Analysis Date2014-04-23 11:42:50
MD55b218076245c3f4bc29ad29a9aba4ab4
SHA1793520a23d490fe0b5db69779acbecbd5630120c

Static Details:

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Desktop\CONTAPRIME.url
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSgoo.gl

Network Details:

DNSgoo.gl
Type: A
62.253.3.109
DNSgoo.gl
Type: A
62.253.3.123
DNSgoo.gl
Type: A
62.253.3.104
DNSgoo.gl
Type: A
62.253.3.113
DNSgoo.gl
Type: A
62.253.3.103
DNSgoo.gl
Type: A
62.253.3.89
DNSgoo.gl
Type: A
62.253.3.119
DNSgoo.gl
Type: A
62.253.3.98
DNSgoo.gl
Type: A
62.253.3.114
DNSgoo.gl
Type: A
62.253.3.99
DNSgoo.gl
Type: A
62.253.3.94
DNSgoo.gl
Type: A
62.253.3.84
DNSgoo.gl
Type: A
62.253.3.88
DNSgoo.gl
Type: A
62.253.3.118
DNSgoo.gl
Type: A
62.253.3.108
DNSgoo.gl
Type: A
62.253.3.93
HTTP GEThttp://goo.gl/HzjJkR
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 62.253.3.109:80

Raw Pcap

Strings
...;.+.].-...$
.
.
C
.u.g
t
.
.0.
.
.
(
.
.|8
..>
.#e
.W.
.
H.
.
{8.c
.
Z
<!
...H
.p...
#'..GC.
I
...p.
..%...
,.P
.
X
.
.
6
...
.
.
..
..
.
.
.@]
.
.
.
.
.....;.+.].-...$
.
.
C
.u.g
t
.
.0.
.
.
(
.
.|8
..>
.#e
.W.
.
H.
.
{8.c
.
Z
<!
...H
.p...
#'..GC.
I
...p.
..%...
,.P
.
X
.
.
6
...
.
.
..
..
.
.
.@]
.
.
.
.
..
041604E4
1.0.0.0
333f3
Arquivo Solicitado
BBABORT
BBALL
BBCANCEL
BBCLOSE
BBHELP
BBIGNORE
BBNO
BBOK
BBRETRY
BBYES
BLUEGLASS_BUTTON
BLUEGLASS_CHECKBOX
BLUEGLASS_CHECKLIST
BLUEGLASS_PROGRESSBAR
BLUEGLASS_RADIOBUTTON
BLUEGLASS_SCROLLBAR_BUTTON
BLUEGLASS_SCROLLBAR_TRACK
BLUEGLASS_SIDECHENNEL_BAR
BLUEGLASS_SIDECHENNEL_HANDLE
BLUEGLASS_TAB
BLUEGLASS_TAB_LINE
BLUEGLASS_TITLEBTN
BLUEGLASS_TITLE_CLIENT
BLUEGLASS_TITLE_LEFT
BLUEGLASS_TITLE_RIGHT
BLUEGLASS_TRACKBAR_BAR
BLUEGLASS_TRACKBAR_SLIDER
BLUEGLASS_TRACKBAR_SLIDER_V
Comments
CompanyName
DBEDIT
DBGARROW
DBINSERT
DBMULTIARROW
DBMULTIDOT
DBNAV_BUTTON
DBN_CANCEL
DBN_DELETE
DBN_EDIT	DBN_FIRST
DBN_INSERT
DBN_LAST
DBN_NEXT
DBN_POST	DBN_PRIOR
DBN_REFRESH
DEEPBLUE_BUTTON
DEEPBLUE_CHECKBOX
DEEPBLUE_CHECKLIST
DEEPBLUE_PROGRESSBAR
DEEPBLUE_RADIOBUTTON
DEEPBLUE_SCROLLBAR_BUTTON
DEEPBLUE_SCROLLBAR_TRACK
DEEPBLUE_SIDECHENNEL_BAR
DEEPBLUE_SIDECHENNEL_HANDLE
DEEPBLUE_TAB
DEEPBLUE_TAB_LINE
DEEPBLUE_TITLEBTN
DEEPBLUE_TITLE_CLIENT
DEEPBLUE_TITLE_LEFT
DEEPBLUE_TITLE_RIGHT
DEEPBLUE_TRACKBAR_BAR
DEEPBLUE_TRACKBAR_SLIDER
DEEPBLUE_TRACKBAR_SLIDER_V
DLGTEMPLATE
DVCLAL
f3fff
FileDescription
FileVersion
FONTCOMBO_DEVICE_FNT
FONTCOMBO_TRUETYPE_FNT
InternalName
LegalCopyright
LegalTrademarks
MACOS_BUTTON
MACOS_CHECKBOX
MACOS_CHECKLIST
MACOS_COMBOBOX_BUTTON
MACOS_FORM_BACKGROUND
MACOS_MENU_BAR
MACOS_MENU_SELECT
