Analysis Date2014-04-24 16:53:21
MD5f68e55faa6bda4be0777bf6423f99f95
SHA15088d3738f70bf3a3556352da8d72a8373bb0225

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
SectionUPX0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
SectionUPX1 md5: 9dfd3be31fbf6b27b91d136f3f1f5b48 sha1: e513fdf1f31b19370a6181eafda3b99d9969c00e size: 464896
Section.rsrc md5: e4a53cf4e1557af54777d28ca839bf8f sha1: e72968c5e04d510f406fd3bfe395781991d5d9ff size: 27136
Timestamp1992-06-19 22:22:17
VersionLegalCopyright:
InternalName:
FileVersion: 1.0.0.0
CompanyName: Arquivo Solicitado
LegalTrademarks:
Comments:
ProductName: Arquivo Solicitado
ProductVersion: 1.0.0.0
FileDescription: Arquivo Solicitado
OriginalFilename:
PackerUPX -> www.upx.sourceforge.net
PEhasha127f182d1684cbd991463b0eaf5c5c8e5cbae5a
IMPhash43b1a17fdce61c34016138a15af1a062
AVavgAdware Generic_c.SQ

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Desktop\CONTAPRIME.url
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSgoo.gl

Network Details:

DNSgoo.gl
Type: A
62.253.3.89
DNSgoo.gl
Type: A
62.253.3.109
DNSgoo.gl
Type: A
62.253.3.113
DNSgoo.gl
Type: A
62.253.3.94
DNSgoo.gl
Type: A
62.253.3.88
DNSgoo.gl
Type: A
62.253.3.93
DNSgoo.gl
Type: A
62.253.3.99
DNSgoo.gl
Type: A
62.253.3.108
DNSgoo.gl
Type: A
62.253.3.84
DNSgoo.gl
Type: A
62.253.3.118
DNSgoo.gl
Type: A
62.253.3.114
DNSgoo.gl
Type: A
62.253.3.123
DNSgoo.gl
Type: A
62.253.3.104
DNSgoo.gl
Type: A
62.253.3.103
DNSgoo.gl
Type: A
62.253.3.98
DNSgoo.gl
Type: A
62.253.3.119
HTTP GEThttp://goo.gl/HzjJkR
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 62.253.3.89:80

Raw Pcap
0x00000000 (00000)   47455420 2f487a6a 4a6b5220 48545450   GET /HzjJkR HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000030 (00048)   67653a20 656e2d75 730d0a41 63636570   ge: en-us..Accep
0x00000040 (00064)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000050 (00080)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20362e30 3b205769 6e646f77   MSIE 6.0; Window
0x00000090 (00144)   73204e54 20352e31 3b205356 313b202e   s NT 5.1; SV1; .
0x000000a0 (00160)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000b0 (00176)   37290d0a 486f7374 3a20676f 6f2e676c   7)..Host: goo.gl
0x000000c0 (00192)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000d0 (00208)   65702d41 6c697665 0d0a0d0a            ep-Alive....


Strings
.
@
.+
.
..jOP.
..
.?1
4$
...
...6
o8
X..
4w
>o.>..
.G.
.
_.
..
....$.....M
&.e
.&.
<.
.j..
.
.g;..y.
.
.
..
.
g
?_.I
.
f.
.^..
..
..
..
.
..
.
..<
.
..
"@.
......
@
.+
.
..jOP.
..
.?1
4$
...
...6
o8
X..
4w
>o.>..
.G.
.
_.
..
....$.....M
&.e
.&.
<.
.j..
.
.g;..y.
.
.
..
.
g
?_.I
.
f.
.^..
..
..
..
.
..
.
..<
.
..
"@.
.....
