Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 7d291150298e907d069f0f062978f3b7 --

Hashes
MD5: 7d291150298e907d069f0f062978f3b7
SHA1: b4fc221213c2bcfcaea90a654577c33f70b95cde
SHA256: 30433b29cf42fe50a484b79191d95c3477d1577cffd1a3739175d3761f222d5d
SSDEEP: 12288:vsj5v0776nbZBnUxAoacjRM8tyhKMU6d5GwWydZ:cq78Bnr8RM8IhKgdEwL
Details
File Type: PE32
Yara Hits
YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet | YRP/UPX_wwwupxsourceforgenet_additional | YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay | YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional | YRP/UPX_wwwupxsourceforgenet | YRP/UPXv20MarkusLaszloReiser | YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/contentis_base64 | YRP/UPX | YRP/suspicious_packer_section |
Parent Files
2bf4a1b16ff2b293d1759eb41d31cd15
Strings
		This program must be run under Win32
TF???+
V~+xc:
Aw4eE/
swxk#++
DHpDTRy
fb:C++HOOK
\Yh4LK
nException &
ystem::AnsiString]
IHTObje#
LzgP<(L
>TfmMai
NQThreadTestaImpr *[2]
!o Formj
i~J}%7
`Scroll
DelphiI
erface<
oo.sign(Hook>
hHWClasse
ockManag4>
9)XJH>
Xryn/XT
{f`{#2+
M?$q:1d
{7 h-4
~figuracao
hXVisualiz
VD|RV@
r/gqp`1
;qvenE
Jt2#I.v
j@j\%#X
(d>7 7
f@,2Xm
SQfS4 
Chequesu
3-+,&-
x0Vh0m
S"xX.%
Sensor
43`L]IM
<H&d"<
rialIn
J<Qh.S!
pfN<me@p:n
B~QTsV
_Barcod
`v0B#G
OSW^ 9@\
.M{o>F
 tCRtw
L'QW!%WV
J/T4u5
<U]emu
(H|Viewer	2
E(AL("%s",4),"
)" JK13.
JumpID
S_WINHEL
#32770
|R8Bf(
s;08fn
THintAc
Std&ns
7ChangeL
dsFocus
Se6Ted
Tnvpar>
Maskk|f
)(\41:
xA6PBZ
Z;V4t8
	r(qq!\@Sr
2@&8|Zh
DC07S}
BitmapG
HCaLgory
CX@4^[{
C@60W*
w0TBk%
cOO?RTl
4M88<<
itR{\a
:Cjt_96
TOpenPictureD
:ExtDlg[;3
G/LabB
Button_REVIEWGLYPH2K
DLGTEMP
O#3u"j
ebLeft
sRaised	
M[WQKd|3
[7Vy*oH
TMemo<d
Ctrls8
_va'D!N
nxAncCn
:BiDiM%y
tl3DDNz
	!MaxLzgthHF
K&2K4X
 3'5q&
PopupMVu
/@	.*(
?Dlick
(P(4nnD
HUpl`B
1s,fl\x
Infoe@
3UuoFk
m	MDh\
ze/(9J.
/Leavew
QpYo`Z
Pr01\%W
kSdHiztl
_di|j*j
Cloe2r
^FH>^!p ~
Default
NalRes
\%$%$C
\()""B
cbUYSRN
TRadio;
\5K'(%S
x|=Cx$ @
XCLPJ)a9
[t-;S#
ln_,t$
_SsWt:
$$VW5)
w&/JY8
OPgP#iXH
h`$/uj
T \n3;
%#\j_ksz
cgeShJk
2zF%Iu
,t&/U2
-z,Gd<
e$~G#	
BUTTON
Handle
tEC@v5xt
1!:PT0
C@b";H
u6b.>W
paIkl"
TAdXnc.	
