Sample details: 3b6acee913224f96974f64caffed7e81 --

Hashes
MD5: 3b6acee913224f96974f64caffed7e81
SHA1: c99368b52b90d047e2a0eabfb21009715ef77457
SHA256: 172b54eb4f28fcc72a9e0c236f3a320040db6c072f53029aacaeff997ff724b8
SSDEEP: 12288:YYhPnbGundSE7z183iWiq9OYaODsTr3MNFbE1h/3lRu2xPjcakSZFQ8w:YYNnbJnAiJ8Dc8NFg//u2xPZfcP
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasDebugData | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/anti_dbg | YRP/screenshot | YRP/VC8_Random | YRP/Str_Win32_Winsock2_Library |
Source
http://216.170.126.99/4.exe
http://216.170.126.99/4.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
#K*G_)7=
S_ez/8
uIUO"wU
_5,!V&
+5,M]-c
O*>m^Y
50wUx3
D[R|^ ]*_VKi
YY_^[]
j7SSSSSV
)SSSSSSS
SSSSSj
)SSSSSSSSSSSSj
SSSSSSSj
0WWWWW
0WWWWW
VC20XC00U
QQSVWd
0SSSSS
_VVVVV
^WWWWW
f-00f=
;t$,v-
UQPXY]Y[
s[S;7|G;w
tR99u2
f-00f=
t$<"u	3
>=Yt1j
< tK<	tG
j@j ^V
URPQQh
0A@@Ju
0SSSSS
v	N+D$
_VVVVV
tRHtCHt4Ht%HtFHHt
tNIt?It0It 
0SSSSS
0SSSSS
v	N+D$
)u8SS3
t"SS9]
PPPPPPPP
PPPPPPPP
<+t(<-t$:
+t HHt
	X 9} 
)wIVSP
t+WWVPV
bad allocation
)vector<T> too long
deque<T> too long
kernel32.dll
HeapCreate
Marlett
)string too long
invalid string position
)Unknown exception
GAIsProcessorFeaturePresent
KERNEL32
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
?5Wg4p
"B <1=
?EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
)bad exception
CorExitProcess
runtime error 
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program: 
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
?Dj0Q:W$=
5s3R6=
) Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
?GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
1#QNAN
1#SNAN
_nextafter
_hypot
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
C:\correct\copying\Identi.pdb
SetLastError
lstrlenA
IsBadStringPtrA
IsDBCSLeadByte
IsDebuggerPresent
GlobalUnlock
GetConsoleScreenBufferInfo
GetStdHandle
HeapAlloc
GlobalLock
GetProcAddress
GetModuleHandleA
FillConsoleOutputCharacterA
GetLastError
KERNEL32.dll
BeginPaint
GetSysColor
ScrollWindow
GetScrollInfo
SetScrollInfo
SystemParametersInfoA
SendMessageW
SetMenu
GetFocus
CallWindowProcA
DestroyWindow
MapWindowPoints
GetClientRect
ReleaseDC
GetParent
SendMessageA
IsWindowEnabled
CopyRect
GetWindowRect
GetWindowDC
RedrawWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
USER32.dll
SelectClipPath
EndPath
TextOutA
GetTextExtentPoint32A
AngleArc
MoveToEx
BeginPath
SetDCPenColor
SelectObject
EnumFontsA
Polyline
CreatePen
GetTextMetricsA
LineDDA
DeleteObject
GetROP2
CreateFontA
ExcludeClipRect
SetPixelV
SetViewportOrgEx
GDI32.dll
ConnectToPrinterDlg
WINSPOOL.DRV
ReleaseStgMedium
GetHGlobalFromStream
ole32.dll
ODBC32.dll
WS2_32.dll
CreateEnvironmentBlock
USERENV.dll
mmioClose
mmioDescend
mmioSeek
WINMM.dll
StrChrA
SHLWAPI.dll
SetupDiGetClassDevsA
SETUPAPI.dll
GetThemeBackgroundContentRect
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
IsThemeActive
UxTheme.dll
wsnmp32.dll
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapFree
VirtualQuery
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
WIDAT8
P<STYLE>
	<VERSION>
		<NUMBER>2007</NUMBER>