041604E4
1.0.0.0
333f3
Arquivo Solicitado
BBABORT
BBALL
BBCANCEL
BBCLOSE
BBHELP
BBIGNORE
BBNO
BBOK
BBRETRY
BBYES
BLUEGLASS_BUTTON
BLUEGLASS_CHECKBOX
BLUEGLASS_CHECKLIST
BLUEGLASS_PROGRESSBAR
BLUEGLASS_RADIOBUTTON
BLUEGLASS_SCROLLBAR_BUTTON
BLUEGLASS_SCROLLBAR_TRACK
BLUEGLASS_SIDECHENNEL_BAR
BLUEGLASS_SIDECHENNEL_HANDLE
BLUEGLASS_TAB
BLUEGLASS_TAB_LINE
BLUEGLASS_TITLEBTN
BLUEGLASS_TITLE_CLIENT
BLUEGLASS_TITLE_LEFT
BLUEGLASS_TITLE_RIGHT
BLUEGLASS_TRACKBAR_BAR
BLUEGLASS_TRACKBAR_SLIDER
BLUEGLASS_TRACKBAR_SLIDER_V
Comments
CompanyName
DBEDIT
DBGARROW
DBINSERT
DBMULTIARROW
DBMULTIDOT
DBNAV_BUTTON
DBN_CANCEL
DBN_DELETE
DBN_EDIT	DBN_FIRST
DBN_INSERT
DBN_LAST
DBN_NEXT
DBN_POST	DBN_PRIOR
DBN_REFRESH
DEEPBLUE_BUTTON
DEEPBLUE_CHECKBOX
DEEPBLUE_CHECKLIST
DEEPBLUE_PROGRESSBAR
DEEPBLUE_RADIOBUTTON
DEEPBLUE_SCROLLBAR_BUTTON
DEEPBLUE_SCROLLBAR_TRACK
DEEPBLUE_SIDECHENNEL_BAR
DEEPBLUE_SIDECHENNEL_HANDLE
DEEPBLUE_TAB
DEEPBLUE_TAB_LINE
DEEPBLUE_TITLEBTN
DEEPBLUE_TITLE_CLIENT
DEEPBLUE_TITLE_LEFT
DEEPBLUE_TITLE_RIGHT
DEEPBLUE_TRACKBAR_BAR
DEEPBLUE_TRACKBAR_SLIDER
DEEPBLUE_TRACKBAR_SLIDER_V
DLGTEMPLATE
DVCLAL
f3fff
FileDescription
FileVersion
FONTCOMBO_DEVICE_FNT
FONTCOMBO_TRUETYPE_FNT
InternalName
LegalCopyright
LegalTrademarks
MACOS_BUTTON
MACOS_CHECKBOX
MACOS_CHECKLIST
MACOS_COMBOBOX_BUTTON
MACOS_FORM_BACKGROUND
MACOS_MENU_BAR
MACOS_MENU_SELECT
MACOS_PROGRESSBAR
MACOS_RADIOBUTTON
MACOS_SCROLLBAR_BUTTON
MACOS_SCROLLBAR_TRACK
MACOS_SCROLLBUTTON
MACOS_SIDECHENNEL_BAR
MACOS_SIDECHENNEL_HANDLE	MACOS_TAB
MACOS_TAB_LINE
MACOS_TITLEBTN
MACOS_TITLE_CLIENT
MACOS_TITLE_LEFT
MACOS_TITLE_RIGHT
MACOS_TRACKBAR_BAR
MACOS_TRACKBAR_SLIDER
MACOS_TRACKBAR_SLIDER_V
MAINICON
MDI_CONTROL_BUTTON
MENU_CHECKED
MORE_SCROLLBUTTON
MSGDLG
MSNPOPFORM
<<<Obsolete>>
OriginalFilename
PACKAGEINFO
PANEL_BUTTON
PREVIEWGLYPH
ProductName
ProductVersion
PROTEIN_BUTTON
PROTEIN_CHECKBOX
PROTEIN_CHECKLIST
PROTEIN_FORM_BACKGROUND
PROTEIN_PROGRESSBAR
PROTEIN_RADIOBUTTON
PROTEIN_SCROLLBAR_BUTTON
PROTEIN_SCROLLBAR_TRACK
PROTEIN_SIDECHENNEL_BAR
PROTEIN_SIDECHENNEL_HANDLE
PROTEIN_TAB
PROTEIN_TAB_LINE
PROTEIN_TITLEBTN
PROTEIN_TITLE_CLIENT
PROTEIN_TITLE_LEFT
PROTEIN_TITLE_RIGHT
PROTEIN_TRACKBAR_BAR
PROTEIN_TRACKBAR_SLIDER
PROTEIN_TRACKBAR_SLIDER_V
SIDECHANNEL_BTN
STATUSBAR_HANDLE
StringFileInfo
TFORM10
TFORM2
TFORM3
TFORM5
TFORM6
TFORM7
TFORM8
TFORM9
TFRMMGR
TFRMMSNPOPFORM
TFRM_NAVEGA
TLOGINDIALOG
TMAINSCREEN
TPASSWORDDIALOG
Translation
TSUIARROWBUTTON
TSUIBUILTINFILETHEME
TSUIBUTTON
TSUICHECKBOX
TSUICHECKGROUP
TSUICHECKLISTBOX
TSUICOLORBOX