Flagm4>
z8O[;>
GHotkeysK<
}>P$#B
.>,pn\
w\Ol	p1W
1234567890ABCDEFGHIJK
LMNOPQRSTUVWXYZ
Qv*jH>
AAO`-%
f26%XO
!_(jR2
"t^;BTx
xf0Pf:p
|G`{S<
!V=ZCE
Rd~6z|
YVLI-^NW
P?:S?u
?{\IZ	<@
|.\f;P`
]:tJ0IK
OD!+uW
}uVH`h
	P(A"P
u&!4`a
%@Y;<8
HDHj00pqbO<
yT.@.-q|>W
 Ih;J4u
(L>fV=
'(8(2w-
tP_00h8
ZFFvpw
fkV&(u
iK=7r=
l=oYZ/
I$7c1 
P$WS%[
B#%ho2[u
}mRm|M
B(K>),,
oF#<B'\
8r8"D1
RcR?d"j
TBrush
oross&%
\h^%"u
HB`dN?M|
MuE;@ 0V
LimegY
uG	Fuchsia
HmGMfL,_
WXkSp4
/TgrNd/
>BtnFU
r+[[+/W+P
ANSI_CHARS
Lc_MAC
HIFTJIS
["NGEU
GB2312
NE"BIGn!
TURK*H
EASTRD
SJAm.?
NJrN-GSi
ll/8dfX
dj=)	w
{P.F#0n2}
ohd(`H
 $(,C:
Ix3"F $k6
?QzC6P
t$+tui
MEU4`W
@!_V+e
)|2:s7
lipboar
+EHFl#:+
jBg7`h
14V3([
B!"44nC
,,5lD}3
~OXJ|e`a
H 	swp
@p1GA7
h8 0dYP
N%jtkNi
/nua];$&
(;~$FmW(
0Gp	;G
,l%Ov0
m?7,0/z
atPb	K>
-nv,aA$}
'$NE^CFw
\;SL`2
>phaBl
_zmks.ld
^7HlsPf
@4+@hx
C=`e M3\
Aj1rA,
	H&dyG
1+KQh`!
$	i7Qk7
7	w-Ku
BThumb`
01P!+0
jQ<=I+9
\%W+,S
Ur-./2
1#kPLA,8
]0*JiC40P
&fRM;'
BVG3$7(t
H	RV'w
w+v'ZQ
\y.}VH
k%.k#i
FRyTCgt
.0l]OA
=D/'PCP
dBl tF
Uu'$t"
Ap#N!!
gKffY0
|Iz}%!$
>Ta@N]
t;Cpu'
_`7TkLU
?XLLIEN
.I.0jSU:
t#;ADti
GA7R!'!
! AI&vyG
 Xt^Hg
~YjXa4Vh
a:I=5 }V
*,0tBk/
2!X|>a
PLNNNN04|X
s\%.8xnl
gA6)D\
'XXA|"
9MAINIC
tExxt`
m-	-gh$^
vc*st3.dllM
D@PIT$1l
oQ8)\I
{8#D7M
\pWM!,Hq83!
x;sHtK
fP5fA&
|cj8)q
+;^`u0
|ser32
~T*bar
@SZ~)[w
YCircj
$lT^w$\
$"0Kc(
V7y@.(
Xw$#FD%i
mdT9T@
.{{}?D
Vh,-D	
RlR[W+3P
u	"J$?He"
ancffe
P\hLvxis
=D:Cca
(&p%tI
DbAddT.r}
HDSavi
D.!y0BgqK
_hc$|(F<\L
7LZD40pw
w1I6\@tx
=x&\Bf[
\t?Tus@
tWc8dlg_h
NFizp|
?E\hZ2e]
9D\/%'9r
&uQf	)-\A
6.HfO{
o?(F$$
i>#Nt9&
EnH.<J
hOWSEW
HrLWaQ
W5D:I`
i$((,, 
TH~DEp
;`yX(,
m^hg)hG
(:(L'F
[x(%yt
np8C)4
YQ_i+k
GHZqWLP
tRUuI6
kP]otWT
a]"iKv/
D\PH/$
>am$F0
O&dv+P
|I"F+t 
.ZZJKr
e	NNw4
B@gYg0
a\81Nuq
gK\p9@
*q)DS'Hb
Bv$M[Ke
R$-@: `
ig.GW	k
4RN66F
YxIIipL3
_K@8FH(
0bS'/K
Q$\egP
0$_PXA
=a$Sr(E
AQO#`D
@g4VSl
G[pp[\W$9
HGAs^3
`[QX.u
t<C3%(j
Prm%[,
Ir	oyh
i=dH6*
@D,Vx4
v ?;]2'
VKEiI|bubEG
OWIQIS
-B	CKU
Sh|3t<
0Dg\?]