		<TYPE>20</TYPE>
		<ID_PREFIX>WINDOWS7_</ID_PREFIX>
	</VERSION>
	<DESCRIPTION>
		<NAME>Windows7</NAME>
	</DESCRIPTION>
	<MENU>
		<ItemBack>
			<SIZE>20, 20</SIZE>
			<CORNERS>2, 2, 2, 2</CORNERS>
		</ItemBack>
		<ItemCheck>
			<SIZE>10, 14</SIZE>
		</ItemCheck>
		<ItemRadio>
			<SIZE>10, 14</SIZE>
		</ItemRadio>
		<Highlighted>
			<SIZE>55, 22</SIZE>
			<CORNERS>3, 2, 3, 2</CORNERS>
		</Highlighted>
		<HighlightedDisabled>
			<SIZE>55, 22</SIZE>
			<CORNERS>2, 2, 2, 2</CORNERS>
		</HighlightedDisabled>
		<BorderSize>2</BorderSize>
	</MENU>
	<BARS>
		<RIBBONBAR>
			<Bkgnd>243, 247, 252</Bkgnd>
			<GradientLight>223, 233, 245</GradientLight>
			<GradientDark>223, 233, 245</GradientDark>
		</RIBBONBAR>
	</BARS>
	<RIBBON>
		<PANEL>
			<BACK>
				<FULL>
					<SIZE>50, 89</SIZE>
					<CORNERS>4, 5, 4, 5</CORNERS>
				</FULL>
				<SEPARATOR>
					<SIZE>3, 61</SIZE>
					<CORNERS>1, 10, 1, 8</CORNERS>
				</SEPARATOR>
			</BACK>
			<CAPTION>
				<LAUNCH_BTN>
					<SIZE>15, 14</SIZE>
					<CORNERS>2, 2, 2, 2</CORNERS>
				</LAUNCH_BTN>
				<LAUNCH_ICON>
					<SIZE>8, 8</SIZE>
				</LAUNCH_ICON>
				<TextNormal>115, 131, 153</TextNormal>
				<TextHighlighted>115, 131, 153</TextHighlighted>
			</CAPTION>
			<BUTTONS>
				<BUTTON_GROUP_F>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_GROUP_F>
				<BUTTON_GROUP_M>
					<SIZE>22, 22</SIZE>
					<CORNERS>1, 3, 3, 2</CORNERS>
				</BUTTON_GROUP_M>
				<BUTTON_GROUP_L>
					<SIZE>22, 22</SIZE>
					<CORNERS>1, 3, 3, 2</CORNERS>
				</BUTTON_GROUP_L>
				<BUTTON_GROUP_S>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_GROUP_S>
				<BUTTON_GROUPMENU_F_C>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_GROUPMENU_F_C>
				<BUTTON_GROUPMENU_F_M>
					<SIZE>10, 22</SIZE>
					<CORNERS>1, 3, 2, 2</CORNERS>
				</BUTTON_GROUPMENU_F_M>
				<BUTTON_GROUPMENU_M_C>
					<SIZE>22, 22</SIZE>
					<CORNERS>1, 3, 3, 2</CORNERS>
				</BUTTON_GROUPMENU_M_C>
				<BUTTON_GROUPMENU_M_M>
					<SIZE>10, 22</SIZE>
					<CORNERS>1, 3, 2, 2</CORNERS>
				</BUTTON_GROUPMENU_M_M>
				<BUTTON_GROUPMENU_L_C>
					<SIZE>22, 22</SIZE>
					<CORNERS>1, 3, 3, 2</CORNERS>
				</BUTTON_GROUPMENU_L_C>
				<BUTTON_GROUPMENU_L_M>
					<SIZE>11, 22</SIZE>
					<CORNERS>1, 3, 2, 2</CORNERS>
				</BUTTON_GROUPMENU_L_M>
				<BUTTON_NORMAL_S>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_NORMAL_S>
				<BUTTON_NORMAL_B>
					<SIZE>42, 66</SIZE>
					<CORNERS>3, 3, 3, 3</CORNERS>
				</BUTTON_NORMAL_B>
				<BUTTON_DEFAULT>
					<SIZE>42, 87</SIZE>
					<CORNERS>3, 34, 3, 2</CORNERS>
				</BUTTON_DEFAULT>
				<BUTTON_DEFAULT_ICON>
					<SIZE>38, 38</SIZE>
					<CORNERS>6, 6, 6, 6</CORNERS>
				</BUTTON_DEFAULT_ICON>
				<BUTTON_DEFAULT_IMAGE>
					<SIZE>15, 16</SIZE>
				</BUTTON_DEFAULT_IMAGE>
				<BUTTON_DEFAULT_QAT>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 3</CORNERS>
				</BUTTON_DEFAULT_QAT>
				<BUTTON_MENU_H_C>
					<SIZE>22, 22</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_MENU_H_C>
				<BUTTON_MENU_H_M>
					<SIZE>11, 22</SIZE>
					<CORNERS>1, 3, 3, 2</CORNERS>
				</BUTTON_MENU_H_M>
				<BUTTON_MENU_V_C>