TSUICOMBOBOX
TSUICOMBOBOXEX
TSUICONVERTOR
TSUIDBCHECKBOX
TSUIDBCOMBOBOX
TSUIDBEDIT
TSUIDBGRID
TSUIDBIMAGE
TSUIDBLISTBOX
TSUIDBLOOKUPCOMBOBOX
TSUIDBLOOKUPLISTBOX
TSUIDBMEMO
TSUIDBNAVIGATOR
TSUIDBRADIOGROUP
TSUIDIRECTORYLISTBOX
TSUIDRAWGRID
TSUIDRIVECOMBOBOX
TSUIEDIT
TSUIFILELISTBOX
TSUIFILETHEME
TSUIFILTERCOMBOBOX
TSUIFONTCOMBOBOX
TSUIFONTSIZECOMBOBOX
TSUIFORM
TSUIGROUPBOX
TSUIIMAGEBUTTON
TSUIIMAGEPANEL
TSUIINPUTDIALOG
TSUILISTBOX
TSUILISTVIEW
TSUIMAINMENU
TSUIMASKEDIT
TSUIMDIFORM
TSUIMEMO
TSUIMESSAGEDIALOG
TSUIMSNPOPFORM
TSUINUMBEREDIT
TSUIPAGECONTROL	TSUIPANEL
TSUIPASSWORDDIALOG
TSUIPOPUPMENU
TSUIPROGRESSBAR
TSUIRADIOBUTTON
TSUIRADIOGROUP
TSUISCROLLBAR
TSUISIDECHANNEL
TSUISKINCONTROL
TSUISKINFORM
TSUISPINEDIT
TSUISTATUSBAR
TSUISTRINGGRID
TSUITABCONTROL
TSUITHEMEMANAGER
TSUITITLEBAR
TSUITOOLBAR
TSUITRACKBAR
TSUITREEVIEW
TSUIUNCONVERTOR
TSUIURLLABEL
VarFileInfo
VS_VERSION_INFO
WINXP_BUTTON
WINXP_CHECKBOX
WINXP_CHECKLIST
WINXP_COMBOBOX_BUTTON
WINXP_PROGRESSBAR
WINXP_RADIOBUTTON
WINXP_SCROLLBAR_BUTTON
WINXP_SCROLLBAR_TRACK
WINXP_SCROLLBUTTON
WINXP_SIDECHENNEL_BAR
WINXP_SIDECHENNEL_HANDLE	WINXP_TAB
WINXP_TAB_LINE
WINXP_TITLEBTN
WINXP_TITLE_CLIENT
WINXP_TITLE_LEFT
WINXP_TITLE_RIGHT
WINXP_TRACKBAR_BAR
WINXP_TRACKBAR_SLIDER
WINXP_TRACKBAR_SLIDER_V
 !"#$%
/#@*|$
"""""/
&. &|>#
%&'()*
^0./}*}
)\0,::
$`0.@%
00pt~)Hb
-0-(0%()(v
0()(2)
020611104639Z
 %0.2d	
,048X\
05.0oZ@
079:BEchgom{w
090303125356Z
0 9$F_[
09_STORE
0;BR$-
	0[!-D
+;0D`u
0	fp12
0GHIJKLMNO 
^0Gt!J
~!0I8/
0LDD4FMu
0M@D3V
<,0OG-y
0pLQ@om
0.>_Pr
0$_PXR
|/0qqaqw#
0r=<9w9i
0SKX66
0W@PPI
]0x$ja
0xK@v7 
1234567890ABCZ
'127.0
130808051934Z
140214015102Z0
140808051934Z0
14?<8,*
14^N.BO
1.8+f{b
1[C4Z]
$%@1H0]
1hO7l50pQ
%1#!@j
1lUBA!
1N+.H'
1oqom<
1PixTsP$
`1@$Q^ZD
1 sb@h
;1~s@L
-+1vFc
1vq,xp
1W*'*a
?1+}Y'
,%<$|2;
 2001,m
20@x2P}
23S[UDls~G8
240303125356Z0x1
24V$iIB
'2699640**&#
270611104639Z0>1
\)<2Bw
2C`zG2
2!d"eT
2_$DF .x
2@Ju^9
^~2kBp
2 Mik2
\2MLO,= 
2N6/P2x
2]om5Z
2oTf.U
2p7}{P%
2~S5	W
2 SCCC
2tmGMf
2$UO"+
2WS2StubO
;2w;;thsz
2)y2 c
 (()@-3$-	*-&
34pA/d58
%,3:;4y
%3b$.y
	}.3d,
3dVCc^
3_f*=<
&3fN;`
3'GH"HG
,3)"-l
3mWH>4
3{NKBeg@T/6
]~3Omw
&3<oVy3
3=!P{A
}3QQT"
3to44X
3Viewe
@ '3\XEL
*442A~
4-#)59`7
\%45$S
48#DB;
4/AH.!
4a'"XJ
`/*/4b
'4""C.2
]4E76	2
}4E?AQ@
 4HTdx
4jh_o5
4JJP!.
4L!"9<
4M88<<Z	S
4m.N$$((
,4ntb|
4r+"182I
4R`}2E,	
/4vP'-
4,yA8~
5'1PRD"
52"5dS"#S
*53&8&(
56C+6+
5{?8BB9bG_f$zzM
5a7oxB
,5C~}~\
}%!$5$C2$	
5gf:<86?>
5h|c<S
.5{{i%
>5Jgu4I+0>
<5L\i8
5N=Sh>
5T]O@6
5{v`fK
5;`wwY
5x5PEx
6)2=r$
-6=2tnr
66-2.1
>66J~d~.