MACOS_PROGRESSBAR
MACOS_RADIOBUTTON
MACOS_SCROLLBAR_BUTTON
MACOS_SCROLLBAR_TRACK
MACOS_SCROLLBUTTON
MACOS_SIDECHENNEL_BAR
MACOS_SIDECHENNEL_HANDLE	MACOS_TAB
MACOS_TAB_LINE
MACOS_TITLEBTN
MACOS_TITLE_CLIENT
MACOS_TITLE_LEFT
MACOS_TITLE_RIGHT
MACOS_TRACKBAR_BAR
MACOS_TRACKBAR_SLIDER
MACOS_TRACKBAR_SLIDER_V
MAINICON
MDI_CONTROL_BUTTON
MENU_CHECKED
MORE_SCROLLBUTTON
MSGDLG
MSNPOPFORM
<<<Obsolete>>
OriginalFilename
PACKAGEINFO
PANEL_BUTTON
PREVIEWGLYPH
ProductName
ProductVersion
PROTEIN_BUTTON
PROTEIN_CHECKBOX
PROTEIN_CHECKLIST
PROTEIN_FORM_BACKGROUND
PROTEIN_PROGRESSBAR
PROTEIN_RADIOBUTTON
PROTEIN_SCROLLBAR_BUTTON
PROTEIN_SCROLLBAR_TRACK
PROTEIN_SIDECHENNEL_BAR
PROTEIN_SIDECHENNEL_HANDLE
PROTEIN_TAB
PROTEIN_TAB_LINE
PROTEIN_TITLEBTN
PROTEIN_TITLE_CLIENT
PROTEIN_TITLE_LEFT
PROTEIN_TITLE_RIGHT
PROTEIN_TRACKBAR_BAR
PROTEIN_TRACKBAR_SLIDER
PROTEIN_TRACKBAR_SLIDER_V
SIDECHANNEL_BTN
STATUSBAR_HANDLE
StringFileInfo
TFORM2
TFORM3
TFORM5
TFORM6
TFORM7
TFORM8
TFORM9
TFRMMGR
TFRMMSNPOPFORM
TFRM_NAVEGA
TLOGINDIALOG
TMAINSCREEN
TPASSWORDDIALOG
Translation
TSUIARROWBUTTON
TSUIBUILTINFILETHEME
TSUIBUTTON
TSUICHECKBOX
TSUICHECKGROUP
TSUICHECKLISTBOX
TSUICOLORBOX
TSUICOMBOBOX
TSUICOMBOBOXEX
TSUICONVERTOR
TSUIDBCHECKBOX
TSUIDBCOMBOBOX
TSUIDBEDIT
TSUIDBGRID
TSUIDBIMAGE
TSUIDBLISTBOX
TSUIDBLOOKUPCOMBOBOX
TSUIDBLOOKUPLISTBOX
TSUIDBMEMO
TSUIDBNAVIGATOR
TSUIDBRADIOGROUP
TSUIDIRECTORYLISTBOX
TSUIDRAWGRID
TSUIDRIVECOMBOBOX
TSUIEDIT
TSUIFILELISTBOX
TSUIFILETHEME
TSUIFILTERCOMBOBOX
TSUIFONTCOMBOBOX
TSUIFONTSIZECOMBOBOX
TSUIFORM
TSUIGROUPBOX
TSUIIMAGEBUTTON
TSUIIMAGEPANEL
TSUIINPUTDIALOG
TSUILISTBOX
TSUILISTVIEW
TSUIMAINMENU
TSUIMASKEDIT
TSUIMDIFORM
TSUIMEMO
TSUIMESSAGEDIALOG
TSUIMSNPOPFORM
TSUINUMBEREDIT
TSUIPAGECONTROL	TSUIPANEL
TSUIPASSWORDDIALOG
TSUIPOPUPMENU
TSUIPROGRESSBAR
TSUIRADIOBUTTON
TSUIRADIOGROUP
TSUISCROLLBAR
TSUISIDECHANNEL
TSUISKINCONTROL
TSUISKINFORM
TSUISPINEDIT
TSUISTATUSBAR
TSUISTRINGGRID
TSUITABCONTROL
TSUITHEMEMANAGER
TSUITITLEBAR
TSUITOOLBAR
TSUITRACKBAR
TSUITREEVIEW
TSUIUNCONVERTOR
TSUIURLLABEL
VarFileInfo
VS_VERSION_INFO
WINXP_BUTTON
WINXP_CHECKBOX
WINXP_CHECKLIST
WINXP_COMBOBOX_BUTTON
WINXP_PROGRESSBAR
WINXP_RADIOBUTTON
WINXP_SCROLLBAR_BUTTON
WINXP_SCROLLBAR_TRACK
WINXP_SCROLLBUTTON
WINXP_SIDECHENNEL_BAR
WINXP_SIDECHENNEL_HANDLE	WINXP_TAB
WINXP_TAB_LINE
WINXP_TITLEBTN
WINXP_TITLE_CLIENT
WINXP_TITLE_LEFT
WINXP_TITLE_RIGHT
WINXP_TRACKBAR_BAR
WINXP_TRACKBAR_SLIDER
WINXP_TRACKBAR_SLIDER_V
<>:.#%
 !"#$%
"""""/
%&'()*
-0-(0%()(
020611104639Z
 %0.2d	
06tTY2
079:BEchgom{
090303125356Z
`09" V
0;BR$-2
0[\.CX
0D0g2 
0d0m;6
0\Det\
0eQL;@?