					<SIZE>42, 38</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_MENU_V_C>
				<BUTTON_MENU_V_M>
					<SIZE>42, 28</SIZE>
					<CORNERS>3, 1, 3, 2</CORNERS>
				</BUTTON_MENU_V_M>
				<BUTTON_GROUP>
					<SIZE>7, 7</SIZE>
					<CORNERS>3, 3, 3, 3</CORNERS>
					<SIDES>2, 2, 2, 2</SIDES>
				</BUTTON_GROUP>
				<BUTTON_PNL_T>
					<SIZE>15, 21</SIZE>
					<CORNERS>3, 3, 3, 2</CORNERS>
				</BUTTON_PNL_T>
				<BUTTON_PNL_M>
					<SIZE>15, 19</SIZE>
					<CORNERS>3, 3, 3, 1</CORNERS>
				</BUTTON_PNL_M>
				<BUTTON_PNL_B>
					<SIZE>15, 20</SIZE>
					<CORNERS>3, 2, 3, 2</CORNERS>
				</BUTTON_PNL_B>
			</BUTTONS>
			<EDIT>
				<Normal>243, 247, 252</Normal>
				<BorderNormal>170, 187, 210</BorderNormal>
				<BorderHighlighted>170, 187, 210</BorderHighlighted>
				<BorderDisabled>170, 187, 210</BorderDisabled>
				<BorderPressed>170, 187, 210</BorderPressed>
				<BUTTON>
					<IMAGE>
						<SIZE>12, 22</SIZE>
						<CORNERS>2, 3, 2, 2</CORNERS>
					</IMAGE>
				</BUTTON>
			</EDIT>
		</PANEL>
		<CATEGORY>
			<BACK>
				<SIZE>3, 92</SIZE>
				<CORNERS>1, 2, 1, 5</CORNERS>
			</BACK>
			<TAB>
				<BUTTON>
					<SIZE>13, 24</SIZE>
					<CORNERS>4, 4, 4, 2</CORNERS>
				</BUTTON>
			</TAB>
			<TAB_SEPARATOR>
				<SIZE>1, 23</SIZE>
			</TAB_SEPARATOR>
			<BUTTON_PAGE_L>
				<SIZE>14, 92</SIZE>
				<CORNERS>3, 37, 3, 5</CORNERS>
			</BUTTON_PAGE_L>
			<BUTTON_PAGE_R>
				<SIZE>14, 92</SIZE>
				<CORNERS>3, 37, 3, 5</CORNERS>
			</BUTTON_PAGE_R>
		</CATEGORY>
		<CONTEXT>
			<CATEGORY>
				<BACK>
					<SIZE>3, 92</SIZE>
					<CORNERS>1, 2, 1, 5</CORNERS>
				</BACK>
				<TAB>
					<BUTTON>
						<SIZE>13, 24</SIZE>
						<CORNERS>4, 4, 4, 2</CORNERS>
					</BUTTON>
				</TAB>
				<CAPTION>
					<BACK>
						<SIZE>80, 19</SIZE>
						<CORNERS>1, 1, 1, 2</CORNERS>
					</BACK>
				</CAPTION>
			</CATEGORY>
			<SEPARATOR>
				<SIZE>3, 26</SIZE>
				<CORNERS>1, 1, 1, 1</CORNERS>
			</SEPARATOR>
		</CONTEXT>
		<CAPTION>
			<QA>
				<SIZE>32, 26</SIZE>
				<CORNERS>14, 11, 14, 11</CORNERS>
			</QA>
		</CAPTION>
		<MAIN_BUTTON>
			<SIZE>56, 23</SIZE>
			<CORNERS>2, 4, 3, 2</CORNERS>
		</MAIN_BUTTON>
		<MAIN>
			<BACK>
				<SIZE>9, 51</SIZE>
				<CORNERS>1, 24, 1, 17</CORNERS>
			</BACK>
			<BUTTON>
				<SIZE>54, 23</SIZE>
				<CORNERS>3, 3, 3, 2</CORNERS>
			</BUTTON>
		</MAIN>
		<STATUS>
			<PANE_BUTTON>
				<SIZE>22, 22</SIZE>
				<CORNERS>3, 3, 3, 2</CORNERS>
			</PANE_BUTTON>
			<SLIDER>
				<PLUS>
					<SIZE>18, 18</SIZE>
					<CORNERS>0, 0, 0, 0</CORNERS>
				</PLUS>
				<MINUS>
					<SIZE>18, 18</SIZE>
					<CORNERS>0, 0, 0, 0</CORNERS>
				</MINUS>
			</SLIDER>
		</STATUS>
		<BORDERS>
			<QAT>
				<SIZE>7, 7</SIZE>
				<CORNERS>3, 3, 3, 3</CORNERS>
				<SIDES>2, 2, 2, 2</SIDES>
			</QAT>
			<FLOATY>
				<SIZE>7, 7</SIZE>
				<CORNERS>3, 3, 3, 3</CORNERS>
				<SIDES>2, 2, 2, 2</SIDES>
			</FLOATY>
			<PANEL>
				<SIZE>5, 5</SIZE>
				<CORNERS>2, 2, 2, 2</CORNERS>
				<SIDES>1, 1, 1, 1</SIDES>
			</PANEL>
		</BORDERS>
	</RIBBON>
</STYLE>
\.k;	}
_5L^;;
GJc kPh2
~O&z_7
Fswu05
DG+(C\
aMrtro
P5"B3g
,q+c[OnQ
M7abH}F}Yo
8!1[Pgy
XMnrkx
d%[^JE
L]wYA6
=ZT',Vca?
