Sample details: 175c7592585904b34d31417149443262 --

Hashes
MD5: 175c7592585904b34d31417149443262
SHA1: 138123a71ea317166431440f17efa349d8ef8ec2
SHA256: 3be6bcd345ac315d142519fe8cc4acdcbd1dd0ba082f7c46377fc919c7a09a08
SSDEEP: 12288:ljLdkv4MIYebJ3l4eYbyGpviyXw6BUIblx4cZHcN4240/2HZooLqFb2tlF3M9:c2YqBqjxO4lx4oc34naoOFCtl+9
Details
File Type: PE32
Yara Hits
YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/anti_dbg | YRP/network_tcp_listen | YRP/network_tcp_socket | YRP/screenshot | YRP/win_files_operation | YRP/Str_Win32_Winsock2_Library |
Source
http://rayanhalal.ru/cr0.exe
http://rayanhalal.ru/cr0.exe
Strings
          	            !This program cannot be run in DOS mode.
KRich'
`.rdata
@.data
jdjdj2j2
YYHtIHt8
QQSVWd
VC20XC00U
]\ZiE[Z
]\ZTF[Z
 ]\ZzE[Z
$]\ZeF[Z
@e\ZYY
Y;5hd\Zv
=hd\Z3
Y;5hd\Zv
50P\ZW
50P\Z_^3
;5lT\Zt4
lT\Z=HR\Zt
tT\Z_f
Y;=DX\Zt
~pjCXf
FhHR\Z
hU\Zt'@
HX\Z95DX\Zt*j
VhDX\Z
f-00f=
f-00f=
tfHtWHtHHt/
HHtVHHt
[ZYY^]
h06[Zd
;t$,v-
UQPXY]Y[
d\Z98t
,SVWj0X
Wj0XPV
jdh@&\Z
j@j _W
s\Z} j@W
< t8<	t4
5$d\ZW3
=Dd\ZYY
5$d\ZS
5$d\ZV
5h]\Z3
=tn\Zf
%hn\Zf
j$h`&\Z
[Z_^[]
jA[jZZ+
p]\Zu\j
p\Zt@V
URPQQh
Rh&a[ZQ
PP9E u
PWWWWV
PSSSSV
v	N+D$
Ht+Ht$Ht
v	N+D$
95dr\Z
tO9=tr\ZtGP
5,_\Z3
5D_\Z3
50_\ZC
+t"HHt
~';_t|%3
HeapCreate
kernel32.dll
Ultra Bold
Window
HeapAlloc
HeapCreate
Unhandled key message : %X
Character : %c
Left mouse click.
Right mouse click.
memcpy
socket error: %i
bind error: %i
listen error: %i
client %s connected
WindowsApp
ZZgeneric
unknown error
ZZiostream
iostream stream error
ZZsystem
string too long
invalid string position
list<T> too long
ZZbad allocation
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
ZZUnknown exception
CorExitProcess
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
_hypot
_nextafter
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
(null)
`h````
xpxxxx
ZZbad exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleExW
SetFileInformationByHandleW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
`h`hhh
xppwpp
\Z__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
1#SNAN
1#QNAN
@"\Z\"\Z
"\Zx"\Z\"\Z
"\Zx"\Z\"\Z
54[Z?4[Z
l([Zu([Z@
R3[ZV3[Z
%\Z\"\Z
I^[Z\^[Z
]|CeX3
AMlCU\c
	$G7q}
s=SM@(
"YX8{<
p)*Fku
 3}@[X
xQ-4_-
A-@CuD[
gKL0XpE
<=8leC
`3%t[u
GetProcAddress
LocalAlloc
CreateThread
GetCurrentThread
GetCurrentThreadId
GetLastError
CloseHandle
lstrcpyA
lstrcatA
lstrlenA
LoadLibraryExW
GetModuleHandleA
IsBadCodePtr
WTSGetActiveConsoleSessionId
EnumSystemLanguageGroupsA
CreateToolhelp32Snapshot
Process32NextW
KERNEL32.dll
SendMessageA
AttachThreadInput
DefWindowProcA
PostQuitMessage