LiV0pV4
FLBTQ<
aFs;p2f
Db	C$A
FkoK=`[
Gh|@[N	
'*AwNGX- 
"S%%$k
]&U	w(i
n8(xj$q
USER32
M,.\bH
)J#WPjK8mp
hb,/yA
,Gh l\
>,First
drBYGQ
`_s.s	
\Pu!"2
'	5!Ow
K$TOY0]
t0|1./(
yt]FX\
6ft;%'
.n.kP?
+-(dzEhJ
l	zQ1+S
G0oFph 
AssociaM
<	tbs	
u@fmwB
c!K@5AZa
\Pw34B3B7
K2:\d_
 W+,rT
P2;<=r
@9Gx;G
M<#l;E
P!B*,7
:	S#zmcw
uX$CIx/.
M?	>5&
uC3DIh
l6a-b%
9uFk5g
7XRBsDD
F=_Qc;
{ke+c]
`4Zguk
0&(C:W
1d*o8d
XceddZY,j 
+PAM2m
d('^J{
GsVlk!
Uc/W7T
 7W40-
'E^W*B
s9su*[H
x1YO[h
&<Br)P$
&0- uR
u#}>4`
X0Gtd^E&e
%s\fO&
hX^FK#z*Xg/ w.
9RICHEDS
5WPh=4a4I
jX!o$6
RtH=f	
sH@wJX
tH0xuiV
;P$t:L
BzZC4C
OPxH7,M
 8_Xr$
qN EOG95&8t<
Odc	g:D/l x7?U
X '#$$A
fXwXev5
$-@*P!
o?Qh[3
xpmb?jF
avD; s
[	}')V8
dQW	!@	
BLCg#)
-(-4\!X{
0QEY*w
&y=as0
VWuP=uJ
`1mN45
idoC/I
dcC")-
}!SOHV<h
;K'RKO
Poj%5b
d\,W2Q
G4KF"96`lJ
hJ0H{C
r,!K!B
*Iki0F
{4K 'z
	i  3 
#f0!YS
B.rtpV
LC f=D
l,2lMX}.
(HkW Hk
A6:lSQ%
dBOST'T
dt-FXI
rINpK%
 Cr@PLS
%d@UEs
PEZmPc
2 G0  
blGlyl
`|64NG
f,kG\F0*4
TSpeed
CANCEL
NOGLOSE
RETRYIGB
og),P9Z
p$yc!Wh4
C*E6-"
m|CQE5%=
> D;	[
A?tw4tw0
Ea,1&(0a
S0+i "n
wC&Q!@P
llan MSWHE
_(_.SCK_
g@}GRp,
!6ISPLAY
H$' 9H
6W+u$$t
_~hl&I
chkSBcc
$2G@.&7'\
LKO)_*2r
IAi6M-l{
P0PhU|C<
di0Xy 
\u1>JAu#2
!(5B*a$a
w2|V*8@
Yes, mGz
@h< U{
7@2	d.
H	f.OfD
pBLDW`
AydGl0Z7
<[8\01;!
5q(zTX`
.ki)Hi&
9V-](Mg<
%{k8v7g]x
=_^Si$
	z6t>;p
-M<ePh
qj9`ME y
a)zMk%
eL3P8l
O8-ADWP
ie2-~B
4@F.d$
JxBD@C9
/QDJg%E
MS!_bC9
.VZG/*
Ed#^WC
W#PaR;$eg
?Fal$w
k@%H<=
9'zJl)p
1A#/JcS
k9?lv3
IC'H',Y
Bl{C3P
G{h~;Q
lp,?;D@
p4/5(!
 rg'D}-S	
:1+^eg
M`qZ/6
H(NK$z2
X2ShLm
p>'a,.
-)RI<?"C3
]wPEHyGG
;t59{e
1jIl^L
CSzkLx
!Kg^;1?
P/as07U
%6=%0DY
vwxNNNNyz{|NNNN}~
`NNNNabcdNNNNefghNNNNijklNNNNmnoPNNNNQRST
4	ffGe
pBpi|CD
P3)MN,
/]jpJA7
`}IOll
!rC)Ia
JYUIt.Vl?