D_81=u
-Hro;X
l)ct@G
R)hM6*
aR$?d3N
T`S3w]D
4cAQQO
K@("vz(.
+D#7%5
G;25Vu6q
y#0y|f
a]+gG[
K[+Fw3
?7f'GB
yDQ*BD
4h,I',
+|p7,+
@Uc|E,mjq+
09XEzY
nj;k(#
/`z *'&[
mN`?(#
(I+7CV
j:@BWk
<ng/;a
d#w0v$
^F{bc?1
4:eW4}
?#_aiK}<hzm
c0#"pjW
pF",)_
:h>yU[
"oy45[m
S5W6>E
L~AE,=
b$gsLGQ
$@]a!nG
%Qk(@m
XsA'_&k
xr4iybq1
D7sn[D~|
,Af?@U
)T6|o6
A{F 3-
&do7d`
H9u9;Y&}
{:u|Dn
br4+tWR
jmK24&Ay
\3lc6pP
x,7@Mi
2@*Ya#
9(G1V?
IFv.se
/4x}QK?Ao
\J	@T~?
@Q+R<[-P0
TJMb1~
Zdo0\s
WP?'-*sgQW=
u4H1ww2
lsHgaj
pOW~n3
	4SF#S
[@gQ{@
-^Yxw{
]ULl!xzI
C/u`J-
JG4SwJ
]$Kte*
y*v?$A{
 eQ$21
P4tk,|c
>.7s9v
\	fbAR
AC\P2Cy
,3+@*n{Z
qve+Ay
&D.XPRz
8OZO@f
}xQmnA
@g&!|A
^j|6*,>~?
TF#lxz/
M "^Ms
F}T"<$
.W^o  
&jFgdo
G.V'JN
%u\PMeB(
SWznTf
_e*j;Y
9CX~7C
aw.47VwF
aAH@Bkd$
,E]'%s
dgf/)FZ
^My{A;J
PM([>ub
<YwN>iE
SIw6v_
E\3&Kw
<\-Dun
z]?5o+q
`f>\?d
y/RWT$
~	|M7j
"Z^"D{
5[7tqi6
G5pZ|q2
@("vfF
Wf+oZ[B
uXp"l<|4
>wY~3A
/3dK16
'zuioUx
WjDVCE
&#?xX#
b}1YoDRV	
g#5NNI
rDXC4Q
[Xhsp}e
Z<kb]O;
{-2,-w
%|x4;2
xP5"DP
N~~hJQ#
_uLhY.
;.mr3Q1nZ
G__%Qj4D
}-_h|c
`f?j$O
fE|i"l
I7.lpZ|F
YJx,7%
/9&SI+:
|]'YU 
HG;6)5
D=X_6e
^8s`3t
_j56{e
 6wen^
>E({S|
ghN2.1E
B:xs'vjvt
45W0,"pj
^UIqC+
1Tcoc<)
JooDvi
$Rn6(Za*
j{3y/[
*]!5mr(
'0-v^B#
DkZBIc
|C Qe$
qUwYlh
[:~A[L
=jX~/)
7?7b}O^k
~le/Plc[
Y.@X5-
\m b N
J;a6xT
QBNImnv
VZi(R6
&4Cw7'	
u\h!l<|4/
yCe7yZ
b]#uD{
o]CUdNv`
V1T4Y-,
]o5vB4
S<Bg2{
H7:X*z
+)4<aV
5UorU,
y8/B(05
23]FN$
#C OwR
?FMH@n<
Z6RlXBc
F3Ed!*
QEq>Od
!EE$R7@
^rCS:	
gNA;ip
1sG4IE
qTe4+B
Ll{PD%
Q)fAZ%
f:uIeGK.#
VRf3W&
+?fa9(F
iS:Q"_uM8
ATm\=|*
}$D0mH
/!9Q/%
BpS{x+G
%zQYhM
yt6^X$
=q\|Dfv>
\IH9\8~
/jm-1k
UrXy}M
&tn`YW
K!"rmI
a%{8Fs
a2_yhE
uU*NbXp
D_6K?ucg
XKjNFU
GfG+5u
eB0.1N
-ZsvNib6
Bu)}Yz
!3i7t7
F3l1h,
%"hmMf
B&V<wS
,Da>,W$
ZeAsiMtk
r6SD|->
h6ogm1x
W)R|*n
y+@bYM
!$+Jx#
P+BQ	r
@`B2S\P
cqBO(d
nd=Z!l
'cL?R7
}R<*&j
DewOl=
xULuUq
nRycS|
]394(k
t]R K`
:6^~lI
k]^jq3
00v"Z:
U]i^<_
88@Wce@
NR!/ G3
/d\PE6
U>x2Clpw
J@,M3<
q7B-6F
RoLGJVd
K?#yv|
:iGL|SW
fICb|Df
|_&zA3
%w},37i
g';:`.