-'6&6MH'.
6A#?C\
6=>@mo
>6$n>m!
+6-NqK>Y;
}= 6pm
6-)/Ps<k
6QKgC'
*6tw7-
6VD5*0~,
@6W+u$
~6Xp/lP
6!ZO%@s
6(zPlmt
7	1RhB
!73Ai1o
744Q:D@
#&'7'61
76pv6&$
7-7	C$
7%7H;@
$7A'@1
<7a2G<
7C<l%Pdk
7Cqgmpc
7H>p7$]D)9
%<7L\8FL
{7MG:h#W
[7	O0C[P
7O+'PP*C
7ProH1
%7Tg3X
7*,(Vh
7WF+x$
\83hMwA
87 [dFL>
[898(0A'
:^8acJ
8<<@@D
)8@D-CPk
&*8DMRrz
|8%Ex6
8guroCXT1
8?IRXb
\8J7LU;!
$8J96gQR{
8k7*hMe
8=?*'	n
8omY(Qmm
8t8`P#	
`8\u=*
8X6WU`K
>9*0B:o
9.0YXW,R*Njo
':91E5
94+8]H
!9 4B$
96&]#?(s
;=99@*
'99(9:770
>_9CC-
9D@@ 4[
9`GABK
9H{m 0-N
,9HYpH
!9khTqA
	<9mTr
9q{j,-7q
9rL X d p 
"9	v)b
[9<xS<./
*-a1JQ 
A2nmCut
a/3.0 (.mp
a4N.?Sc
&~&a8k
aah{$~
AA>n.@'
aa_OpO_8i
abcZfghijk
A>C@~n
AddSub~
advapi32.dll
a_^^eU
AFECd@=
AgZ$t.
*AHPPw
a	]IB[
?aJRgn
A~@^+k
A\K!}v
AL("%s",4),"
A`M7UH
an/&MkM
aN&Olbs
ANSI_CHARSET
'"A%NZ8
ap 0>;
      </application>
      <application>
AQ"e_b
,a-Q'm
ar/Aprm
ArcE	c
A.RGB&C2
arJiIJm
A,S3t/
~aScpi
	>Asd	v
</assembly>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
ATHXPIRESDO
A#Vf2tRR
A		V'Z
Aw`2<e
b"]$4b
B4HKn^
bA2"(D
bar]dd6
BBDERN
?BbPg}
BC/)A9FM
b'.c&g,4
=[='Bdn
;BduL|S
b=:`fB
BFP\_fqux{
'BG;iofo$),,:D
bG%YS7
bh#aRpGMc!
BhiklUVXY\
B/JumpID
bK55Kb
bLE[gLKI
bM'OUf:
B'<%o|
b%O-I~
BoNeu!Q
Boolean
!b-O<U
box_skipH
b\R\aP
BrTm!H
B%S2!E
BThumb
}BtnFU
@B=[u$L5
BUTTON
bw9	\w
bX1#_j1:K
({	BXp
+By c(<BG:
Bypk'xx
B:Z>n/x
C4l7{!
;<@~c?_5
C`7Jrl
C*$@8H
C[8I( 
cales2
cAV982
C/BA@/
CC1<JQ
c@C4WU
CE(Eh%
CeI	T()
CE&pdaEoXO
	Certum CA
	Certum CA0
Certum Certification Authority1
Certum Level III CA
Certum Level III CA0
CF2?:F
CFHj||
CgKIN2_
CH_^0-%
;Ch"Ty
 /cid=117
C#IHy}>
cipher_K
_{c,.iuO
cK]XA8
 CmDEpsMOab	
cm<I,)
cmP_UYd
Cn/{y'P
cohIk'
comctl32.dll
   </compatibility>
   <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<C]oz{8
.C*P?2
?CPB\b@?6
C!QLB~
~CR06p`Y2
 cr@cz9P3
;CREATOR: gd-$E
CTEDUIG 
CTOVEC
	$;CUh
CuIh6F
c?UnknowDeci
C?VA=^
c,wPL5
C<xDfA
CYb	B7
czvbh^K
$d_[#_
D*0_`$F
d11#c#
D29Ep7
d34dwWD
d4ShKl`
_d(6EA
d|98\k
;^d9d-.
]^Daylg
dBL<0C
d(+cqW
D#cr^@
_DefaultPHotLigh
&=@?<dehjkmoN*&'
dfjSDFrt
DF&rP'Hw
%#=df<z
DGH'L 
DhAh@!
