Sample details: 1f4d22e5131a66aa24f44eb0d4f1b54d --

Hashes
MD5: 1f4d22e5131a66aa24f44eb0d4f1b54d
SHA1: 2c8a144331ec124755413f31a83e21015c74f2ec
SHA256: 1c076413cca929b7004863f1a3992afda665786d6e179b9886ddeb8062194049
SSDEEP: 6144:JO1rHcVoYqGvlUhcu0uSfL/Iiq0nn9V54bkcPUu8pK6ynh8mShuqt:q8VoDGv+hcdbIi018pKL+t
Details
File Type: PE32
Added: 2018-06-22 12:08:52
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/System_Tools | YRP/Dropper_Strings | YRP/Obfuscated_Strings | YRP/Misc_Suspicious_Strings | YRP/anti_dbg | YRP/win_registry | YRP/win_files_operation | YRP/KeyBoy_Dropper | YRP/GenerateTLSClientHelloPacket_Test |
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
SSSSSSSSj
$VWj	Y3
0SSSSS
HHtXHHt
>If90t
uBh|J@
t$<"u	3
>=Yt1j
< tK<	tG
j@j ^V
0A@@Ju
^SSSSS
j"^SSSSS
v	N+D$
HHtYHHt
URPQQhH{@
0SSSSS
0SSSSS
t"SS9]
PPPPPPPP
PPPPPPPP
uL9=@2E
;t$,v-
UQPXY]Y[
t+WWVPV
QQSVWd
s[S;7|G;w
tR99u2
(null)
`h````
xpxxxx
CorExitProcess
runtime error 
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program: 
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
CONOUT$
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
%%SystemRoot%%\System32\svchost.exe -k %s
SYSTEM\CurrentControlSet\Services\%s
DisplayName
Description
Parameters
ServiceDll
cmd.exe
%s /c %s
net start "%s"
del %%0 
rundll32.exe "%s",%s
Software\Microsoft\Windows\CurrentVersion\Run
kernel32.dll
GetNativeSystemInfo
%s%d_res.tmp
Not Configed, Exiting...
\Microsoft\SystemCertificates\
\Microsoft\SystemCertificates\My
I am Admin
Service install success!
I am User
\rundll32.exe
%s "%s",%s
Run install success!
Something Error!
%s "%s",SvcMain %s
bad allocation
bad exception
Unknown exception
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
MoveFileExA
WaitForSingleObject
GetTickCount
SetFileTime
WriteFile
CreateProcessA
GetSystemDirectoryA
FindFirstFileA
GetProcAddress
GetTempFileNameA
FindClose
LoadLibraryA
CreateFileMappingA
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
GetFileTime
GetVersionExA
WinExec
CloseHandle
GetTempPathA
DeleteFileA
KERNEL32.dll
OpenServiceA
CloseServiceHandle
RegSetValueExA
CreateServiceA
RegCreateKeyA
ChangeServiceConfigA
RegOpenKeyExA
OpenSCManagerA
RegCloseKey
ADVAPI32.dll
SHGetSpecialFolderPathA
SHELL32.dll
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
HeapSize
RaiseException
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
MdAdum
CREDRIVER.dll
CREDRIVERS.dll
Embedding
MdAdum
Microsoft device and Drivers Update Monitor
Provide Microsoft device and Drivers Update Services
WinDevices
CREDRIVER.dll
CREDRIVERS.dll
CREDRIVER.dat
IJUDHSDJFKJDE
S\\\\\\\\\\\\\
S\\\\\\\\\\\\\\
S\\S\\\\\\\\\\\\\\\(
S\\\\\\\\\\\\\\
S\\\\\\\\\\\\\\
S\\\\\\\\\\
S\\\\\\\\\\
S\\\\\\\\\\\\
S\\\\\\\\\
xfnoogH
SxEnoogH
x2noogH
xnmoogH
S\\\\\\\\\\\\\\
S\\\\\\\\\\\\
lnooox
S\\\\\\\\\\\
lnooox
S\\\\\\\\\\\\\
S\\\\\\\
oBy<looV
\\\\\\\\\\\\\\
S\\\\\\\\\\\
S\\\\\\
xPboo(
S\\\\\\\\\(
S\\\\\\\\\\
xenoo+(
hxwnoo+T
xxInoo+D
^x6noo
^xfmoo
^xvmoo
^xFmoo
^xVmoo
^x&moo+t
^x:moo
S\\\\\\\\\\\
S\\\\\\\\\\\\\\\
S\\\\\\\\\\
S\\\\\
S\\\\\\\\\\\\\\\(
S\\\\\\\\\\\\\\
S\\\\\\\\\\\\\\
S\\\\\\\\
S\\\\\\\\\\\\\\(
S\\\\\
SxUdoo
Sxo{oo
I~MyOpfT
^x5koox
S\\\\\\\
\\\\\\\\\\\\
S\\\\\\\\\\\\\\\
\\\\\\\\\\\\
SxcVoo
S\\\\\\\\\\\\\\\
\\\\\\
S\\\\\
xnQoo1
S\\\\\\\\\\
S\\\\\\\\\\\\\\
S\\\\(
xx(oo.