DestroyWindow
IsWindowVisible
DialogBoxParamA
GetDlgItem
IsCharAlphaA
GetSystemMetrics
InsertMenuItemA
DrawTextA
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
GetCursorPos
GetCursor
ScreenToClient
MapWindowPoints
WindowFromPoint
ChildWindowFromPoint
DrawFocusRect
FillRect
SetRect
CopyRect
IntersectRect
OffsetRect
PtInRect
SetWindowWord
GetWindowLongA
GetParent
EnumChildWindows
FindWindowA
GetWindowThreadProcessId
LoadIconA
LoadImageA
GetIconInfo
DefMDIChildProcA
GetCursorInfo
USER32.dll
BitBlt
CreateCompatibleDC
CreateFontA
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
SelectClipRgn
SelectObject
SetTextColor
CreateDIBSection
GetObjectA
GDI32.dll
RevertToSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
ImpersonateAnonymousToken
SetEntriesInAclW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll
SHBrowseForFolderA
SHELL32.dll
CoCreateInstance
ole32.dll
WS2_32.dll
NetFileEnum
NetApiBufferFree
NETAPI32.dll
GetTcpTable
CreateProxyArpEntry
DeleteIPAddress
IPHLPAPI.DLL
StrChrA
SHLWAPI.dll
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
COMCTL32.dll
IsAsyncMoniker
urlmon.dll
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
EnterCriticalSection
LeaveCriticalSection
VirtualQuery
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
HeapReAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileW
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
[ZHX\Z
HX\ZHR\Z
^\Z r\Z r\Z r\Z r\Z r\Z r\Z r\Z.
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
0Kkms(
{t?l|T
}g$N{Q
T-3NwD
41P}I<^
-2'v13@
a/vh[tg
b<`*pe
{u//jL
qnEFrG]fF
*?u $\B
y-wQ]d
5nTuK8	A
&nINK!c<
U53c_[3
g#HjYUe
Kj PD%tu
B3-#^>
%adz(?qO
@hl4V;
0FW{;`
dBR*b<T
;V+1P:T8
#U\eX$
{G>Ms8jh
$]Zec4
t_`"+/+.n
8RK{Wm(L
	V&9/=
BbD,Db
u[=zIL{
x%;%fIi
HSZloI
hC*4CP{
9ct?;O
fTk?YS
v}<L4o
');G(b
gN'}vK
(%X$#e
5O$'slU
AYsi$!
Gd/(G'
Ug]0=L
mT=4~[
|J)0xP
|yvam$(trL
Q-:Z~}
PIu))kT
MAk2#C
;~71sEN
:+R2S)
YJ02zg
K0D/)"()
Dhp4/>Jg
d2ED.Edr)
K*or3x6.
\:C{;v_nd
6B/<\|
gl|d0i8y
,c9?CB
[=R[lG
bhR@Ag
0+G(e<K*
`O'}R-
2q][(DP
PLoPPc
	)]z8ZT.v
Kb[D I
z!XAv^2A
QQpkm.
E+|d+ 
vRW{,5!
|'$~-[
X0[qC)F
sLbVaB
|)Ixv]
.W^}FH
s^!9DE
,-Oe^g
2q"Q,?
b<`*5s	
-zi c;	
fC~4)J
o}A~B#O
-6A4_6
U^e"#$
lsw6}B
"H9<2[E.4
{Cg}2#L|
uKw(]]
z\bI.B
?	5C#I
Go|yG)
-%AF82
paayu*
)axufy6u]
['(3Y;
7^W4Dw
[`|)#w0
D<(4W+V
.HdHG<
x;^R^~
N/*G-2
yc=b6}=W
RZM7pjL
DLKyg@CJ
8t8n/h
xKl[ko
c6?^D[=
JM^sK-
G7aAc@
|*Ew%~
,LhvtV
oU<Cn>)
Mq|`qk
(r5n\c3K
iFTbWNbl
F6Rnw3O
tBaj"r
yPL;o7
`=xc$NZ
l8qY!Q
X@fH51
1"GJ72
U\6)jb
S,\O.z
l]n^z(
7;w9&e
o|,#(m
CorsGa
-^Po~^
2KZ=$\
zn_<>1
|,5V:z
;z8vjW
IAH.v*
XMD,pSa[O
(_;A9nU=;y
^U`_'t
/`}Kf.