DHFDBCC@><
dHh~lI
dHLZx|
diFl$<<p:
@#di"_m
'DIp%k
DISCARDr
DJgnZ]w
(dJIDF
dj)y^<
$';DL(
DLH`R9
D `LO{
dnifEr"Tk<3
 &dn:S
(D/On%
D_;P8u+>A`
(dPAv;r
'dSgkQ
d@. T 
D+ t%AR
dug[Jh	
" ,d`w
dzGW,[
E_>`0Bqq
E2()*2
e]3JWw
E}7kxplr
e\A}5\hc5
EAbort
@_EAD 
EAS=fh
?EASTROPE
eCGK @
=ECU>'
EDivByZe
.E,E,,
ee6hhP
,EE>>L4K
E_E`pXE_
E{Feo$
Ef.ffy
e fQ_t
EHeap]
eicoZ#
eI&NX	
=EKU`ejqg	
em 'Avan
e #M/z)
e&nda as
/en/EULA.php
~enl,`
EOutOfMemjy
&E$O/W
".:e`P
e`QULi
Er$(8r
~ETXu.0q'
e|TYtCTB
eUdhm'
	Except
ExitProcess
EYFcR-
f{'|},
<@@;f05
F1YhJ	
F3;^<+
F&?4Bz
\F4h'l
'\f*	\6G`H
f9BBJ1
!! F#A?75
FB5I23FH
__"FD&
f/dQ>F52
FD%s[%d
.".:Fe
".:Fe]
F|E/\:
FEB/MARAPR[r
f#eG]$C,o#k
fFac/0
#f$g0B*
F$hBDI
fig9<ZQB5m 
"Fixup6x
F*J(A@";#>jj
}FLIeh
F-.Mb+7
[f|Np^
	f,(o$
?foBh'
=fouuf
f^o(v,
*F|%pH
FPUMaskValuO
".:FR^e
FR^eed_
:FR^eW
FR:UH#S[Hs
F^SB'U!0
fsZAAU)
FTe}a|
Ft?Htb
F,T;s$|
FtZ\T@
+)FU;\)
Fu:5et
@^fW<c
_)FXL'
fx|u/k
FYd'ww
".:FYe
G0;,N}
g2^8 v
'G2 T<
g2^T&qp
~G39Ei
g+?4*yx
G,50IwU
 G+&BR
gci_XiL
G`C}@u
gdi32.dll
gdOYZrp
GERENCIADOR DE0
GetProcAddress
GET Pt!V
@"G\F.
<Gg@E"< 
gGroup
GhJx0[!j
gjFiwMwUXhXeRUmAjDXU
GJO Ba
GKG.$$S
.gl/NMQvA7WQoFD
`Global
gMd,';Dm
|gN^}-
G<ndb@
@`Go#=
gQ#*@/
g?=|RC	k
=G_WhC
#g?wq9
_G-ZD|:,
<h|3t<
H3wP@R
_h5C=7-$?z
H7L6c!
h8M)'?
H8NCJQ7
HAAO`-
)hAAXG
HAGIGH ;k
	ham"+
haOJ%@
HBF+uvC
h?c2P"
@H*<c5
HEDITD
hEFH%@
HEG+LBy
<<#h(eOl
_he'yHL
HF>4>?W
>H^`gR
hg:wtB
HH":"NN
/HHp%`
H	iEBNk
Hies?g
HIFTJIS!
 H JI2
HJ%NHJ
Hjw.:eQ\
h#m*Gfh
hO&xO05
HP`=0W
h$<P&fMi
H	PHOq$
h+Po<cG
"hpVz!