#b^1;a
	\}[J.
!3w8F2
yDD\2{
E_Na^+
@Zw({@c^'
4#H@;l
-Wn Ar
Rf-idD1
m?>Y|g
]wV8pIG4SoH
qlhzVj<[
7Y=;<&
i2YD:M
oR@>s5<
{e<R~9
A@j#lF
U.dvS*
VJMEa[
Zvt|p)
mby,Un
3k>D9s
e}?|&VNo
HyTu2<
D~MRDS
?VHh?r/?
n_pXHi	a
Z.5o+c
=E%1ix
v@lqg'
v$BU}FIdwj
bpbxs*
IAIV%K3T
\mi=lc
A`I	fBY
b~_s6Y
!F]qi\
#@	 pWP
$Vm1ENM5
 Do:o>
oHjcv+=5
EEg+v|
W!2R4i!
Gv:nb>z
e`(z.$
#{S4N-
bHreOKto
/_fT`_
[P6%{,
PS&H;d
XK|mP#D
}o0P49]*
s.D{FA
7:_I#3h
Di_pT	Nr
:Fo|JP"
"vobr/
Qq! ~x
 C,$[e
,gg}]uL)
Zq ; Q
$7mFql5tm9k
PGh*b=!T{
#v")cz
}hR*jl
k|>GoK&z
w!8kku
GRhk0e~
PfzG.3
t-u}7s
.h=wa9
5&gs`r
5r$e>CG
|U >s)
	Tgx/|
MOQ 7#
L?:Sn'AS%
7{Km87
S(-tDE
T#:)^N
|tTq!\
_3_%Dh
33392`"
v;6_'xP
--&Jxv
)(A(^M
,<raz{/m
#OKo*Cv
M=G2DT
K$C@:!
$3-}F@
]_G92/Gz
9Wu	c)
*'rarH{
^,'-)x
N|'4dx
Wu=yGh
hz9	.i
_?;ip.)D
n<-av#
S>z-`,
9*Ws'65
2F4o[3
2HBy Vf
M	.PUh
E!G*],
hlhOw/
{lEGi9mG
"JvY]w
v+G^F^h
7*\xD.
:(|(`Oka-
VVt|+'
%K?#^3P
oq67@e
/>pAuo
1O`2o)
lS	q\"W
rA	|BJ
%ply:N
Yn	n;00
C|wD981(
s(@bsLD
V|d%*Ar
$qr[_w
Iue-;/
jZUK7Jw
cD7F5Z9'@6
z\d\+%
BA{=}x
IiwLyh1
Qo&?He
$^.qD 
K.~YH	
O/4L{]
bTXECBN
Dx+ma3g
e>H>P~
	$y4di{
:E11hu
AVNYU<o!x
T<)1<M
U~yk3/
`Rpge^?
fu@lqc+
"o\fq]r$E
4<M 9s
.Ss#fL
6w+HR%
UW)bb|r
<Azlm@
RJEl)Fg7(
hN-;pq
-ObV 3
f Et+0!
@f<Fbg
7G	qMey2wp
rn?'@}
x86}J@9
%INGal
-metpX
BI|	nD
+y\k|0
tVNJ20
qr8W{;-
$I!s4hV
q>4v! 
<[E8[&
U55utp
1'ixVf
.?+Kva
c]/veH
VCw|^ V
{ZsxYR
LxfwzJ-
^y.&cr
4:,guDq
fPd*S)<
v\lq%R
rxUyAV4K`ia
F1[]DX
Nf|-h^
/xVA5!
B# 8&,
6Ixk1%
VZ:`_`*p;
;#)y+3z
s[b"}x
kZszyR
(%`Q[k
6O823g
f4l=*@`.
)Tc}i8
h;|>M(dl
(/}W5x
D`LkaY
p4)lRF
hJno["
jK'w%\
)lkpH,
wbq!.Y
.yIzXhm
W.9S4i!