\Ox*#n
25uhW-
u-w?SW
xWrM:LYP/
)CD~+#
;	D8^3T
1u(Bl3
$th%]{6~
wzO|j(
jF<H6/
$d:9_)V
5fQbT,X_
 E#7W@
(}'M]'
CM.AHW
1@C]mS
d}Eb-e
}YX;Yx
G=9'(6
BOEt23
C5)<0~
YVwE%'$81
Q3},n|
7&Ox}1
B&gAId
`+;R@Q.
eI	7]H#H6'
S4S{=*k08
}eg-OS*%
}|!Kta8
S(oqmkO
7i]r<pc
2J0PG3M
7&(85w
Jxj<uA
YvB(S(!JA
lg/UVlL]
JKIHBb
5?1p)OR{
V"%d-d>
/:~=n#
<>y#T	o
?R/umE
7b4X)71K
kAk62L
1.~_(x=<
'H4AjVhj
{ =!~!m(
LKn4wA
Q+/f[V
ne50\tH_
Vm[<g'}
1$*&<H
##O`}k
gj:a"y4
RFyed9mjL=
_t8>Sz
)O#6nD#
9	zQ[)
^1i$k#
57e'6-
`E<+/[
8b2XtD
Kf*<30
R1<S+@
?:h8(Y
x}BI)X
Sb_fsJ
tKU*aJ
}1yz5+
|Q*E>G
f)q,];
8M'yoT
eCo3CB
IY!	p:
toNO|]E
gQ%m(HRrPD
>xGP6z
4;~3iGZX.
k9z*p?y
5KB!|	
{,(?wa
!^4+GD
`gMX!lGa
+$Y`7_.B${
}s+gn&
#X;v+ORD
wOV(x)l
p3y@F*
hOkb	]j	
ip/hd<
pahIt/w
w6hw<E
D`_?%~T
n'7,g0
7bHKJ,6
}3"y2M{
HGwh'R
iPH{j%! 
g0"<vH
xf"G4.u1
AAGXNUA@Do
QXOy+;
Gs,ThZQ
<v<X]t
~hOVJ.
8@l='e
Ijh 7'2
bQ1m'F
S&,d =I4v
Jb3S[P<
tv0)<E*
+O !Sk1
RJ &Wn
RQ	f<_
7X.ckW
P[ 36x0
mP0	HY#
u_r/fz
/_rs|p
U}$oPr3
(z,8\?!4 80q
dg_0h`
DF#9<J
DsN[<5
z<MQhl
aZ{0=pTY
\qr},)
qfYP[?
dRkbK\
O`>!ns
Es:Xzoy
SN+/0|
;0gQlJ
a.xWC{
Xz@tQI8
HkhsSs[
pX'9?t$os
iFNdEH)
R*u&*8
ZRb&){hK<
	K-Uf]
O;w7JGhD
(OLKC|
Lx94_(
5]a {i
3$*&<_
u5(C,C
XrH!T/
t9DC`Kr
dT4u(P
F~<LI~
]M4:r^
b#wby3B1
#4eZ=5
~lMadJ
1O<@=R
dL@6k08
9h?1Vs
WH&Ubx[C
\Uzc#r
j$WEIe
6 0FtDF0b
C^~}r{
ld&Hbq
S*j&R-..lz1
oEPu(k
7"W&l[
58MAKY
t.2]`r
jz[.<O(3
M2GF"a%
: !Y`W\
vx;`#6
UZ}^14
'2+H[$
4Ob}`\3
@6C7&?
x[ 1$K!