'HSplitV+
/htmrhS
-hT_O[
HTTP5	
http://crl.certum.pl/ca.crl0:
http://crl.certum.pl/l3.crl0Z
http://ocsp.certum.pl0'
https://www.certum.pl/CPS0
http://www.certum.pl/l3.cer0
hu}:M)3
'hun$5(
;HUps@
hx@i\RC$
Hx\s:br8
]+I1ln
i`2K'^
^	>I48
	i4gNZ
i{{4H%
I6S2I3
I~8aoo,
)i*-8d
I8XGkt4
I/>a{k
-i.aN&,
%i(BSML]
_	IDispatc
i $$((E
I$eger
*I ERa
iFFalt
|I"F+t 
#IFy]^|`_
_Ign@e
Ih;J4u
>iijdjjpp
iJI{2Ap
ij-RmBy
ilZ|}|ynh
iM 1oZ
ImageList_Add
/ImeIp
|I;N4((
INFNAN
ioI>95
"~ipbo
IPersist1
iQ~$kX
ish+68
ISPLAY
IuIB@[-
;.[iU;z^
ive>NoAcc
 ^iVh=xm
IWWDDQ
IYsAdap
{'#(<j$
J;0Np%%
j?12J.@
_J<8(f
|||J.9
 JahBUG, aR
jC9,i<
Jd35%q
j!_$dLD
JeNjrhNMGD>
\J/F[D
J@&@H@5
j_ks=-\
['JLHZ
JNfkWd
JO{C!D
*]j:\rH
^J	u\@
ju"IP]7
JU	L*a
jWTXS@
*j^XhM
*jx>Q#
K]1/sC
%k1s,Q
K[{2i6&S
K2yS;H
!k6$!j]
K8NP)1
&;K>:AB
kA, <!m3
kB?gt-;
kccCoghEX<T8/*
k_E;@ 1
KEEP-ALIVEI
kernel32.d
KERNEL32.DLL
keysK<
Keyw7l;
k".:Fe
".:KFe
KF	r133G
@,|?kg
:kGXmT
\K|.IG
>k]:]JS
KLQaCE
KM]$A"
Kp8./H
k/pegul6
KpP#T+
K$QdCi
&Kq]Ri:
".:k^R
k;r!#G6
kRVuu[
K&[s&p
kTIA>f
K$Wh>[
KW[jz>
kx;8_H
~KxI[)
K"	Xp>6
;KY%o<`
^K&zoh
L08#::
l0L|4Xy
'L3'L3'
l688$<s
l7~G(p
!L8L8u
	_L9oZ
!l,Abi~
L:!ADH:RC4+RSA:+HIG
$ laY+W
	lbl_>
lCaC#L
l$cH,x
lC~(O`=
L$e)%5
l@eP^`
               level="highestAvailable"
+%LE<y
libeays
LIENTwL
LJF/O8/
l JK13.)
.L}KM)
LKUUnf>w
lk`VMS
~lKXcNHH
&llAPN&/
llC&"xcO
L'L'M'
llwGetLongPathNameA'W,
l%_MHk*
lmnopqrstuvwxyz0`
]lN %D
lnqoNsq
'load_e
LoadLibraryA
LOCALH
lOFO2BHL
lphi\RTL
[&Lp T
L Sff`
L%S&'S
)l.$,T
lt 01r
Lt_#0Y
Lu7;Wx
/ lus>W
 =L@@V
lveB^fCfb
LWaQ@"
=~_lwn
Lx/Leave
lyTznsp
_lzPxx
m0VYlkngh2v
m3,LMJ)G
"-M43-
m66||{{
m=7c_\ 
 ?m8{)
Magel8 MSWHEEL
ma`UKB
MAw8/C
max-w6
%M;B-hm
&m{Bye
mdlg_h
".:M^e
ME{a _
m,fk<dd
 #mG{`
Middf;
midiatechnologies@gmail.com0
Midia Technologies LLC1200
M`_|`j
#m+jF3
m/`M`p_
?)|mNpG8
m]o\Jr
monE]Pc
+MpTeC
mq3(bq~
MQMQ*%
?mREMPw
ms4s_p
M`S(4W
$Mt9	P
mt'{Fj$XO
m&user
mUX{/c
 m+WVTND
-MxxX||`@
<m^YI9(
@%"N!`_&
#n2J u
{ n`6 
!N7?S2
~]na-R
nd} q	4
NER=vn
~NEXT"
&	nf!4
ngC`NEC'G0 '
.(-NGP
n@h7NE
njcXR_m
]NKK[X
:}n[L4
}nLayo
NLHvYu{Op`
nlo//B
)}?NLS
N`}&|'M
Nn''84
NN_a`+P
/?N_n[Au
<NNNN840,
NNNNpqrs
NNNN|xtpNNNNlhd`NNNN\XTPNNNNLHD@NNNN<840NNNN,($ NNNN
	nNprN3
.NNum=s
(|no-c
nOt((58
`"nOTV
NovDec
nr30%W
N|Runn
NsH/Y#
NsP21u
nT0&d'
#;N^TcW
nTH?q`
nU+dIV
N>UpW9:
Nurrency
%nvizn
N--Vla|Zhu8E
NW!V%L
(N(:X`
NYN9F\
n_ZNg,
N(Z*[Z
~*O@\@
 &&)O[
O20IfNo%C
%,.o\6
O?8j'8j
o`_aff
*'OcX1
@oDHu6
/od_nOr
odT}Ea
	%	:	O	d	y	
oftware
Ok>G*w
Old}!O
ole32.dll
oleaut32.dll
OleDraw
oLLLLL
oMAX-AGEYc'
omboBoxEdit
oNAMl:
o#pAX%Shtp
)Open Source Developer, Midia Technologies1*0(
Op|"G43g
opGo`+
OPh.iM:
.	Or8t
Org!Dj
ORM]bbm
oross&%
>_o?sx
O	TBiDiy
OV^cKb
O%VK,C
oVkkn6"2AB##%$#A1@..1
|o$;vt
ow}n7e
O,wOL?