1M	G/(L
PjQ"W@
#k (}<
9^e2}-)
?r4La0
p<$7N,"
	)cUWy=
	!@LXy
J-+t	N
V/aYf[
	U^Jan
S{Ta_c
$ HU`[
B1k>Uq
h%kM"	
8P)[k	
Te!:-K
\(|N*\
+]=TfK
~DaIr+@
r,Xi3	
b~sSJJ
DI4GqI
ssv}|+
`E6Yo#
5_R[:[
B3)W'i{
olUCdh
~(sE0q
HZS>;Qg
h,n\[b
aK{w%\
v!qu$if
&J<db[
ozCw|^
9!\*l~1
D!AlVH
oP/Bt B1
o]cA/L
gVBy69I
U^.:yO 
Ch:25go
HoiDU+
KvC|Hbc
PS(&sD
DdqkJy
O22eIr2
3Sd@A6>
;7s/59
iq\]u~
5"%6 P
eL)h\O_
BVxhk)
F#VLLcBu 
udlWC=b
hfkM"	
Gn&W{B
>Z=wM:Cw|^
/l'bm%
iW;mf'Q
0ONWTL
R(i,A1Q
|#)H	+i-
`Hk='^i
of0?M]
h{1at\
mx/vrT
-9DcR}
pe7bc<V
|{Eh*X
DwC-_	
k;QNc?
[*~yh)f
Jh6B}G
p{~wb'u8G
KPo{2x
chib:]
*BU!}M
haS*~|1
1 \yTe
SBi<m>
!V&/[W^pw
XK0# Y ><
@ck_B=
OkYs`O
[/;`x?
-vzdM;cY
L&,D[vZ:
<he-V4
xpogvS\8V
2B4 )C&
XD8,3K
DD:0`VN	,W
SBReb{
_(C6tE
=UbnZf
q\3B0n
ze.r,G
:I[1~2
0fXK~U
9HZ<h1
	_rG-\
,9-Zoz
;&-5]>
|?eCLs
f9^)+w
6O~"K8
H$,V J
6{yfC_@x
*A=2$j=ak
-A(9!!
IDz[U&
>bVLLc
#-zWf$1s
.DS?^Fb
8D: hb
c@7R6?
|z5bK,
|sYBA]|Z`e
~[v)@h
Kk`y=3
K&>,BTl>
qRGa+|
+}ZLwK0
Si~A_/5
`dzOtE
OhVGy)X
1%Z]lZ
1	;!	>7
n\B61 
{ZszYR
uje	~0
hD)@"Q:
A3g2{fy
xdcD	P
IHi2TS
)es;5`U
3o2sJ,E
j-N28i
	zj.tx
Xir<6'
`k6JVZ
Zq><!#
Kb4[^:N
4;i8P!z:
Z~o'InhgDT
iw59Yh
mz.x^c
fzSv	Q
ce02&B
$hL<@c
lQuBzb
!rrKn%
fh'4V)H
>}+ix{
32=lL 
io+MOMa
Jx'|]K
>dwsFL
x@9@yol
~dWl`,
KD'EyD
c1;1GH
5VZ$3G`F
AeGjb[>!
vi&4j0
&(5qD<mn
My[&*u
310T^*
)AEQM@
/Jg?XH
F87Xm2
>9v)fz
QU~1u8Q
V7<S2h
1{:gtw
oMYTgq*$F"
<J7H!em
K%ml%kF
>zlovz
rPD!E0
wWWYLM6	?=
c&8Je	-.
LStS^6w
mN!4U8
)'(,	@juq
_sz1J4
H	mE=_k
xwE6_D
y5/cz"
/0iN#=L
D&5w_C
Y{,O'?
EnL^;&
LzH6t#
\qQX#]
/m)n]O
FWEJ83
[j<|n<
kPycRO1
JcX`MTp
2a4lgJ
&-WPlB{
B%}kys
A^XF/La
5nF%0q$
6Khw1Hlq
)4x{QK
P07>&w
Ve!%JId
VG0Wh[
)H(1IDy
lsJ>~M
el% P*S
|$oRlm
}`xvrJ
YHtIYf
)>IP~z
~=vwm=
p%iFL~
	t~3;l
unv\rn
7`VT;2
sKYDhgBDH
_V>N="
EJ!7,/f
j5-q5\G
u.1x(I
p#7$>B2x
<?=l6^&
EyI4v$1
A+`5L/O
+mJC@b
pf{EX<
U>FW+n;
~]+G[Dt
5F#lWA=b
C~h@.'
uwg>2;	
U8'YUT
mT8/*5
R]=TL?
e|z3+T
}'4>pp
fSNai*
#F(Jm<
{?nbBH
B38a~+
bt<]+"kH
C@HS#(
;|XPrz
Mld4F\K
|QwqKJ)
wQP)a6L
M*%rf#
R{#:2ugM
e@;]`:
jM9M@w,
Ix&2UE
yrT+w$
\$sgzl
Zc5Hm=t
w=iF-2
\pU#]@Wm
/DZV}W|
2kKg@;
|U3z9ST1
&W'"G4)|
VE }A_
"T]]7Dr
H\JQ<Kf
McwoA)
wOvX#y,
HwHdkY
;(%qiA
3!c2|h)
f?|zp	
c5oFG5
[oZbp"
~PPoQ"$H
fiY}Zy
YNT708E
S10r;p
Q,&U\z'#%
=x;?g#?