<*t"<0r=<9w9i
ZkW|:r
}/xSLR
* (()@-3$-	*-^g
<0()(2)
'w~$Prx
P8,fk<dd
 <0(]"
@r%/!TXJ&
AM/PM;{
$VAG~D
9Tv}a)
pwA"B/W
L##Ci7e
	\=oP'*
/_"r3P
:<r/,|
('7JCC
.jJlWYl
 d, L{
]mlY5+
{;w$t|B
x|ttpl<
<ldh\d
X<T4P,<
?T	ni@
Xor_Cmp
+ 0	_'
Ft?Ht	
uWp;/I
	.,Ux.
rrrZRJ
.CVi{9
{q2m#S
=Tk>Gz
6!sGO;
MX]yU(
.6!y;y
TQtt#i
	D,``X
_8Wv_G
)e_?uaE")
G/SJ!/rg!
;a;`X	P/
ILj6uq
x:[eX;
".:BJgQ
DnU7CW
O=]_uWI
OaYY?b
.H)"_	
tX"i|H
;<!R*r
B `bS!O8
jCC+%)
?UnknowD
	&\(%w
E<@Ju~9G
tcB[22S
DGr"_1
ESULT	d
FlkaR'
2w;;ths
kQk$I|
gk; |S
;{c	ot=
^5:Qn8e
y>ENHZ8
+t_$xtZb
J{O"HC$ 
0"	w%9
~ExC[)
CSOFTWARE\
~ !\RT@FPU
\W\=HtN
!{K:?Uh
s!2,0	
>-Rf;` 
T P	\F
R9CRa}'$d
50VEis
sb)0IOu"
BF7k,W
XC.C0<Y
o]	Q0+<%t.
"1X9XQ
B$SBwN
std::bad_a5
sxh8L`
Dh`$hX	\'d
dEtF*]
2A<!*u
T>KPrD|W
~3]_@"
H_Y|"8
:j@<fgr2S|
s	jEn:
;K\wW5X
O3u 2Y
+u1s,J
t|@4.`
!?_"8%=
k$0HK>6
e@FBC(|
 f^$4>X$<
ik$8AEAE
GYf=r4
W0Y1_U
'G\(.(
o6.g?F
hhz	QK
=m@Q&<8
e`aAd'w
[;-4?~
0<L{{@
7Mv[*5p'
C(H,b.
CS@Dt90
a#.4k$
:9785F
|W 4$8
@QSGx(n
QU\MM@pSPT
H XOte>
p(POjnB
;s(t67
DYW/%H
Jy'IZC
0nOAHP
A,Ir0T
2/<V'X
fp,HK5]@
Jyz0p{x
AcPEXF
-PS h<H
`h|hh\%b
L,Leg,c
aQA.RGB	
&H(e(#
+DHYL8P
2jT2X\
;SpsaC;
lpmt)!
KORx@>
ZwppN@	
pEbhjNw
fzT%a:I
"%;HXx
P'>&qh
uhuYcX
@(	&8H
9$J(`	
Tg48<H
RyT48<q
D040r!
j! [7tQ
XOte,(
s{f8zq
_)X td
bC$n6~n
{KHSJF
ap 6>q
zT|J0T
,(@(=L2
;F~iM\
L+Hhn4
H9/@i@
<]BMZSw R
lHyK x
~@8X`s
A7T]O`
/4MtsJ6h
% >p7N
~	|_)2
D(;v`c
[%|Nt9
$;ClZf
SRW|d-6
N}b!#Cgfi
-9\4#M
^G!!=,
;- +CK%
t]YAI.
;9LNC[2
8mAQ;-
wGW-=U	T
ORUQdB{
P*IHMBp
)1LrRH+
u-P#w-
4;V	k5
=_Y(41, ),
ae'u )
u-3$hUU
nuIB@o
;S0uPS
h~ZV]@
-$|c%<
ha^TZT
	HKIp_t
4EEH(,M
/,aMvV
`P<QkK
0Dfn7w~
O8l<cW
uK J?+
K' JtK
o|QK\P
4UN8sA
&.K%6]V
?bG;w8t
0@P`puP
lNZ3Z(
<JJJJJ
waqxMR[
 8ir` 
y"4<(<j$
dH.H~Z
r``&	w
\(,04\.
\.(,04.
\LPTX\.
\8<@D.
HULPTX
\\`dh\.
rDHLPTr
\.X\`d.
\$(,0\.
rlptx|r
\.$(,0.
\HLPT\.
r48<@Dr
\.HLPT.
\lptx\.
(,048^FU
@U C++ -
B 2002 9
@F{*o-
$$<	f\
S\u?vaw7%04x
#VpHV.