"[`0eR
 0>_K_
[0! Kt
0Lb-yO
(0~lkg
0$_PXR
|/0qqaqw#
0r=<9w9i
0""RG`
!0Ts3Wl
;0u[cda
0UE.O6"
0X=/}J
%^0	Yu-
1!0u)-
?11,1V.
'127.0
130805055316Z
140403192102Z0
140805055316Z0{1
14?<8,*
1892+$<
@1.8+f{b
#18N%@
1BoC o[KQw
1[C4Z]
1dd9Uo6N
1;EHQV\
$ 1e)n
1$h0'`
%1I8*Cf@
'1MQR'
[1MSGm
1n>.n:
1oqom<
/1 PXb
"1[R--
-+1vFc
1vq,xp/o
;-`%1(W
"1w$}4
1~X0Xw{
?1+}Y1
1y$m:Z
20}: <
 2001,
2"3` &:C'
240303125356Z0x1
24h'l#
'2699640**&#
270611104639Z0>1
2740w<
2C`"(8
2{CC1<
!2CTevy
,2CW6Z
|2Dv*`
2EBgmszz
?2gBrTm!H
2 H`[@
2>iijdjjpp
^~2kBp
2 Mik2
2N6/P2x
2)O1Pod-
;#2*OP
2r1G3$
2t8x3|
)=2tnrH
2$UO"+
2WS2StubO
;2w;;thsz
:/34@.
34567890ABC
358-B4D1-169048547C23}L
;36\+6
3_/cO{
3D(;P5
3	El#p
3'GH"HG
,3)" haKeJK13.)
3J2U)'Q
3'L3'L'L
"',3LN
~3mrd(Y
&3<oVy3
3Q#3#3
3RZbv y
3to4Vh
3vl(U@
3w{X{/zw'
3X[E42]
.)%!'4
40D1Hh
4~"]2+Q
43\oH@
\48PnR)
:4ai#:n(
4a'"XJ
4BD%s[%dd
'4""C.2
<4<DLT
}4E?AQ@
#@4%Fa,-
4FromSt*
4&[kt	
?[?4*}l
4L!"9<
4mDdpp
4#'MK&$F
4MS&@H@H
4nCJ	tT
4QOz_g
4r+"182I
4tSqu;
/4vP'-
4vZd15
%%4]xbI
50sBy~k
>51^Bc
;*5,2'
52"5dS"#S
*53&8&(
56C+6+
<5<=6/W%
-#)59R
,5C~}~\
:5gf:<o
`5IP3U
>5Jgu>
<5L\i8
$5(W7N
6=>@<?&$
6)2=r$
|64-TP
~66-2.1
>66J~d~.
 :6BF`M;
6cjt_9
)/6DOO
6foh4	
@6*Ji/
6keZW1&
+6,:>L
6L9T-=
6 |mkd
6NfY	4
)6$n>m!
 6oP:\k
!6q43]%
(6R%H?
(#6-rl
6u;Ayt
 $6Uz0
6w3pc$m
@6W+u$
6X=?*'
6!Z5YBL
7, */*/&
<700,?@
[7*,(+4
#&'7'61
7%7H%H%5#
7(8,m-
>79O:c
`/7&C!HA
7Cqgmpc
7cx[Gm T
~7h%H7vP
7h~ke[
7M8zVn`a
7n5pEa
['!7Oi
7ProB{
7QGL><G|
7.%sZ'
7WF+x$
^86f$^
87 [dFL>
889DF11
[898(0A'
{]&8B`
~8BB9bG_f$zz
8C8<{r@
-8C]ozp0
&*8DMR
;8e[pDp
8,fk<dm.
8.$FP'
8H[Lj';
;8~hp~%#
8?IRXb
\8J7LU;!8
$8J96gQRk
8o_D:0	
8\p"q7
8sm|s!