X\OCCc$S
w!@H'Q
l+kXdB
+^)~bY
K~x]2[%
"S\H+5D7
*ohg*X<
zl]g"<
)5l$#3d
O"oCm5
$yj0WL)msK
Vd #D{
T,(Yg`j
PZp4yR/
2o Szm
d1qsYM
Me{w\"
<!TP2{
c"y	JQ
tWf-9D
#zW5*mDt
A*q	y*
?F&7iE
gnH /|3[
!)@U|W
6:*P<C
R[u84?
HMB8.-
Ae^9+nh
DDN1'y
DdBG7{
<Ex-|>
mZRe^4
U'hcE?
75'Mm&Un
e9(# <
E"Lz'z
oyPLtE
(icT&&-
IvPIlU
ynvc(4K5c(<z
e=Sv)Z
+ ~5PL
wmLLia
~J2k([
_h{^!<;
^}-~QdC
OUbmaDG
.ZQaa(
`Q2*T-O
%y0*M'
U(W9^q
tLR9'cz
jy#TcY
)1ZhC}
?bWpxb
Qg!cx>
_E i$_
 &cE=@
XAK)<rLE
TEGlnD
PKG;"J
-a.<03%
`	zpSdV
Q'oqlc
A.opzC0\
,TuC&U
t2d!G?
Tl	QA%
Hjw[q%U
#!X)j-
3%2Q M_
 x	\aYh_W0
<O,*e-
|\ZsA<
+	6uEn2
q,=`{w
LLTJ~fX
&K@b`To1
^`\x-'
oSrWW;
o!WQB\
/dZHD`=
T/>/qY
UmHLGW
V'f3DR
l#\+uG
.d=M{B
[,('9%
+;lH{s
^[Y[,5W]]
	w"-*-g
7Nios&
`KzmPK!n
ib 8w{"m
@B4S4Y
oih~1J3
\egywZ
C!cFLdB*
kU=Qxm4
^9zf4/
Mmgz"p(U
!<P6EH
ycCgr)Ro
f[glQ;9
]f#DM.v
Nkb3qE
mKBG%]5
+tC{Ul
H"S-tW
L@FF(l
 YS ^	
po?/:GPf
<^u?fg,.
:P+Y,n
xR=sU3
,"p:	Qs
bNd#y2iM}
ms74S-i
;HjqWoy6#
%'6x4R
($Ig~d
D&BUiu
1LGgCV~
.pE;_v
}E)iWw
kP'	 .
CLH/T-4
r_QN:CK
NOkexFZ
&h10:[
3}F%1z
0Z][^]OW
m8(SYa
CJ"!GT
fzOm C
o1+$d0
_{ccg$
w:wr$#o
U'oPe4
AL7`0q
!_mfb`,<
:zeDIIe`W
k=%fKf
rC)T-f
D,Bc@J
QWm0*6Fq
MoScD_
ua /*/
@>)	x*
QnCrcJB
VxiOuwj
`\<7>2
mAa}\bmy
|oz#DOw
CwiO#+c;
|R:bV-8W
Yrl>Nu
TpHZYa
6;_LL|Y{
Td_;8_ul#\
a=S!T#
?U_C2x
v6CRh%
`\BtU2
lCf`4k`
!EIb~Y
K;	LR?