@ooxquoo
x(aooo
S\\\\\(
S\\\\\\\\\\\\\\\\\
S\\\\\\\\\\\\\\\
S\\\\\\\\\\\\\
\\\\\\\\\\\\
\\\\\\\\\\\\
\\\\\\\\\\\\
S\\\\\
Xoy9nooW
Pygmoo
\\\\\\\\
S\\\\\\\(
S\\\\\\\\\
S\\\\\\\\
lnooox
S\\\\\\\\\\\
lnooox
S\\\\\\\\\\\\\
ooxzloo
tgooxwgoo
lnooox
S\\\\\\\\
lnooox
lnooox
S\\\\\\\\\\
tooooV
lnooox
lnooox
lnoooxm
lnooox
_x*joo
lnooox
tooooS\\\\\\\\
\\\\\\\\
pooooy
lnooox
\\\\\\\\(
x6]oox
IpNQIPNZIYM
MIMHI~{
GIpNQIPN[IZM
MKMII~M
IZNcIZL
IYIZIY
xlZooM
\\\\\\\\
S\\\\\\\\\\\\
S\\\\\\\\\\\\
(;:::gv
S\\\\\\(
\\\\\\\\\\\
S\\\\\
S\\\\\\\\\\\(
\\\\\\\\
\\\\\\\\\\\\
\\\\\\\\\\\\
noo\\\
\\\\\\\\\\\\\\\
xPEooy
%Lgoox
xN.ooy
x#.ooy
lnooox
S\\\\\\\\\\\
lnooox
lnooox
lnooox
lnooox
lnooox
`x3ioo
S\\\\\\\\\\
lnooox
lnooox
lnooox
S\\\\\\\\\\\\\\
lnooox
\\\\\\\\
YS\\\\\\
S\\\\\\\\\\\
"mc5lo
ooomc5lo
noo1,c
txTmooo
Hx3moo
lnooox
x-hooo
lnooox
lnooox
S\\\\\\\\\\\\
`x,ooo
S\\\\\\\\\\\
A{AIAzAH
\\\\\\
A{AIAzAH
S\\\\\\\
AyAKAzAH
Xmooxq_oo
%Xmooy
\mooyw
\mooy\
%xmooyQ
xmoooy
Tmooyn
5`mooo
TmooyM
%Xmooxs
%Hmoox4koo
%Hmoox
%Xmooyu
-LmooxB^oo
`moogQ
-xmoo3
.Ro%xmoo
o%0moo
-LmoofQ
-LmoofQ
5`moog(
tmooAh{
o%$moo
o%@moo
dxadoo
Hmooo{
HmooxZdoo
o%,moox7Xoo
@yqeoo
x[,ooYS
xj~ooW
xX~ooW
lo/ooW
lnooox
XoxwiooS
xIpooW
lnooox
lnooox
ljoofQ
xRcoox
VxJcooS
lnooox
`x, oo
Sx'loo
cxGkooy'noo
LxLloo
lnooox
xh?ooo&,
xG?ooo&,
x/?ooo&,
?ooo&P
lnooox
lnooox
lnooox
xiyooS
lnooox
lnooox
x2jooo
ax@ooof
axsooof
x&gooo
lx6goo
lnooox
x'ooogH
x,XooW
lnooox
tx9OooS
S\\\\\
xH(ooW
xO%ooW
xH#ooW
xq"ooW
lnooox
ooYS\\\\\\\\\\\\\
,moo{.