8,<`UY
8wt,F(
8&xKA%Ww
9.0YXW,R*
9[=6GF
96&]#?(s
99j7dzGWS
]9A<+o[>)
9`GABK
9Hp{d2
+9iP$8tI
9iX\\d	L
9,-%kq7q]
9l`(zP
9t9x	_
/9T+Wx
a0NHG;
%$#A1@..1
a/3.0 (c
A5-ty0
A5tZ\T@
}A6RC^g
a_7IE(AL({
A7WQoFD
?@AAA;
aah{$~
`AAk}aB
aa_OpO_8
Ab)EL/
]"a%[c
A>C@~n
AC{/t6Y'
advapi32.dll
a_^^eU
aflt=:
;#a$GrPl
a{GUF/
`#!AgZ
aHtT= 80
aiP_UY
akAPm`:
A,%LD*
+>A*LH
	ALL:!ADH:RC4+RSA:+HIG
AlOW@Q
@:am9q
A[^MSo
a>n.@'A
a)(N_FU,*
ANSI_CHARSET
A"O{o-
_a`+PO
      </application>
      <application>
Ap\w9f
A^p$W"w'x
aQA.RGBlH
AQ"e_b
;ar/AprywvZ[A
As<gK+
"aSj43pK
</assembly>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
At$chT-
atJaFeb
At!R)@Qla
a'u{Op4
Auto-Dy
AVA/#G
avP#D0
\;awpou;i4
@AW<]yXq$1eX
#A*yam
az6/"!
*[}b*.
b!1|Sc78 ;P
#B]2Qm(
	B@333
B3>A8Gp
bA2"(D
B:atV%"
 BBDEROn
?BbPg}{kR
BC/)#A9
{++bdTo
bF	brX
bF*E	>l)
BFP\_fqux{
'BG;$),,:
BH0QdPR
bHhqlh
BhiklUVXY\
B^hx_,
BJx2DB
blu$=&
|B= ^m
),:BMGR=6
bM'OUf:
bO Id0
Boolean
Boross&
box_skipH
<bpdc7
b\R\aP
BR SOFTWARE LLC1*0(
brsoftwarellc@gmail.com0
B'<%sp3
B	tLviru?V,
>BtnFU
BUTTON
B>%v}$
Bwvclt.K
bX^IAd
by^	#JdBP
bYY.)'
'B^y&y0
b[z:	8egul6
B:Z>nGK
 @C>0>`
	c2!})
c2s6a2
C4ED78
};<@~c?_5=
c''5C`
)c*5)t
'C9hBL=D
C/BA@/
__cb_^+O4
cbUJdf
c}	cdNSKX
CChS;$G
c[cNL<
ccNOQ"
CCx70$
CcZ!pW
(C/^!E9
	Certum CA
	Certum CA0
Certum Certification Authority1
Certum Level III CA
Certum Level III CA0
CF2?:F!
`ch+D!
	C^`@hO?
cipher_?.
Cj%7S~W
cKpzvbh^K
Clo9$C
$cLObbK
CmDEpsMOab	
cm<I,)
comctl32.dll
   </compatibility>
   <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
.C*P?2P
c.P7C&
?CPB\b@?6
cPtr%.8X
C	r^BwDa
;CREATOR: gd-
CTEDUIG
CTOVEC
C,	TWP\Aq
	$;CUh
cu<Zlr4
C?VA=N
cw9Lh	
c,wPL5wI
c'?/&x?
&c@.X_
C<xDf)
c>x|H~
Cxk_EAD 
C){X<W
!cY+Lj
~$d_[#_
$'#  &d"
d00B_@~0
 !d!>0d
D*0_`$F
d0IfNo%C
d{,0zfuO
d11#c#
d1_-xb
-;d2/.
d34dwWD
d4Sh|KR>Kl-
@d5>794+8]
;^d9d-.
DAhotoA%
\dB]@'`
DbHg9b#S
DB/:=XhC
D#cr^@
D$CW!=
DDA?Lm3pK
DEaLW-	
&=@?<dehjkmoN*&'
Delphi\RTL
de-+ypH
dfjSDFrt
*d*g+@
dhh'MW
\dH.H~Z
D!HHZ`P-t
@#di"_
D(i40h	
DISCARD
DJgnOH
D`Jkgn&
$';DL(0 v
d\,L>F[
dnifEr"Tk<3
DN*q*s$N
DoK+b#
}do)<]r
Do"rZr
d>p0BX}
(dPAv;r
DP/s;+
d)p*V`
Dqu{ubZ
D:<SB3
-D?/W3
Dw`5eF
d[Ww'qQ1
dXS@Q\Eihl[>J
D@.Yo*
dYPKL=*A
d*(z?<3O
e#*#]`
_E;@ 1
E<2OjTM
E>*5"*
E5d8Lc
`e/5>m
&-E6^G
e8FHd4n
\E9eKPau
EAbort
EaxnUR
E|C	8J
e+$$CGK
Ec}s}e
edhuFri
EDHURI
EDivByZe
e ecW-J=?S
,EE>>L4K
E_E`pXE_
e Fc $
Ef.ffy
$^EGGiG
#eGo-t
EHeap]yr
EH(Tm_
EI]Ldn
Ek^QsF
=EKU`ejqy}
em 'Avan
Enco2X
/en/EULA.phpk
~enl,`
Eop=;]b
EOutOfMemjy
E';P8u+>A`
eP^`W8
EPy?w=z
e`QULi
E$t(;tt
~ETXu.0q'
eu cM"4
E.url_[
eWh>,Zw
	Exception
ExitProcess
Exxt``
f}%!$!