U*Nj2x
Yx=2	3
r,V:J-
}x0M?e>;T
pQ:DfS
qb&U^a
%|~|=^T
[v_GsHY
d 8w"Dc
5jH&zu#
.fPkYx
raM,0\o
7[)5M*
/}2:dS
P>r=e:
%~cGJE
/M|w[E
swHi7.
""`L2N
{{%^0ir
6{(UkbG
bR5uJj
z=Y\+Cj
#Olq=Y
swZRfF
I@`_3O
7#?oA9
4_bGU<$X9-
O[[pxhs
#M~T@oE
PiS%I.W
7o79&cV"8
m]#kzbQC
gnE[b=
9VbEB[
)>ZwMu9
,GEk@a
?9usky9
<MJ	<C
7FWE,aU
.:!@KG
C@t4k<
oEx" Ga
vwWx+	*
&H.{v=
k2Cyu	W
G0YoDN4,
ar)dGg
_T!eD!
}FIdsl.Hg
&~|v=,XCr
g"kort
nMGQap
2doMKl]
6`@>NTW
y[x],[
/c{Q@\
Av|Kg@
OaU"/C
Iqy#qS
.I8%Ru
2KU<hz
n/G5@6Z
AjH(PIAJ5
z9$_UMu8P
0EZkk`
'XQ5K/D
**f3Oi
'EI=V!0mW
V)'*Uf`;}t
]0lj&P
k9Zc:-
'";F/`W
>Te2b[K.
uDc lg5
l>r%0O
	pHi_,
^i 0:]
H2-B>Dj
 ZH.=-
|#~1).
1b9)`	
.j[PtK z
f-Smx+Bf+I
]	yXQ1\k
:304n{4
9zm 8L
SiqV"V
"djQOv
YJ~*F_O
tiH|(`
<#(`Sz
mz]8eC
u3wc"q
O_3m'L
~A_`t^
%ZBerg
z`z[1*
	k%}.I
w)KQr6
UtI}t{
gu0qL,
WBwP<vdR
&+kL_KI
z14USh
mvj'MSJ;
&)>H}dS
/HqU-"
Z{%S6J
,T||[TG
q]MVnH
6CWysh
<v*x&+
  "app_container_sid_prefixes": {
    "nightly": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000754-",
    "developer": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000754-",
    "beta": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000755-",
    "Stable": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000756-"
  "company_name": "Opera Software",
  "crash_log_product_sufix": "",
  "crash_upload_socorro_product_name": "OperaDesktop",
  "default_profile_path_template": "Opera Software/Opera {InternalStream}",
  "domain": ".opera.com",
  "expected_signer": "Opera Software AS",
  "file_name_base": "opera",
  "major_delta": 0,
  "partner_image_download_url_parameter": "",
  "pref_defaults": {
    "tab_top_spacing_disabled" : false,
    "show_bookmark_bar": false
  "product_name": "Opera",
  "schedule_autoupdate_task": true,
  "scheduled_autoupdate_delay_min": 5,
  "shortcut_suffix": "",
  "sitecheck_host": "sitecheck2.opera.com",
  "ui_constants": {
    "speed_dial_height": 120,
    "speed_dial_width": 188
  "urls": {
    "autoupdate": "https://autoupdate.geo.opera.com/",
    "crash": "https://crash.opera.com",
    "crashstats_collector": "https://crashstats-collector.opera.com/collector/submit",
    "download": "http://www.opera.com/download/",
    "download_full_windows": "http://www.opera.com/download/get/?partner=www&opsys=Windows",
    "firstrun": "https://redir.opera.com/www.opera.com/firstrun/",
    "flash_ppapi_update_site": "https://redir.opera.com/plugins/?application/x-shockwave-flash&type=ppapi",
    "flash_update_site": "https://redir.opera.com/plugins/?application/x-shockwave-flash",
    "geolocation": "http://autoupdate.geo.opera.com/geolocation/",
    "geolocation_privacy": "http://help.opera.com/geolocation/privacy/",
    "google_favicon": "http://redir.opera.com/favicons/google/favicon.ico",
    "help": "http://help.opera.com/?p=",
    "homepage": "http://www.opera.com/",
    "partner_redirect": "http://redir.opera.com/speeddials/partner/",
    "private_mode_welcome_page": "chrome://startpage/private",
    "product_eula": "https://www.opera.com/eula/computers",
    "product_privacy_policy": "https://opera.com/privacy",
    "report_issue": "https://bugs.opera.com/wizard/",
    "survey": "https://redir.opera.com/surveys",
    "uninstall_survey": "http://redir.opera.com/uninstallsurvey/",
    "upgrade": "https://redir.opera.com/www.opera.com/upgrade/",
    "webstore": "https://addons.opera.com/extensions"
  "use_chromium_major_for_minor": false,
  "user_agent_name": "OPR",
  "visible_product_name": "Opera",
  "webui_scheme": "opera",
  "welcome_page_timeout": 6,