S\\\\\\\\\\\
S\\\\\\\\\\\\
,ooxdBoo
lnooox
,ooSxWBoo
o@y$ooo
x_+ooo
lnooox
L{Kxu\oo
lnooox
tx)'ooS\\\\\\\\\\\\\\\
AyAKAzAH
\\\\\\\\\\\
YSx	ooo3\
dxYmoo
S\\\\\\\\\\
{dx~Soo
lnooox
px+:ooSo
lnooox
tx<2ooSo
%`mooy
\mooyw
\mooy\
xmoooy
Tmooym
5`mooo
TmooyL
%HmooxU
%Hmoox3
-Lmooxe
`moogQ
-xmoo3
.Ro%xmoo
-LmoofQ
-LmoofQ
5`moog(
tmooAh{
o%0moo
o%@moo
Hmooo{
Hmoox~
Hmoox6
o%<moox[
@yHeoo
lnooox
ooyjnoo
lnooox
lnooox
lnooox
lnooox
dx?moo
S\\\\\\\\\\\\\\\
YS\\\\\\\\\\
"mc5lo
ooomc5lo
YS\\\\\\\\\\\
lnooox
lnooox
ZoCrgB
ZoCrgB
ZoCrgB
ZoCrgB
x%noo{
o@Sy	ooo
lnooox
lnooox
dxa4oo
PyInoo
ooYS\\\\\\\\
nnoYS\\\\\\\\
A{AIAzAH
gQpl`l
x5{noYS
`xX~no
lnooo{
ooS\\\\\\\\\\\\\
\\\\\\\\\\\
\\\\\\\\\\\
S\\\\\\\
oo\\\\\\\\\\\\\\\\
\\\\\\\
^xerno
lnooox
xhiooW
lnooox
|xqmooS
lnoooW
Hx*joo
lnooox
pxAeoo
S\\\\\\\\\\\
S\\\\\\\\\\\\
yy~oo\\\\\\
XxfAno(
y=~ooW
0123456789:;<=>? !"#$%&'()*+,-./PQRSTUVWXYZ[\]^_@ABCDEFGHIJKLMNOpqrstuvwxyz{|}~
`abcdefghijklmno
0123456789:;<=>? !"#$%&'()*+,-./PQRSTUVWXYZ[\]^_@ABCDEFGHIJKLMNOpqrstuvwxyz{|}~
`abcdefghijklmno
0123456789:;<=>? !"#$%&'()*+,-./PQRSTUVWXYZ[\]^_@ABCDEFGHIJKLMNOpqrstuvwxyz{|}~
`abcdefghijklmno
0123456789:;<=>? !"#$%&'()*+,-./PQRSTUVWXYZ[\]^_@ABCDEFGHIJKLMNOpqrstuvwxyz{|}~
`abcdefghijklmno
@xB:AyF4
ooooP}
nooo-r
noooSv
oooooooo
{7Dcg{q
]\]\\\\\\\k
nooonooo
j6tr	86b
C<I2N$
.|Ji6]
	kz'_B
@6yz^\ky
hU=xWza
YwVhZ6
^J{g\F6
PWro^)
@}B<	{
 :m9=~X
:z1LM3
d)&F:1#fR
:i`m#u
H1+Q20
:D>v~~$
ozEX~k
6JFH~pc:
NOOas(2
lxvp\h
BzVB5_j
2}KFOs
<n[)M`R
?xZft6S
^\sNF"
a0Uzz7
3lAKr]
H[Vh@z
"fBMK"
jpxBKs
)zzzr$
  :-i2
4-1::p}	2
eZfLHS
s's#sbw
3EW4K4
51ze*F
Z@s\ F
7b(Ws]1r
m.<}f+l
/3}i;"
$rNs^!
25%HLb
nLsKBa
G:yw>~
ETr<\=[]
bu1*\svX#
gb?[}9
rW7ewz2A
ZHYKFW^_Lx
;AYtge
 3A#3N
vh%jbPy
2(&6r*xiv
R4R2`{
|=	6}E
j~`Lew:D
|.aTfR
 n"-sc
qzzf2&
8Y6mw+V
%-x|oD
}VNzhs
]Fk>#f
>lBzSJqW@lV_
aF?~9"J=
H7eGH.
gep2_]
>UUu{#
^<WTps
8ze^_D
";5`t8
2Vv/AV
mzzX{G
a~~oxZwc
[ r(a4v
Hg2TaV
Qw#G8| #]
|nzZsr
^WyL[:
NWnV9N
NrrORsL2"
~f4=n>
W0wgu@
pK|cpU
N?B=CBD
ZH\mf{V
~;hij*
J7pUi"
rvc:gXvd~'
W^99R~7lJ
rnx^~<y
aFAh!7
cas~/-K
vAZ9|J
RMvPm<bt
yasT6u
DSp#A72
i!GH.B
P}~}X#z
)_~J:n7
0>GcV0
aUW]~j
	7;)YO
.H|]~1
a>Smwy
~Z:!Yn
Bj!B^sB
FZY~2l
sl\.s'
zRH'N~"
Y%W@[V
$aSP9B
'uQ'v{
3E136j
n)|Uky+-
y{rZaf
'DOHj|
wr(rW<
$utu\w
H6"&s_
f2|f=8"
}	w36"
6b!N.r	
=6i";K
jpB0GTH
2LQ##x
1o=q- (.W
fLj7r('
	ZkuZj
[fbeZ]
UJ`1P3
	J7`6|
X9@tW6
2ysfRj
5G@,>}
e;'Ufage
E%Rv|	
KUj|Yr
T(F|g\og
:%B'{E|%
9GcS1Hk2^9
s.M.t9
2}ztzL
nBvDDJ
VrdZ	|u
Tjl}Tf
zekR^c@
jm	}MV
g!Sz~eV
Fby n|KV|	
zj:=L3;l
<v]f\jZrQ`
B)HoFg
n.`vx|R6Tl&
s~+V	C1
	&|:Jrr
~Gp.-l
	[_'`>$
%2jYQ.
el`Vmr
n*3v>Xa>
sb	OB'N
}"FFcT2
`/BzsHwVC
iB"F;\$dW
*MsRxV
:\}+r>
B'S.c}
lTRbmc
f[&T`j
Xjlw;m
hyWaYu
$l2^&6G
vL;ls?
wWskp~&q
Kq	>.d]	G
MfsVhtv
<T6U;hK
*"\O@[HUV
vj]iv9=A
,"28`r
vX*sJ?
s 5@Zg
#u	Dby
p=fVks
'P/fJ<)
3xya*x
ZERVl/Co
GMfPjtVYO
9He6,:
/:R	~J
z|zjXv
:gMJ*V
YTm`W=k
p[rw>C
2zAzxneZ
W!n^\i
R#_[}Jg3
v~/6cJk
	#Td	4b6
RMg.\Zt
Wejagr
ccC	B%
N:8]#%
p'nTvD
z~9Rx~
&J0q"n
MzzWHA
A.ANAn
W^20wW
nf0Bb5n
x	srt=
f}[%HNa
6nxTH)
1HQ2V|
TFtd,t
_|g{2}
B;1T~["
c6v9oMgV
{t\Y4c
v1n&Ht
frh|<~
w)WC7v<ju 
GpYtH=
BbezzIG
V.s-qV
[vc&n9
r6&l+@
t[\WV2>
F*mT=Z
vf={6Tvg
agST_b
T>ge\L
Ys8$j]
Fv =2&
@zYw>Z
v{$hYnV
}36aoY
js	\N?
"t+^h:
ffV~w]
1^@Jc!
Pn|w.=
:|@Mn.th
{r*]	gw
nQ2|bt@:
(* 7wB
w#TV|y
v=FFf^
HHWf^J
e*0m'#c
OFFE&2
<r:HYsS
|_H%G\
lm|c	7Z
}!4)TR/
Mis0]9s
e|l%-3
5@pW}"A
5fdFfw
/Cp.h|
vi}L;Ccs
&LHz9S
yVN/}a
7-~~9&K
"'}&tC'
>4DLC^
K)s@	7
qV5L#Otv<7
Zzz6R=W@
VJNbf`
1cGPaBt2.
6KR9"Zv
Kzz7w,
~QVWr`I
>B)?Vsa
2|>]`*
}rCB(f
'_WnhR`
^l[zr`
\=~r#dg*
rujK?\r
Q`!xWFCp
}\3s}5!
Y_MF&^r
QHEp+M
&'-I3A
*q23\+
~b&<Y|U
[riM">;gDk[
C6UUt1
"6CDWJ
isHi<]
g~KdH@P
sx{1YcW\zl
~~~~~<z~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Znv6	fc~b
OSk;gN
yTvjfbn
R^JzFBN:62>*
Co[WSz_KGCO;73z?+'#/
Zdt|&.
dX\@THzLpD8< 4(z,P$
y}auizm
eY]AUIzMqE9=!5)z-Q%
ux"?R6
k;Kh#z'
3Os1O~ZS
^6~0~~
W{K9btZ6V%
cGc}k'
;E5h=c
S|6LRcs(
^W;+':
;{?S/cz
?cC;/s
sCgS+K(:#
~w/Vdp
f4OA~<
rf0xg>2^
qwv[L8w|
;K~s}FJ
7\hvmN
2"V~""-
r.H	.'*.
KLK8j3
b:=5B}9
ZrLzRa
29(y+5
bSm	j,
>~~W)k
	B8%J!:j
fz&!,k
sy*&v.r6
djuT&Y9
J*j\rShv
F:D	`:
Fs0[?.
~s{sg/s7
;Gcs#'
H~~~~~f|z
zz~~~~>V~~
7+'~,~
l[B )j
kgcoz[WS_KGCO
2H;Z~Dj
PkNzbp
`>8`tz
qM%r~x
A{4mz+
~"zk?cg?S/
S_#gzW+g_oK_g
~~~~~Wz
Zdt|&.
~6~~aj
JZ1Lj,
jVJ{ZngB
~ov	6[j|
vYZv_F
j79JZi\
dEYJ	~Xv
r(H0h6
Z^eJrj
1<ZRlg
1'ZWdcZ
M	Z\Wj
Z	S|j}
2tJ1&Z
9JZ%Ih
"[1<Zu
~~~~~Wz!
~'&|~~~~vwzZE
jVJ{ZngB
~ov	6[j|
vYZv_F
j79JZi\
kw=+kw
$$$$$$$
yt$$$/
kW=+kW
U+{WDkw
t$$$/`
gt$$$/`
]t$$$/`
t$$$/`
t$$$/`
BD$$$/
3D$$$/
(D$$$/W
ooooooo
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
    <application>
      <!--The ID below indicates application support for Windows Vista -->
      <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
      <!--The ID below indicates application support for Windows 7 -->
      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
    </application>
  </compatibility>
</assembly>
DDLLDDDL
LLDDLD
DDLDLD
LDDDDDDD
DDDDDDDDD
DDDDDDDDDDD
DDDDDDDDDDDDD
DDDDDDD
DDDDD@
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
    <application>
      
      <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>
      
      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
    </application>
  </compatibility></assembly>PADPADDINGXXPADDINGPADDINGXXPAD
051V1k1t1&222=2V2p2w2
323;3r3
484F4O4\4a4f4
5)585l5
7	8&8S8
9*9U9^9k9
< <*<M<Z<
=*=<=N=X={=
>'>.>3>=>F>K>p>v>
"0,0n0
181=1B1
3o4z485]5q5
5(6D6g6z6
8*878C8S8Z8i8u8
9>9M9V9z9
=!=*=1=S=
>(>3>M>Y>a>q>
0B0Z0e0
141Y1l1
2A3N3W3
3;4F4P4a4l4
60686>6C6I6
8:8@8r8
91:7:Z:_:
:%;+;6;B;W;^;r;y;
<5<D<K<X<{<
<&=,=H=`=
>#>->e>m>
?"?+?7?<?A?G?K?Q?V?\?a?p?
0&0V0[0i0x0
0I1V1o1
>*>3>=>q>|>
041@1S1e1
2/2X2i2
5&575s5
6/6b6k6w6
7.7;7@7N7)8L8W8z8
9!9K9Y9_9
>9?>?C?H?X?
&0+02070>0C0
0K1Z1i1r1
2*202@2E2]2c2r2x2
636Q6X6\6`6d6h6l6p6t6
667A7\7c7h7l7p7
8Z8`8d8h8l8
;2;7;F;O;\;g;y;
<$<2<9<><G<T<Z<t<
1T3_3g3
3-4>4y4
4)575F5T5\5i5
?)?;?]?o?
5J5g5m5s5y5
6-62686>6T6[6J7
<)=C=L=w=
1 1$1M1s1
2-34383<3@3D3H3L3P3
4.4J4g4
8(8583:
;2<J<u<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
=4>8>L>P>`>d>h>p>
0$0@0`0
1 1,1H1d1h1
2(2H2h2
3(383\3h3p3
4@4H4L4d4h4
4$4,444<4D4L4T4\4d4l4t4|4
; ;$;(;,;0;8;<;@;D;H;L;P;T;X;\;`;d;
= =$=(=,=0=4=8=<=@=D=H=L=P=`=h=l=p=t=x=|=
T7X7x7