=oX><<|G7%'
O @{)y
oyNxeH_
ozR1ML
oZ'~z'
-;p./	\
*>`_:P@
@<P#'0a
"[P0eJ
;p\4Aj
+P~&5i
*p6Dc1'>fC
P6G1WV
!P7&h0
P%8%h%
PAdTr 
)[PauL
@PC F|
Pd `Cs
PDt1!'
PE7Mtk%G2
PFFA?1n
pfiVh(tF
p=jT[2
PJytG$
_pKVbj
PL1"0 
|plrrrrhdxtrrrr
:p>lz6U
P%mD0+$
?PMNNPf
` POjO^Lp8
PopupX8
PPm`G+
P-'PN+& 
pPWiHk8iD 
'_ppWXkq
?PQ{2v
PreH\$
PRjCoWXZ
PRYPXWD
=P=\TTz-
p=uOBg$a\
pUpdJ&
pwVHw	
P$y+kZ
Py?w=z
Q1c\#M
{q2m#S
Q5Hjllh/`e
&Q5Q6b
Q]/A2A
qCWUrl
'Q#dx;
q#F/_!Cf
qFf">)
qGHt[xy{_
)Q@GM~
QGW-uL
@.Qhm'
$!*QI#
`QK.,.To
=`Q<l9Qc
Q },)La
-ql>^E
?{/[qpp
QqJRqb'FD
{%q%q%qUU
QRaZX>
Q=>rb=6
<QrfPr
qTS%L`k&
quaHtT= 80
qVi XV
QWo)faV
QY{CCc
qYV~W!
 @^]R]^
R3_$W"w3
R4kFreeSp/
=r8#<]
R999ZRJ
rA-9A]]
rb?)hc`
*rC (c) E
rEAIt.
Rebuil;x
RegCloseKey
ReL`[sR
r'&E'nC
            <requestedExecutionLevel
         </requestedPrivileges>
         <requestedPrivileges>
_-Rf;` 
rfaceK
RFccyv
Rf +QC@
"<![["R(@G\S
#R{iA/
)RJZW $
-R\][L
r[lYzc
R|MaIy
r mH@ 
]Rmh{5
$rN`A|
%_ROLL
`\rrrrXTPLrrrrHD@<rrrr840,rrrr($ 
|rrrrxtplrrrrhd`\rrrrXTPLn
rrrr|xtprrrrlhd`rrrr\XTPrrrrLHD@rrrr<840rrrr,($ rrrr
`rT`mk
r\@v;{Du
rw~oke
<R;/z$
]=S(/)
s00B0Ypo
@]S 3`
*s?373
S`4zER
s8mtE0
SADj	H
SaveDC
SBD3H2	
 Sb?dG
SBpY1mh0
_.SCK_LINES/y
%s, %d
Se8|s9
      </security>
      <security>
S\F9K 
sfs/7w
/SgAih
:sgF&Q
`S@$~H
shell32.dll
ShellExecuteA
~#ShhNVht
s/i">	
SjBMNF
;S)L'I
s#m=(Fq
SmNlint
Sn~^:/O
SOFTWARE\Borland\De
SoIM^imm
S_:P;^;
spMSFT
;S$Ppd
sp@v}5
S\qo\[L)
Sq#RTR
sRGB IEC6
SR|Qrm
+ssq|N
Std&vb
STUVWXYZ
S<&uOA6
         <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
         <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
S`u-Sb
].Susp
sv!(0)"
S+W;T>D;
>$^s"y
sYCircj
SYMBOLc_
(s^Z]I
?  t.<
t/130214d
T1n>.n:
T2se^4~
t6[u&%
&t6Yt,
`^]T73\[
T,7n3F
TAdxncP
tagMULTI_QI
tAI+$JJu
TAlignme
TBjict
$]^TB+%w
TC>I\_V
t;Cpu'
_Te-dB
TeGh`Ls
	TFile
T~g9$(8
t^Gp	;Gz
This program must be run under Win32
tH RQk:<
ThX[.#
T?[i?_
TisUj"H
	TJPEG\
%TK0h`8
TK!xY,n-
TLPTX;
TLSv1/O
#`^t(M"1T
 tM`9U
 tml#|la
T]Ml{m
$TMNiR
T \n3;
TObject
t`oh8S;
&tOpT70
T`o%STO
TOwnND0wStN~
-tp.3":
tp6V_`
TPF0yY
T$Phx`x
TP	OOp-
[TpWRf_$W
tPZ7hM
TRACE PU
T =rM 
t(RmoS
tRr$Ctt@
   </trustInfo>
   <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
Ts'Z!N
t$+t`1
tTHoLG
TThread
TTLExpir,
TTXX\s
{Tue/Wedhuy
TURK*H
tVRumdl
t+W3rK=
?tw4tG
T	$XELed
txppxH
txtH$#
Tz%,j87
)tZ!~Q
&U`28l
u4AA#sY
U67p!O
u)7^zG
><U^"ar;'x
ubHR(9x
uDI>2<(
u)d}T 
%!UEG9
 U%ewH4\
uEWT$M
u,g`	C
uG	Fuchsia
UGRNM|
:u[Hae
uhi1Yl9
               uiAccess="False"/>
ujcOlb\
U`k+BO
u	kDw]
ukkdb\
ulFD2g.