).:F=!%
f`0gLx
F4IR[{
f5(i_l
f6~ump
\F7$^UW
!! F#A?75G9C
fC)~D!
f_c uLl
+FCVT/
__"FD&
FDA#Qlst
f/dQ>F52
".:Fe,
.:Fe0(
".;Feb|
FEB/MARAPR
 $(FFFF,048q
!F$(Fo
Fg%s_%d
fGV	"l
F`H&yx
;FIl3 
,"Fixup6
fj2^BW
F*JQJe
]fJ\$v	
FkZn]S
_%f@Lc$R
FLL\L|
F-.Mb+7
F[mf-1P
FnS:w`
f,(o$~
.Fo(<!<
FocusDefaultPHotLigh
FOOIKNI
=fouuf6
]f[pk'xx
FPUMaskValu
[fQ?'H
".:FR^`
.:FR^e}?|
(F{sBrr
Ft?Htb
+)FU;\)_
"FUa>Zo
fx|u/k
`FXvoUh
f^X&]W
FxY1  
".:FYe
@FZ3g+~
G0;,Nh|
g1tz W
 G2<4C#nP
G3DDklp
g.;5I6i
$G6vL5
g7	L	n
G87Z!{=
GB2312
GBF;iJA@
gdi32.dll
gdOYZrpqq
GERENCIADOR DE
GetProcAddress
GET SO
@GFR50
}gg2<O8
Ggo+K1i
G_he'yHL
GHZqWLGJ
gjpqw9
.gl/NMQv
`Global
\]gmkW
|gN^}-
Go[CgO
][Go*I
(goP`A+
gP5Y6#
GREEKQP
gsB{^c
.gSh\]
:GT(~9F
Gt xx'H4mX||W
g,vhid
#g?wq9
GYtCTb`
gz7'+ m
_G-ZD`
gZ}h=R
<<#h(_
_/&/@h
h_/_`[
\&[[=H
[(\h~0
"h0Z_'0
H&4L"YG
H4P,YKB
h4ZN3T
h5C=7-$?z
H7P_{wf
h8IOpl
HAG6k/mIGH
 hb:#u&
?)hcpM
hD+0C Y
HDF&rF
H+dH*TH
h>/E@c
HEDITDu
HEG+LBy
{@!Hel6
he$VaU
HF+ |?LP
hgkwyn[
>H^`gR
HH":"NN
Hies?g
HIFTJIS
	H/iH0
HiSg_,R'
H^iWq||
HJ%NHJ
*<Hj=Y
H@kDX 	
<h?kGWR
h>|	l>
hO7l50pQ
hO*@a+
!HP;5|
HPsQd)
HP;t@IT
HQR	dCE
@HQ_wn
<Hr(2Vg
HR`-d7*
}H RQk:<
H/@s<H
'HSplit
H_#SUw
%=HtNm
http://crl.certum.pl/ca.crl0:
http://crl.certum.pl/l3.crl0Z
http://ocsp.certum.pl0'
https://www.certum.pl/CPS0
http://www.certum.pl/l3.cer0
hu}:M)3
\;HUps
Hv lz\
Hv!=pfL
Hx5e4(
hxCE)P
(HxQ#G
.('>I+
i@<2aN$
,I%4	x]
I6<<Xt
i88<<@
)i*-8d
(I8]jW
i8K3	3
&i<9	P
iAAO`-
i]aBCH
 I!b%,
icobmp
_	IDispatc
%,i=dL
IDlgz3
iEG)2-
I$eger
ie"nQU
*I ERa
i`Gq#1
Ih;J4u
iJI{2Ap
IJKLMNO
ij-RmBy
@&IJ>X
I;(LeI%0
ImageList_Add
ImeIdB
InPlkp{
IONQidE?
IPersis=
iQ~$kX
iqK>Y;
ISPLAY
IuIB@VK
Iv4\`p
<IVdq+0
ive>NoAcc
iVf2tRR
 ^iVh"
ivk&6[}
IWWDDQ
%'iwX.:p
IZGeD\T
I/zOeo
IZq!JRq'
J;0Np%%
;J$1)`{
!j[-_4
-<-j75V
j!8ID\{4AA46D49-459
J}8 `wl:
*JahBUG, a)S
J(A@";#>j
JE3sA%
J[e[G`
JeNjrhNMGD>
\J/F[D
)?j{=g
	J[H(E.