  "white_labeled": false
PA090b26ebc56dc83a94db2ceb4ba19214df51ca53{
  "app_container_sid_prefixes": {
    "nightly": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000754-",
    "developer": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000754-",
    "beta": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000755-",
    "Stable": "S-1-15-2-3079800963-8181122749-8364847005-307404929-5790075664-908000756-"
  "company_name": "Opera Software",
  "crash_log_product_sufix": "",
  "crash_upload_socorro_product_name": "OperaDesktop",
  "default_profile_path_template": "Opera Software/Opera {InternalStream}",
  "domain": ".opera.com",
  "expected_signer": "Opera Software AS",
  "file_name_base": "opera",
  "major_delta": 0,
  "partner_image_download_url_parameter": "",
  "pref_defaults": {
    "tab_top_spacing_disabled" : false,
    "show_bookmark_bar": false
  "product_name": "Opera",
  "schedule_autoupdate_task": true,
  "scheduled_autoupdate_delay_min": 5,
  "shortcut_suffix": "",
  "sitecheck_host": "sitecheck2.opera.com",
  "ui_constants": {
    "speed_dial_height": 120,
    "speed_dial_width": 188
  "urls": {
    "autoupdate": "https://autoupdate.geo.opera.com/",
    "crash": "https://crash.opera.com",
    "crashstats_collector": "https://crashstats-collector.opera.com/collector/submit",
    "download": "http://www.opera.com/download/",
    "download_full_windows": "http://www.opera.com/download/get/?partner=www&opsys=Windows",
    "firstrun": "https://redir.opera.com/www.opera.com/firstrun/",
    "flash_ppapi_update_site": "https://redir.opera.com/plugins/?application/x-shockwave-flash&type=ppapi",
    "flash_update_site": "https://redir.opera.com/plugins/?application/x-shockwave-flash",
    "geolocation": "http://autoupdate.geo.opera.com/geolocation/",
    "geolocation_privacy": "http://help.opera.com/geolocation/privacy/",
    "google_favicon": "http://redir.opera.com/favicons/google/favicon.ico",
    "help": "http://help.opera.com/?p=",
    "homepage": "http://www.opera.com/",
    "partner_redirect": "http://redir.opera.com/speeddials/partner/",
    "private_mode_welcome_page": "chrome://startpage/private",
    "product_eula": "https://www.opera.com/eula/computers",
    "product_privacy_policy": "https://opera.com/privacy",
    "report_issue": "https://bugs.opera.com/wizard/",
    "survey": "https://redir.opera.com/surveys",
    "uninstall_survey": "http://redir.opera.com/uninstallsurvey/",
    "upgrade": "https://redir.opera.com/www.opera.com/upgrade/",
    "webstore": "https://addons.opera.com/extensions"
  "use_chromium_major_for_minor": false,
  "user_agent_name": "OPR",
  "visible_product_name": "Opera",
  "webui_scheme": "opera",
  "welcome_page_timeout": 6,
  "white_labeled": false
J_s	9Wq
<a{{=Zp
:Rf%7Oc
;Re*3Mc
=Sd3.Kd
1\w%7s
8K\63Wue>
(8E1?y
{0Tj-.Ri--Ph-0Tk-0Tk-/Ul+ 5C
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    publicKeyToken="6595b64144ccf1df"
    name="Considering"
    version="5.0.0.0"
    type="win32"/>
 <dependency>
  <dependentAssembly>
    <!-- If you want to utilize File delete the requestedExecutionLevel node -->
  </dependentAssembly>
 </dependency>
  <!-- Operating System Context. -->
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
  <security>
   <requestedPrivileges>
    <requestedExecutionLevel
     level="AsInvoker"
     uiAccess="false"/>
   </requestedPrivileges>
  </security>
 </trustInfo>
</assembly>PAD
PPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD