBF%C
bdIX4P
[BEGIN DATA SEGMENT][KEY]WIDTH[VALUE]650[ENDVALUE][KEY]HEIGHT[VALUE]450[ENDVALUE][KEY]URL[VALUE]http://photoscape.sd.softonic.com/63689/universaldownloader-prefetch[ENDVALUE][KEY]NOINT_TITLE[VALUE]No se ha detectado conexi
bFA%)Y
[BINARY_ENDVALUE][BINARY_KEY]MIN_BUTTONS[BINARY_VALUE]
[BINARY_ENDVALUE][BINARY_KEY]MIN_LOGO[BINARY_VALUE]
[BINARY_ENDVALUE][BINARY_KEY]MIN_PROGRESS[BINARY_VALUE]
[BINARY_ENDVALUE][BINARY_KEY]MIN_WINDOW[BINARY_VALUE]
[BINARY_ENDVALUE][BINARY_KEY]PROGRESS[BINARY_VALUE]
[BINARY_ENDVALUE][END DATA SEGMENT]
Bi;y{fq
Bjn+.K
B^k'_{
B<nDif
_}*=bs
BtjL`$J3
'buynBF
bv4NZh
B_wi7c
):C=7s
CDR0E"
@CEwZ6>
CflZNy
C`.lVa6
'\"`CO
COMCTL32.dll
  </compatibility></assembly>P
]cPAW#
`C~pr:
ctate e int
ct`Y5q`
Cu3ORd#S
cu+Hl\
cvluAt
@C]|&X[
*C$zkEM@
Cz'U@~7
<(d% &
D\2qPW"l
#d4eh'/
D~4tCBkH
DC "<.Vp{
|Dd[ENk
D^{gdr$
.)D$H)
dIDATX
%=DLag
dn[FW-
-'	Dqhi
D'|=RT
ds=ibm
D$t+D$\
D$t#D$h
,$du"0?
dv=DlO
dv*.va
DYp$vG
dYTt;D
DZ#9t F
e2,l7/
E3`=!I
e7tLK>4g
e	9dcs
E+~%:A
eajVhK]
e}E=J 
EelJ	K
eH.2Ol
|[EhWh{
$]">eI=>J9,)
e!!ir!
ek#[#d
E }l"aV
E-mV|#
]e"N}\
EnumProcesses
|enytr@
eOCOoB
`e%!Q+
Eq=cwC7
^`'ESb5N
*E[w!-
\|`EX`
E!XAw7m
ExitProcess
ezFoQ)
!F3F_CN
]f+5bc
!f=5so
F@67MJ
f6;&]b
f6BNhP
*F9WLKw|
Fa-{%`&
FHIX*v
FHZwVBW
FillRect
)F]J!j
}f\l\U
fN)YomJ
FreeSid
fRxDgSx
fSxRich
Fs&Y=v
f/tf-pW?1
F)tIi#
Fu(@8X
fvo~K$F
]@,FW 
fW>uTO
\FYl1RXB
F[(yy(G?
;$g2+~
G,a .<ig
GDI32.dll
GdipFree
gdiplus.dll
GetAdaptersInfo
GetProcAddress
gfe	R 
g|	FUy
G>i|][
G^);<J
G*':  K\)
G@kjQtt
>^gM;QN
GQ+%!h!
Gqnqq`W,
g}qvwJ	p
$gt30Tk
}gwfvw
GwvLX$
gy_D;K
}gzM6WY$N
+`)h!|
h0Zm?.
h4\!Go
h78V=W
h|}a*q
H|+%D<
@=Hfde
{=hFDM
hG>rI4M
!HhIT,
H;/J.'(#
HM@aXi
ho6bab]Q`
h@QeE%W
hQf>;d
?'hrG3
#http://crl.verisign.com/pca3-g5.crl04
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
#http://logo.verisign.com/vslogo.gif0
#http://logo.verisign.com/vslogo.gif04
http://ocsp.verisign.com0
http://ocsp.verisign.com0;
https://www.verisign.com/cps0*
https://www.verisign.com/rpa0
HYZmyl/
I4V.r0
i.74GL
i/8,\u
I];8zQ8
I\9k|vX
ID_F{y
IdpcQo
I<e3hJ
$:.i/F
If&m_n
I~gdp)UXb
:IgQ]3|
&*iK:<$
i})lCn
	image/gif0!0
I}mgv|
IN1B	'=f
InternetOpenW
IPHLPAPI.DLL
iPysjC
I*}s|3I
>(I]$T
i:}T-A
i+"wj[m
'$>j*2
}j7E?N
j7|ncm+m
j8CHH""a"
{jalae^t
JAPs"\
}J+at;
J	d'J#
jD%nP.Q
j+Er_;
JFOv.4
/@J%]g?4
@~JG Q
JhdUoj
JH`<hkeQ
?j 	K(
j+MH`&z
j\_n W
		Jt{E9
j$U+{=
(jUp$UpB
j=ux]d
,|j_*z\[{V/
.K1kh_
K	)A$$
Ka*:{U
kd8w5a
KERNEL32.DLL
kE*W{)B
KgO<#{x
KgXhhdn
KH^	[1
{;KH!mC
*!?k@i
k JGEu
k[L"a#~ 
	K&M~^
[kp#}e@K
K?u%wj 
K\X3[\D
L;3~i 
L9jRNm
Lbq{M^
lhB6QXrg
lHCJ5J
liv{E<
L*LGV~
lo*	7|K
LoadLibraryA
LT5>pv{
lt[c="
(ltL$s
(LW_e)@]
lxjdOp.
M2BW2G
Ma\A!1
m)AU*.,SQ]
MdS	WAJ
M$dZe>o,
]M=;^=E
M$G'9I
mK4K'F"t5
motbi$A7
Mp ije
mRfFQ6
MwGOi6*"
+MYwom
-.N97&
n a Internet[ENDVALUE][KEY]NOINT_MSG[VALUE]Se necesita conexi
n a Internet para descargar el programa. Por favor, con
n/-~am
NbZDfi
ncnz~J%
n de PhotoScape[ENDVALUE][KEY]MIN_BUTTON_SIZE_X[VALUE]18[ENDVALUE][KEY]MIN_BUTTON_SIZE_Y[VALUE]17[ENDVALUE][KEY]MIN_PROGRAM_SIZE_X[VALUE]210[ENDVALUE][KEY]MIN_PROGRAM_SIZE_Y[VALUE]20[ENDVALUE][KEY]MIN_PROGRESS_TEXT_SIZE_X[VALUE]210[ENDVALUE][KEY]MIN_PROGRESS_TEXT_SIZE_Y[VALUE]20[ENDVALUE][KEY]MIN_PROGRESS_BAR_SIZE_X[VALUE]222[ENDVALUE][KEY]MIN_PROGRESS_BAR_SIZE_Y[VALUE]20[ENDVALUE][KEY]MIN_MINIMIZE_X[VALUE]190[ENDVALUE][KEY]MIN_MINIMIZE_Y[VALUE]5[ENDVALUE][KEY]MIN_RESTORE_X[VALUE]208[ENDVALUE][KEY]MIN_RESTORE_Y[VALUE]5[ENDVALUE][KEY]MIN_LOGOTYPE_X[VALUE]20[ENDVALUE][KEY]MIN_LOGOTYPE_Y[VALUE]30[ENDVALUE][KEY]MIN_PROGRAM_X[VALUE]18[ENDVALUE][KEY]MIN_PROGRAM_Y[VALUE]55[ENDVALUE][KEY]MIN_PROGRESS_TEXT_X[VALUE]19[ENDVALUE][KEY]MIN_PROGRESS_TEXT_Y[VALUE]91[ENDVALUE][KEY]MIN_PROGRESS_BAR_X[VALUE]9[ENDVALUE][KEY]MIN_PROGRESS_BAR_Y[VALUE]75[ENDVALUE][BINARY_KEY]SPLASH[BINARY_VALUE]
NGtN3QU
N!'HGj
	nH/_k
Njj-l"
}Nmc"vm
	NmerV
ntalo de nuevo. [ENDVALUE][KEY]PROGRESS_BAR_X[VALUE]20[ENDVALUE][KEY]PROGRESS_BAR_Y[VALUE]99[ENDVALUE][KEY]PROGRESS_BAR_HEIGHT[VALUE]30[ENDVALUE][KEY]START_HIDDEN[VALUE]true[ENDVALUE][KEY]LOADING_DIALOG_TEXT[VALUE]Por favor, espere...[ENDVALUE][KEY]LOADING_DIALOG_TITLE[VALUE]Descarga e instalaci
Nw6Pz=
N>^w!sF
NWZU~hi
['#ny$
n{YGqQyvCh
o+0.'2
o1!1bn
O5>$ok
O?c \ n
}OCOo"
}OCOoO
oDTef`
o#?FP&
ogKbvI
^;oH#D
o'-Hym
o (@&J
O\[KgO
ole32.dll
OLEAUT32.dll
OleCreate
]|"O_QG7
(.OqOO;
os$r35
	otB)0sS
Ou1L6)7
>O/uS~
"oWo]M
o/XOL!l
oyvAYY
\p-'#}
p2tzej
P5"(1i
$pa`C(
PathAppendW
pBc/AD
PBRL#\
,[PCF*
~Pdg;U
P-dIsY
P?DYx7
=P	g-Z
P]h63UL
+_PJ#n
$(pj:xud
:pK6&t
po=-L<Zp
-pp+[6
PSAPI.DLL
,P/tX<1
pWh1's
*Pwhq.f
P!ZjRi(+RP
q1W'2-
Q+29\pE
;Q)'3SYM
?Q%6KO
Q7f4OZ;
Q7Yl'7
QatjaL
qBT8+{]
Q>`CAaX??
/Qcf$Kk
qC?PH,
QCtz03
"qdZQhh
%&|Qho
qhs7}hJGp
q^>IP#S
q\*"L=
q$Lk&j\
>QyBhEa
QZ+r{6
r3n;jrH?
r4IPDDl
R5J"\s
R5X;F4
:r"8d>
r8.o(Fl
"_R8v($
^rB<Tf
':RC:b
:'rD#W
RE7fF'
|]rEi9
R!eYW=
R`FRYR
@RgXbP
+RJBFv
rk]1=)Oy~
^rmw-]
#r.n	M
Rp~5}y}
RPCRT4.dll
`RP:E9
rQT&;y$
r.]s1#
RUF_>X
RVBusi
(R%w"4
"r\}^zz
[>S0Vy}.
\s2fwl
s2xj7-
S3IB]vBik
SaI&@4
sDyQs0
Se	Qe 7
sfIy"%
S#gJ&H5
SHELL32.dll
SHGetMalloc
SHLWAPI.dll
S/>hYB
&{Sk	8b
s`)L$4
sL"RiA
s,.	[n
Softonic International0
Softonic International1>0<
S~:ouw
*:>	SQ
?@S\rCOB
'!S.Rx
      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
      <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>
/s;%WYj4
#%<sX#
s,Yk'?
S$YmA'
syULu-
T2Lj;9:
T4\(-e!
T4XdqmT
t7|Y*|[-
t/~9i	/
TA[T .ft<
TAu|4"
%tDZ^.
tEXtCreation Time
TextOutW
tEXtSoftware
tFr7Se
"t;_/g
 TG4}E
!This program cannot be run in DOS mode.
T>{"!I
:(TK#[=
/t',<o[
To1X^	
'to!WX
T*p/&b/ar
t~-*Sb=
t$t#t$l
tuUFc:
twbO9J
'TYo[L
`T]|Zl
U$5r#p
UcqY4C
UdqmGg
u^F;h~
U\g)O5
UHaJri
uH}_ZV
U`{]MK;
\^!unW
}	U]o8
URLDownloadToFileW
urlmon.dll
USER32.dll
UtI)o%
UuidCreate
uv	>o4
v_[;@/
%VeriSign Class 3 Code Signing 2010 CA
%VeriSign Class 3 Code Signing 2010 CA0
<VeriSign Class 3 Public Primary Certification Authority - G50
VeriSign, Inc.1
VeriSignMPKI-2-80
VeriSign Trust Network1:08
VeriSign Trust Network1;09
VerQueryValueW
VERSION.dll
~]v&Ev
$`V~gQ
 "=!V\h
vi416l
VirtualAlloc
VirtualFree
VirtualProtect
,v	IYa
^+V;:j}
V^}jC^
VK@=#~i-
?v;N!EB
vNMm!7
}V;N[P
*vq)UK
v!%uA{
:VUhVp
<Vun.w
vWWO]%
+++w.^
	|%#W.
w2BA87V
w3T{Cz
_W@4;R
W(b/@k
\Wc!h(
We!5sa
WeX? E
WhC?p?
WININET.dll
:{@WK~
WLDAP32.dll
Wl#o7L
W%mO<B
W=M<Plk
w_n!n(
{:W+np=
wsd3;|
WSOCK32.dll
wU2ZxH^
WXk"sM
x|&4rZ
X9;vY 
Xbo+x:_u
xilC8b
xMvJeN
xoxY+ =^
XprB<$J=
XPTPSW
XqD$Kn8
\;XR4i
xsqW&)z
Xt8#,~
XX+F--
{X({X&|Z,|Y*
&xyN_P
XZ}	fq
`*{X'|Z+|Y*
=[?+'y
|y/;0H
%y5#1d
y6/j#s
/Y|9oF
y$9}Ue9
(Y%A8.
ybi6^.
y Eiam
%Yf(T2N
yhWk0;
y"/-ii
<:YinRX
Y+j2Fg
Y'@j<M
YmfUNl
Yok#^R
-yoxI7
y;>Ppgp
yR{/MI,
^,Yst`
YsU?H>
YUJOb5
YXRUV G}
[)|Y*|Y+
YZ5/UCe
z]1@EMB
z^2%M-
z5,0xh
():Z>7;]
z,9D-1
zA;j&h
/zcXI9
:zd.|g
zdR	NCZ
z,fioD
*(ZI.8
!ZI|xXhe
Z=:KoFv
Z":M`c]
'ZM`fn
$Zqj:m
],zr^w
`/Zt#`
Z@,TqS
z#Xo|H
zzk7'mS