JjPzm:
>jKr9D
#jL0-1
JL08#:
jllhMch4
Jmc@:9
Jn@PJL
JNs5W%
!J+^o? 
j$!P("H
".jPl@
JR0P4RN6O@c
jR}6Cz<= ?K{
*]j:\rH
$>j)(S
JumpID
J U?X%4
JVfx")
*j^XhM
*jx>Q#
JYaC y$#lq
"@(-#K
%k1s,Q
K3?UnknowDeci<L
&;K>:AB
~K'b7YVD>
KBeg@T/W`
kccCog~<T8/I
k'(D&%S
".:k^e*
}KE2 &
KEEP-ALIVE$[
KERNEL32.DLL
keysK<
k".:Fe
".:KFe
KgG'p\W
]KGI%6
;kgrV8i
\K|.IG
>k]:]JS
k],kFO
)Klm.(
klmnop
KM]$A":
"k/NsH/
>+KO]'
K\P/L%
K[)Rk=
KSa`!&
kS-coK$
K's@(QK
KUIEfZb
KUUn	K
k:v\"v
/|Kvv\
k/x8"!/_s
~KxI[)
^K&zoh
l!0DIf
l0,m#Jw
l6w&{'|},
l{,8G}
-L:	98
	_L9oZ
lap2dAp
]=LB#`
`L#b07
lB5I23FH
	lbl_>p
L,bUei
]l}bxD
;lCJXq
L`d`p*8
l!D),W{a.@
.LE]=@
               level="highestAvailable"
LExpir
:lf=2l
!L.GHH
lhd`RI
^lHz;~
>$:L!\i
libeayssl
LIENT?
lIvcxP
LJF/O8
;lJ!JZ
lk`VMS
lL1nc0'
Ll$x"'
]lN %(
lnqoNsq
load_e
LoadLibraryA
lOB,P 
LOWE7o
*LO`XXX
%*@}lP
^Lp`yS
L[Sy$q
$lumiC
<l?.|W
*Lw3eb
=~_lwn
lWt!$h
#L$X$d$@>9rp$|$
l XW@%V
lYPNL0
lyTznsp
>lz6U?7
lZ|}|ynh
++)%	m
- M<~]~
+%@M	{
M0LdZy/
m0M227
m0VYlkngh2v
M~	5QL
$-m7'H
m7tr5X
 ?m8{)
.!M."8
m	8CRL
Magel+P
MAINIC
ma`UKB
MAX-AGEVER^h
)MBV0dUQ!qJ
$M@B;Z0
Md,';Dm
M/DhAh@!
mdlg_h|
".:M^e
Mfl,28L
mFt$Hym
M*H2,O
Mhnq+L
#m+jF3
mJuS}2K
mkgo]j
,m"mGJ]
mmJ3	|
?)|mNpG8
m	_O	3
MO	/R'
}\M`Ov
`MP'Qk*
MSNdXi8
@mT5etG'
mT?[i?_i
M_T|Kz`
"mUJ-v
MVla|Zhux 
Mymt2O!
M`ZY/US*(%F
~N|*(}&
$[N@!,
/n&1p}
n()@-3$-	*-&F&
n3mTn&
>\na-R
/navegar	m
	NB+yD0Y Bp
# nda asfxim
nel32.dllwGetLongPathNameX(_
NER=vn
NEXT"I
~Nexus
/nFAGM
Nfk`Wd
nHveB^fCfb7
NIAJDFKQFXECPlfGrjyS
NiK_bh
njcXR_m
:}n[L4
NLSoIM^6
Nn''84
n`NEC'G
NNN`dhLn
	nNprN3
nn`:'r
nnv?KJ
/?N_nVP
no-c"t
@n o G}i&}
 /np 1
`/NPy"
NQE5%5
NQr%C2
'NR2E:
N|Runn
N".s0K
NSCOLOR
Nurrency
Nx'l;>
NXoo,j
N]Z!6=1
	$&-[-o
~*O@\@
o1J,8`
o{},2[
;O2#ck
&o422HH
@o8Hu6
 oAKnKe
O)]bUUH
O)-"C)
o{<C')D[R
	,oCRT
	%	:	O	d	y	
o:eLST
oF1za+
o?foBh'
OGOJO`
oh8O*#
O>hg.j
OHXmt:
)'+okZ
Olbsfv
ole32.dll
oleaut32.dll
OleDraw
	OliCU
oLLLLL
~OlOgdh
"oLWFN
omboBoxEdit
oNAMl:e
oN!BO+'PP*C
!Open Source Developer, BRSOFTWARE1&0$
Op|"Gf
ORT_(_.SCK_LIC
o^ -sil.
otAddSub
oU4uIw5
out tml#u
O]},V\
O!V=by
OV^cKb_
O|W'nj\
O,wOL@:
\oWSAC
o}ygow
oyNxeH_
ozR1ML
'p#	^ 
P36Ywi
(p51T?