Unizeto Sp. z o.o.1
Unizeto Technologies S.A.0
Unizeto Technologies S.A.1'0%
UOM#5.
`Ur2GD
|URh <
urmn/_d
uRW>0`
Usage of this certificate is strictly subjected to the CERTUM Certification Practice Statement (CPS) incorporated by reference herein and in the repository at https://www.certum.pl/repository.0
user32.dll
USER"DLL
\$&USl
USx4(\
US `_Y
	uUnh{
(u-Vou
U ~v(R`#
u)[	xm
u<Zlr4
v@0Ie1
v#2QQP
}v7FBV
_V\[#a3
%v_Aiw
VariantCopy
v(bdFL=3
VCLCp)
vdE]=@
VerQueryValueA
version.dll
V#FO0>
VfX"y;p
)V--((%% !G
~)Vhw^
	_v`{i
-VirtJi
VirtualAlloc
VirtualFree
VirtualProtect
v-jIdR;
$vkI"I
	VLength
vm@g+$
vm.P9c
]Vn|.y
!{(v_p
^[V$p^{
vPtY8<`UC
vQSRdAb
vrr|xt
|}V{Tl
'+/V-TQO(IB
Vww?fY
vX%AS3
VZ.!@P#
	W&"&0
w0idOp
W1#i#9
W.!2}X
w30N	!
w7IE(o
W+88UO
w9>E89
=W$A/#
wa	!%C
wbI2A/F
&W!bKlYC>
 Wd-	d=)
W|d<@G
	WEGIP
^w$GCB
WgG9(V
$W?|h|
W,H,=4`
w'hH7y
Windows
_WINHELP
WJ2[KOMZ0
w$JCqV$J
w*k-'q
w;^k&V
w&^Lp+h
|W'njm\DR
wNow'R
Wn$VH.Wz
wo1hCP
Wp?MBJJK
'w~$Prx
"$w	Q~
wr""/p
%w@s<H
(W'.Sl
#wt4B/
|Wt!$h
Wt_toMZ
W	+uC[
wUw4ys
W..|Uzuk[>
 $('WV
wvBru<
Wvq.j!
[w\ w},
WWH=LB#
wwwwwwww
wwwwwwwxp
WXen/A
wxr""/p
wXwADT
]X+.&\_
&X`$~4
X|9@]8
XAW=cEA=UT7
'Xco>gle
Xe Fc&
|x\.F6
x}f)w&Iu
}xfy4^
>xG=':
XHq8!i&
Xk_eRHaU.
X{l"*3
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
Xor_Cmp4FromSt*
X\p\|\
<$~|^X!P
XPTPSW
XqT\wy/w
)@Xq=v5
X[SkcBj?
''''|xt
XT	T+N
xtZXtU0u
X!!UW/
Xuyw)`wc
`XV6ecN[Y
xV8]7W
,X>?@	^X>
x=!yfJ
[XZj0W
y0DTdt
y(<$0L
y0,r\APlBp
-Y1iD1
y	#2m4
y5c7//
	@Y6m&-
}*y<{8
y892+$
Y8fs%b
[YbdTo
Y__cb_^+O
<yd=\=	
>#">Yf
yg/E@c
~y~h'?
YIXX&A8+
YJW8~i
.^y kvFt#r
yl''5C,=|
YLCID'7G
)yLQ"@5
/Yl+V!
_/", yo
@)]`y$RI
yS%D0<
y;s+$h	f
y!sVVV8
Yt3sdA
#yt}K0
ytpttlyvt
Y$TZTvG
y<u=Bj
yUEEDHU
YU/pKC
yVr$GNh 
,^\y+w/
YXNaam
yXq$1R;
y x!z"#l
!Yy4.f2
yyvvy|v
Z,2f.I(~O,
Z5)`(xYBS
z6w+n+
z=;842E/,%
zApQH5
.zdcp-
~Ze3a6p
 ze Db
ZG8vRr
zgE<b$G
ZG\iKz
z:<h(c
zK82C<:?Fy
:Z)#>p
ZSw Y(
$	(zTF
ZTUWVS
~Z=@U"`
zUBWnt
#'\Zv&
zV&(^6
[ZWfnk;v(h
Z#Wmp{0
ZW/SEnQ
.Zxa2+
ZXhaMOS
&zY=mg{_
'`ZY/U
Z?yvJ"Q[
^zz111
^zz1111
^zz1111M
^zz1111MM
zz1111MMM