DARUMA\
>	aS@0#
E@AP6zW
BGeCOMpm
U6BAfOf
 2a vi
cla.Bsabi
l@Td.D_
	Abico4\;43w
a8 o 0
(LARGURA x ALT):
TOPO: 576H
tVA X:L:
paL*$m .BMP
o. U(3'
tMuX>|
;a1c&E
fYV[(K
K.4DTB
$\(mV-
F'+xp#
&0~mm0
KI =L!
,	9q}n
U;11Ox
0;1;)6
 CARACnE
k']z7 
PDF0X^;
a34W88
[?/E16
e|ocm`
	DTR#H
TIMEOUT)
PERMI@
S`G"[7
(&! al
aE ';PQv.t
#r[14O
TPF0O}
(,048<y
y@DHLP
hlptx|T
r_b.c:
try != 
Pl Q f
em$qqri1N
mAX3pv5Rev
l(VfIv3,
d`u5[L
ook!W1p]
id->tpN.
i2-IS_STRUCv
CF_HA|B
Ptr)[-1] =
!#H0ku/
pgt4q%Y9ysrc=||C
m(!"q"
%s.cKg2b
mj4gs$k
`7rI/OB+o
vIl gzbe*
sGagIs
m_W-V;^S
$%&').;
/DhH:%M
MYjOHR4T
ucpkcWMe
zApQO0
df : .
; MBCS
M90x0`) !-|
HIEXCVTION))D
,PEboa
XCLPS(KUM
	B@333
*1892+y
y.5<=6*y
<hq\1Ny
oyNxeHN
9_bpdc
9	}%(&
cdefghijstuvwxyz
Bhb	#3R
qQQ?Zo
08@HP<
<X`hpx
yPX`hp
08@HPX
DHLX`h
yptx|N
DNT8YHxk
1-70Te
mMRM#K
s_/cii
R&OzE+
/?N_n[Au
'1MQR'
'4""C[w
:L*y8Z
?yvJ"Q[Q
3"JP^U
'P#dx;
V1'>fC
':09y3
HDF&rz
L3'L3'L'
2C`"(8$
fm#DmC
xkc+wuU
Lk8r +Ka
&:FrU>
obDt_g
&=b5c>$
yS;i5b
:"cxU:a*o
Z:SDz3'
SB<`MKs
`odGBs
{:E2b+
+Rm(u)H@
 DOLAVE
NqPO5G
EAN-13
528%ABAo;
2 OF 5
>O-lS2
Lao&ag
($PKWD
 LIVRE
<NHA 3
HEQUES
MENSAGEM
!gUYBM
Ho q; 
N0IDT7
4C7|%:
6F( E8C
F7l,!)9
T 8859-1P%
r+H' s
 fluxo
VZ/\Hr
H!,"B!
	H@+$)Z
Ik1%Ao
q0%wcJ	s
QUU@1?
`T7fw~
v,i+fsv6
`pp7o+g)gw
/o>iNc^
l6,nAV
XVRfwH]~?
UmNeG]P
=YaV1;
^>XnVPFZ
l6ShI\Q5
5n;J~H
>MN`WkNM_
6?^#.n@N
dvfVhYv6A
Gm;Y1I
mMaA1-
b;WiXT
W!"%*$G
=P0x/'
R[['<::
 |z|'^7
	^V6+>
YJPQlC
AxPgav
;6VP']6
y6%FG$F
J+0S3V
U7<]@`
Ag=f9d5b
EdXt^p
Ac4[/X
\FbZ0W
T>PFKg
.S,Q*P
.n*&"B
G@N9[?
ryzv14
Ud	Ubnn
x^FlhD+
z_:vsS
P`)^~w
[^l)wx{OFV~R
Y;[D@ 
;FlS/#m
Fim/PX
2RzF1C
#1	%U	
%$xFPa/
Unl9o1.
SNedTls
@SS+Q0B
/~Inom
I3P	n(0,cR
Y&1v32A-1
XPTPSW
KERNEL32.DLL
ADVAPI32.DLL
COMCTL32.DLL
COMDLG32.DLL
GDI32.DLL
OLEAUT32.DLL
USER32.DLL
VERSION.DLL
WINSPOOL.DRV
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
RegCloseKey
GetOpenFileNameA
BitBlt
VerQueryValueA
ClosePrinter