P6G1WV
p6Z:	Z4
!P7&h0
P,8`0@<
p8'''qrs
P	AgJ%
%PaG)l&P
P`a` %-Rh
PATHXPIRE
pBFZ/ll:
PCr@&H
PDt1!p
PEWMtk%G2
pGo`jQ
ph_lzPxx
	/?PhS\
P'hunZ
PIgKIN2_uH
/:piJKi
pi [z1
PjEOuJ
PjH5Cw
p=jT[2b
>>^|Pl
PL1"0 
PL:99904|X
@(pL@B
|;pmEm
?PMNNPf
Pnr@"1
PopupL<t
Pouco!
@PPI`e
P-'PN+& 
'P;PNL
pPWiDCZ
 pPWr%Wl
'_ppWXk
pQ4hJF#
p&QhB>
PRjCoWXZ
PRQ1aC<,
p`Rq!d
PRYPXWD
)/PsRJ
p$TMniR
-:P;uB
PUe@5P
PuT\F.#hX[\r
PW	xFn/PGd
^P>Z:d
'P?Z=@U"`
>	'pz#y
`._&:q
Q1ca?<r
"q3Ix5
Q3]@R*,
q3-@Zu
$q67UH8
Q744Q:D@
+*q)DC
{q)do-
'Q#dx;
qFf">)
qGHt[xy{_
QGW-uL
]Q^hK [
qHK3m:-`P
q`k_/E
Q:kGXm
<+qk<wV
Q&'KZ%
/ qLR`
QMC7G<
QNX1_4`U
QOUAp@
qOWr%C
!_QOx{D
QQ2@5y
%q%qUUuQ
<QrfPr
qrstuvwxyz0
_quq!b
;#=_q@v
qVpQ&S<'
<>Q\vXA
QWo)faV
QwQk_We
qWUpKP 
QX4&r6`@q
-$>qXh(?
qYV~fg
 @^]R]^
r4a%uy
R7'hb'-
-~r7"t
R8mg@	F#
~Range,~
rC (c) 
rCw	sZ
R-dPhG
rEAIt.
RebuilcK
R^eed_
RegFlushKey
r'&E'nC
            <requestedExecutionLevel
         </requestedPrivileges>
         <requestedPrivileges>
_-Rf;`
rfaceK
Rf_$W"
rgA~V6
rg~g50M
r\@,@G@v;
RHA)~Z
rHLtlx
-R\][L
?Rl#IsTP@
RM]bbm
]Rmh{5
R~;Nq$
%_ROLL
RPeHXM
RpJ;.A
rTN`WA
ru++I|e
~rw~oK
rx.{{h '
r-Z'6>X;
r^z"|i
\%'(%S
s00B0Ypo
S0, <!ik
*s?373
"%s",4),"
S5VrAM
.s7.XD
 S8C0lb?dG(7Q@;
s8VVz:
S];9 q3h
sakw#}53
SaveDC
s|b}[R
(+s\`CNCC^X'
sCoupA
%s, %d
      </security>
      <security>
SF^-mX'
sfs/7w
sgcAV982
{S>gle
@/S%-H
shell32.dll
ShellExecuteA
~#ShxNVh
@!SJDF
%sjmc?
SL_CTX_;
s#m=(Fq
SmNlint
Sn~^:/O
SOFTWARE\Borland\@
'S Os!$_WSE
SoTsq~
spMSFT
<sp@v}54
S-,Q`@
Sq#RTR
?-sr|(
sRGB IEC6\
+ssq|N
ssr3w$t
stfS7F
STROPE
#S /}ttn <v!]
STUVWX
StylY\
S<&uO8
         <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
         <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
S`u-Sb
].Susp&
s[W0&d'
sYCircjN
SYMBOLc_MAC`
;>sZ*C
?  t.<
t/130214d
T2b4uBwL
T2se^4
t6Br#s
T6]D#\=
t6[u&h
^]T73\[
T$7)j j
t7NdRh
"[T8~6
"}/tA*
t#;ADti;
TAdxnc,
Ta{	-G"
tagMULTI_QI
TAlignme
+ t%An
TA@^@y
TB+{{$
[T[]Bqr
TC~(O 
t;Cpu'
T)D8\<
,tDNbHex\
;T,d=ZF
Te&@p7
t<ePhh*
t\fd	L{\3
	TFileN
T~g9$(8
THBa{{
This program must be run under Win32
Th-~r~
Ti'6'.
)t<j@I
TJ[L!U|
	TJPEG
TjU]Kt
TkFreeSp
t*KPW3
TLogiG
tmGMfh,_
TNum=s
TObject
t}=o#]C
ToOwU!
TOwnND0wSt
TPF0yY
tPZ7hM
t);q313
TRACE PUgC
t(RmoS
   </trustInfo>
   <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
,T;s$|
TS7H|B
*t s.u
TThreadg
ttlyvtVkkn6"2AB##],
t$+tui
TURK*H
TvRtlb
tw9hEu
twareW
"'TWMF
TWuA$W
T"wwd)
TXPA-gP
Tx`tXG
t&y;'u
tYV)ct@ 
Tyw0i\
T<yW]ZO
TyYQ 7
.)tZ!~Q
U	;(7s
u90&`4[
?(ud~-
\@U)d2
/U/dcu
Udx^H{
U>\,"F
U`FH|"
uG	Fuchsia
UGRNM|
uhi1Yl9
               uiAccess="False"/>
u"IP]H0
ujcOlb\|
ujX6.D#
!U,.K	%
UkFHBz
ukkdb\
ULsdLSf
{UM2yu
 Um7w9X
uMz-jG
unGb,7
!<(uNH
Unizeto Sp. z o.o.1
Unizeto Technologies S.A.0
Unizeto Technologies S.A.1'0%
UNONUE
uo4|\2 G4
urmn/_d
Usage of this certificate is strictly subjected to the CERTUM Certification Practice Statement (CPS) incorporated by reference herein and in the repository at https://www.certum.pl/repository.0
user32.dll
\$&USl
us/S8-l
	uUnh{
UWU%;W
UYKGh`
U)Z,2f.I(~O,
v!(0)"b(1y
v;0f(!
v0fs1W
v0idOp
v0"xYy
%V4=z'C
(v>_9CC-
V\AdIV
VariantCopy
VDLHpG,pH
@v*eH+|
VerQueryValueA
version.dll
VI]opob
vI	_Qh
VirtualAlloc
VirtualFree
VirtualProtect
#viXnHa
.vk2E, j
VLength
vl{Lu+h
v*L:PO
!vM;q=v
.VNIdfM
!{(v_p
vPhY8<`UC
=VQoml
vrr|xt
v!}s$E
vt6|o:ew
|vTD+BgG
|}V{Tl
$VtL4vO
Vt*q<_
+/V-TQO(I!
v*~!'u
Vu0C'.
V^[U 1
Vu2q \
_V\[#Ufgb
|\VV"d
V w},q
Vww?fY
vX+.&\_
VZW/SR
[ &~@w
W0H7Dx
'w1qbm
w1S'X6	
W)"2W/<
+W3rKn;g
;@"W8A
W8gBCt
wAf8j.
WAM/PM
w%aR[+iR
!WBaidu
wbE HT
wCLM.d*
+W.D\$
Wevel	
WfsK^V
\Wg\9C
W+G.!'+K
	WGl3p
$Wh>[^
!wH:2rX'|
WHF>4>?W}v7b
W,H,UB
Windows
WJ2[KOMZ0
wkF	r133G
wKV--((%% !G
wLCID'eCWL
wmeas.
Wn$VH.Wz
'w~$Prx
*)WQWX
wRf +Q
wr""/p
>WRR]R
WR;/z$
WSiF:P
 w "sup
;W,_Tne	S
;w$t|Q
!W	+u0)
WU*dTd	
W..|Uzuk[>
w+vgVQ
{W+ vvn
wwwwwwww
wwwwwwwxp
WXen/O
wxr""/p
W"Xz"~
w\X,Z=B
WY{.c5
WYD@RWo)Y
$%$/x 
[X1#_j1:K
X+1qV|v
&X`$~4*
x4aA[k
X509_STORE
	X8	1i
>XA"nOTV
\}=x`Ap
XAW=cEA=UT7
#X#DEX
|x\.F6
!#XG9n
xhaph<}
XHP''ha
=xJiHT
!x@@K.
%X|L~6FA=X
x/Leave
	$XLed
<X/L<p
XLu7;C
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
.xMrm&
X MSWHEEL
,xnAEx
xN-AiO~
-Xn+<xt
[X<Oo{
Xor_Cmp
XPTPSW
]-xS??
:<X'tl
+xtZXtU0u
|:xu}/
x-u@RpbP*
`XV6ecN[Y
&X:(/[@x
:X?YSx$#
x%yU-O
_XyY 0`@y}r
xy''''z{|}:'''~
[XZj0\
y01P*`
$Y+0d W
y0,r\AP0
y228IH*Y
y	#24@68mt)
y2Qpp4
y\4gyD
?Y6fLFj'
}*y<{8
Y8<1B:
ya _np
ybG7iI	X
yh|3t<
yHG#A2
YH:i|-
y<HXl.|
)yl s 
/Yl+V!
<Ymckh
ymx1jH
"/", yo}
y^RAtN.
YsAdap
y;s+$h	f
&~Yu$ 
yu+Mrk
/y~x5-%7'?
y x!zy6
YyD.f2/
yyvvy|v
z=;842E/,%
.zdcp-
zDkt4/xD
` z)e9Ar
Z\EZG(
z=F8W;+Y
/z"F^Q
ZG8vRr
-ZHZER
_!zJ~3|8
ZJo(+By c
/zK82C<
zMH?[xg
Zms4s_p
ZTUWVS
zudzDB>(
&~&zV&(^6
[ZWfnk
_&zY=mg{_
Z?yvJ"Q[
)[Zy)y(H$
^zz111
^zz1111
^zz1111M
^zz1111MM
zz1111MMM