dp&DR=8
t1.Oc=
v6@_cv
b|;~U*
ab]_B=
\[5,T-O
+z\_Vm
5KUc-M'&
Dg-x]\9$
u 9ze<x
zTciXt#w
yZ+\f%
5OM(KZ
><(qp|mnO|{
=3M0&t
5	Xi.]
B- dP|[
~tcQ)R
+	wua-
?Lj7lb
[q*AY[
g3X/{H
cmL?hRu
u'r;>T&r>
|}wspu
Io"{_{
OC54d0D
4^d@D2
%|3G7z
i\Coz>AAP
uT"K&B
@q={zOuj
BK;rL^
\0YKos
=([	DiH
.X+<q[
cHtP;R
!wL/9&
"%(*VvjL
6ZKYK7f
HcAQLy
0FZ86q
TY&P=u
q 5KF	
>:0{@,j
'Znq,a
54.+q<
e6&wdqn
__,"fm
ZM=ud-
J13Wp+
B8wT1'N
.+xdUFw2
)J!F(i
cp~XW+
A]*s{YY
XHp@qb;
3&?Y;L
]}(8~M
.iM;,"
X7$(RI
q(M>dv
RW -|+%
5N!\a9
 8@U#v=
Wj7(>Ip-R
#P	2&j
q7_vZv
z%ReTmOu
DldA2e
(t)Z!5-&
IPDZ*(d"jj
THH?k.
9Htl2K
_4vZNzC2
Nmzf(8
\1]%j*
}KPJ:O
^`GD(U
R'L5x=f[
D].DCf
)*NvjL
$oYx<\
9Oq]0tEjMB
%nCp&/
'iXt'X
d_PUSS
>o^ojv
=UhhlU
JHm+t|3
WDYeJL
0k|oS'
F3eTS,
KO_XZd,e+C
K)x!ps
+,3Kd0y
tA(;"X~
w00@RL
iI	vbC\
>#bsx:
%|$GXz
K^} ([O#H
,^;Zf(
`	c'WK
ekF<mP
Z`K:2sn
+DR9iD
=2Mp,29A
	yR*	(
Avgr4+G&
it+W2|r
="J7SuoMG'
~/^(4IE
AU5UuM
y,^n6y
7jK%}bx
7+^Kfm
<{].vz
NV$ni_
=Dy#1;
:7~WuB}4
;HJqz[
LEGxCDc
Yo]Y\f
2!ft@K
kR	03%
,m^`KAz
{t[EYQ
=mm]aD
"@e8]Ub9?
9f>}6t
t6Yj <m'
(|\:yoD
5+ ZkCy>
0o}DDf
J0}5ap
OiHBx@	(
lai`XD%
^Iq.p#
(*NvjL
%gYx<\
Lr@@,\
3iA{)q4?H
=jgww;R
|Hz,]=n4LkO
=o=s	CqUI
Nd%yWg
g}:(j*u
pMLWn344
cu3)uC
}3A1}+
X(3!QI
&tOb8.
#C06`D
mS!EZ-Xp
9	CeeI
1oMH>VI
Ool_6r
F|AGXz
t|1A@4
x_R4I5
wXxk/9
8)%hWjn
yhzn!j
twGV|;
%OOxof
0I##Rv
yt\28k
=]m?j-A
e8@ZTv
k>u^oJ
vU#v)3oE
(?.h)9(
5^ 3h5Y
]/{OY[13u
S\x$\2
I\x=x=w
L"l1U>jF_
Cin%Y(LM
cp84p.
^[vD0<
V*nOBp
1c|_$=
T3D Vh
)(WUn:
d9 s^p
sVaGG3
\tCqhK
r%e7+T
g Xl:_
^%C@iDn
;og!txu
!r|UauQ
G|-aFC
'uMPRy*a-
#w]n}[
~d1:pv
jKi9Ln
 6z.%S
6=i3U'
U'.^`\iN
`VJ8xd{
uf&BN8
w7ov X
951%x[6
1XF\@$
"X<=CB
 |M8P~:
Q\j*iA
@o	`KAA
"P~*KXk)g
%D04(o*%%
#F&>%~
fy`MdN9
nf}N:_V
R,BpL<
|o6]'O7
'V]gW"
8#jExU
>uWmIj0
0:,wl^
zEO,pc
T"O6]otG
5oQ@T0W
GG'+?+S0
(.6bS-x$
?!iT='
5=$m7(
lMd=sz
~)~S'W
l$]/0d
vq%dk"
]LsOqZ
F,g3+;
Im:3$F
4f$2`]
@t,Kxd
M}J3v4
1DdGT	DIz
Cv*84rV/
8nSC@Z
=JE@\+@
a1{8+1
oLrX9E
yl5VZVY
Q	XZa-
k?i"H}
1 ![fm
<|tBsi
ThsCl,
lP-< W
}QX8:FKO
<b,J>l
xe7Q:!$5
eU(7aTc
j.|Io=lX)
d~N(34
?Mx:W`w
Re\3I~#
P3I@~DY
fmM.,.
RK990S
GcnbQAy
yW)xZa
l	mq"G;
aqMO)HM
tG8W,V
|Q&-d'
_?%6p;
!h?1w0
HK#_3|h+
H67yw-
`~~2yPF
J$jD_s
3{Zim#k
1kq^KU)
K)Z$cf
XX[UK	
o3T\-Y
(xDEl3
1[Oz,CeZ
%=,.#<
p&gipf
Li6Ozj%!<w
,vrbW7#L
EHn]|B
e{S~;q
NynbmGU
)L)bP7
OQ~@JE
(tIJI;1
!!6^,p
k1+\>h
GXNYz	L
G'2&B@
lK.o<tZ
{]@or3[
OD0y+	
	!	Xc:
l-(<sr
A"=- G/9p
/AL^[<
$4-YKn
crXSG.
?T(['z
S,tWP>
54BiHA
Ro@n^I
iYga$o
X7oWJ	
MHC)4s
VX-&;o'
:k&8Z5.
xQps`ee,\
L0g/Cn
rJ9>	H
	+N%ud
@x;>r	;O
u}^*v	
nN"#e<
 /S"YCt
z'>t,EuL
:TDZI]S
4@%\e_
g} 4CB
]V$5<H
Pr%^z_
%<{v_l
O|d~v}x
(,i4S'
1{PFfI
RUJ"]h
C/-tph
=!zs 	]
(l	/0WD
*Bwqn|
 nMm4n
:#Y*'APG
1U,F #DRr
MYi4O|
q:$VbD
W$O&CM
#qMo$\(
sR`B5o
?<#Yhd|B
In$.b@q
@wI.!n
.A)a,a
8%zk}m8NE
<?-#hU.
?sOA8a
'X,I8,
=p9&>j"
?i!xx|
Eg+ |K
a<c_tK
^<qXW)
O/)3 i
WcN3MN
>Q6{iD`l~
V Qv{P
qd{x'.
3HW8sI
Lf#Idq~
g	^3O`
gP[AO[Rto
B%|~x;X
{<Tk;H
vY2YTukfx
@L`k{C
RSGOm`
^a@ OJ
Q>`q{%
yBi3fhS
E%Gtog
IO[Re^0
8zp{H<
":^`_V
6Qj0E\
PZZ$_*
5p_nWbXnf=<"
=9@m@0
Z3_7	0
nqXwfF
HKnch8
BMHtgsD9
uoz_8g
IChhGD
Tqho&O
.R!6``O
59cG $h
~/NB@,|
}~,boKhs
;&T?Btd
CZ?0{@
U>np<U
G=`/yN
3L4M9IP
U_#rr%
ZyL-%I
@),+g:
m|aoS\
<B7(e9
	8euMe
$c	t}<
DB$yw?
^nuQ8Q|
-5]=SZjW
::,ej!
l"~J/V
-'az{h
aD\+WQ
Euw)0j<
y#od.e
I\->'jH
4tTsa0<
)*+^vvv
677~CK
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    processorArchitecture="*"
    name="Spent"
    type="win32"
    version="4.0.0.0"/>
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
  <security>
   <requestedPrivileges>
    <requestedExecutionLevel
     level="AsInvoker"
     uiAccess="false"/>
   </requestedPrivileges>
  </security>
 </trustInfo>
  <!-- The following GUIDs correspond with the indicated operating systems. -->
 <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> 
	<application> 
		<!--The ID below indicates app support for Windows Vista -->
		<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/> 
		<!--The ID below indicates app support for Windows 7 -->
		<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
		<!--The ID below indicates app support for Windows 8 -->
		<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
	</application> 
 </compatibility>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD