Sample details: e3debbab5af23e219d69ac20bf0760ea --

Hashes
MD5: e3debbab5af23e219d69ac20bf0760ea
SHA1: 496deec20a5df16d641aca39950c39e178226dda
SHA256: ecce63e6ba77871b8bed3a24df55c7e4ebd2913af28e51dbbbe383c5e9d0dd40
SSDEEP: 6144:Sf9l6rsjTMBzT5MKfLzdU1h6QV9QW+jy:s9nMBzT5NDzdU1Z0WN
Details
File Type: PE32
Yara Hits
YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet | YRP/UPX_wwwupxsourceforgenet_additional | YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/Netopsystems_FEAD_Optimizer_1 | YRP/UPX_290_LZMA | YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser | YRP/UPX_290_LZMA_additional | YRP/UPX_wwwupxsourceforgenet | YRP/UPXv20MarkusLaszloReiser | YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser | YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser | YRP/upx_3 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/antisb_threatExpert | YRP/screenshot | YRP/Big_Numbers2 | YRP/Str_Win32_Wininet_Library | YRP/UPX | YRP/suspicious_packer_section |
Sub Files
28c368614310acfedc80e672df07e789
Strings
		!This program cannot be run in DOS mode.
sVRich#
mZ.o1WJ
W)ye4g
0B#^_t
Vx;!e)
,`az@P
P`xNT&
PRQ*0PS
P\"e8h@;
KNjB&V
>Q}LXN
!5'L:h
8((4,u
wzq%;S
^~u\h`
h(LD/4
y,Y ;3Q
	;L2\h
TN83i!
ry_6qS
F6;/6/
VeZes%
Jq9z9;
*p7&)G
36qoeH
cN[J.;
0Pzs4~ 
u1|WS\
Ua(_|(^
,	PF0	
$VPd43
#&h(]$
zu@h/}Y
\QWN43
l?YReM
|f}8@W
n-_=_`
N9Q|0X<
N9 h A
0dl,1\
pK^@Q;%
'I*\A'
REJwk`
!#<@DV.%S
VnQMQL
\D_zhl4
"?=?8P%J
pWumtK;j14
NKb"q,J&
jp	Zqn
u,D2D	
It"Iu)Q1
PE}l\$4
<H;t)t
`WZx9A
=S9\$T}
]h)hx/`
 HNHN|$
B_[33L
ZUfSiah
:FB0F)
@Abn;j5=_
$0 PPk)
6 FI\Tw
TJ:BPB,
Y#h+2.
+QqrnDx
ScNH^4
v)LKQQ
ihrz<N
v0S&HE
2Z,,0v\
_;f@[P>
v`~p0g&
 SW,j$Y
#Q"Wvizt
|YO}_E
H}BpuZ
rjA_jZ
}d^[f3
Y+Ah] 
%dsQVxk
%SPA4+
,=8U-(=\
f-00f=
m9{yE_
9;/Gt0
@O`; 4J*
*Zu]BD&
hGBV1M
o+t1jMOC
$E(: <
~J@WV8?
xou,/GA3
< Bh$,2
6$>+FJ
@x|T4S
!5j Y+
CNS-hp[G
WSiCNS4
W;-Q-0
pb0hUxT
fcQPkt
jA[jZZ+
uX@8<v5!
f">vRVV
kgo"27j
Genuu_
ineIuVk
nteluM
&^@!W;
<@-3xC4;
3Yjiq?YY
~pjCXf
Vc-HG$
f}j8ZO
GZ^&VV
Z=vrA!
? |ftE#8
I`>-.8
u?97t7
Xm,l.F|
``dn WN1
n`?j Z%
psEtZfu
PjdEiV
vUk qk
,BC;PC
t*9#`t^Vhr0
ij.Yf;
tyPVj@p7|
++l,Xz
f`&a1~H
8%RW(^u8
>Cu/rzu)
	Okr1&
eNNAdql
	_t%m#`0&
$j@j _
t!XpA>
{j*X)VI/
htHjlY;J
'Rt}qX
<[5U6,
Su!K*3
&VV87r
D7|=TvP
QSLGx0
6CG0@G:;
r0xy;5
@D"s2P
1r0Jcy
uQS 0K
Fli%GJ<
2 Aiaa
	D*pdI
SO`11N"
t	@`; r
 sDt]5
F]dOQt
AE@%QDY
i>3`4V\
<JcG^1
8U={6q
>v	N+0
fB ($	i&
<D@Hi&
DLHPF@
7S"ySYFj
4W+U,V
-2WIs%
]=$8`2
`X%'`T:
<|	|[q
u'h2EL
6Wj7SV
!iC$&+(,
P.U4!i
EU@&FD@
\M3$mH`&Nd
IOh8iC
l9p&:fH
Bk2)a*,
<5-Nza-\5-f
UQPXY]Y[
Ou']^_
VHf`2f
q!5CWYj
BzatR+L;
~';_t|%
,=XU-H=\
~/!Y4Y
Ay_Z10p
P%@f-00f=
o1:6V\X
Ed"]!GO
{ }lI[
LRYtq	
4Xhm07(
>]uh;|
5*X%(F*
\AA8A2
Ys,H,&
PXP{Iy
$iuQGk
(QUD>;
SVjA[jZ^+
D@tI\q
b]uXVM
*hOk_^
)Fbad locale name
sertru
O`L.0K
Ogeneric
nknownyn
0sye`x)
D::rbit
il1_eof
PAUSExinvf7
l32_ed
02x"quo
ThisTex
r*My Cla[[P
mNUsZ WDd
s*b'a"sk
X:hI|6
ermiss4 denie
rex,t*no such
7 or resourB
N busB
t,mpty]
Rpp>tb
ck avt
4pgd/0|
A6_W/f`
a<ly_=
a`gbO'p
Bmf(cSK
123456789@c
jklmppqrVuvwxy
ABCDEF0
COMSPEV/cfmd.
o765@Z
D<xZu`\
^\sY0:Rp
7Z8>	$
?e')lW
vuZEeu
|'^\%>
l,kg<i
d^@En[vP
?5Wg4p
^%S#[k
#.X'HBO
$r(e@#
?Dj0Q:W>
[Ge6 D
 !"#$%&'()*+,-./0
?:;<=>?@
\]^_`?{|}~
qGHIJKLMN
OPQRSTUVWXYZ
>pTh0StackGua
FeW5poolTi
ryWhen
nkW/Defa
Is.id)LCM
Z(v/0v
-0/<2y
yH4T5`
PN\OhP<
U7/B_P.
og/q!B
FbSG |
_uW/vw	
#CorExiqqg
cmy.ba
:700WPR 
uNi.l7d
ygrz/u
ustnpte
MM/dd/y
(,HH:mm:saS;d
4|RqBr[#
Z/&U"EYj
NI// !
exRow*si
WN8XD7
_c!_hy$
gfr?y0Fy1
DWMess
nt'PopupgH
Z('8PWF
}Oi,64
#@eocl
i?ptr64N
-/%oh<
l| sCV
c gdd/
liP;>d
Rplacemt 
<pyQ`ud[
{|omni 7si
 DLc(@
(7Ar\y
dX_|/m
@ pT-g
FkS>h9
O8/2~.
?s|HwR
D<xZuo~
7Z8>	$
<8bunz8
|'^\%>
l,kg<i
d^@En[vP
788c{r
?5Wg4p
BC .0	
#{ `~R=
^%S#[o
#.X'HBO
?Dj0Q:W>
bu?P/Y
#SNAkiSK
OG/wuK
pKGWoa
p??7A`
}>3?"9
]e\`;A
3B6OB?N
<`VD6&<
<l`J4$
DOV.:w
.?AVruntime_e
rror@std@@
?excepBon
failure@Rs_base]
vd_c~t
<@lo~l
Uctype}
WSqSa[
buf_irr
8^1bngth7
z~,TL4{
wcodecv
 /C"D/
(c) 1992-2004 by P.J.
^zr, l
Dinkbw
JALL RIGHTS
ESERVED.
ap8(?g
y048<@
y 0@Pd
/vp=DqP
hasE!#6
abcdefghijklmnop
stuvwx
yzoABCDEFGHIJKLMNOPQRSTUA
<"X#\$
tPBR&tS
hy%"wa
-{tH94/*
jU`Dxe[
Yom-+6<h
0%I1M~
ElX)jR
D}4jU?
z4m}g6
jd8+#U7
,0]e7=
V}/2?$
W-<+ S
*l}nqG
>K]]%t
n8t$@ML[x
U8wpgm
IBo2Xa
hAa F$
/bT|Wu
v='??h
%M4\&2R
":z]@,?uC
(1{5#Sh
cSAwX]/f
"QH@f?
O*Bo?,
X^L&"~}ln-
*n|N`3W
+Ad'#)
; 0f U7
lp~vJ{
!W4Imd
`I[|=d
5=bX:}
_\&`PJ_
@PoQ!~i
]T(V@@
xD TX5j
l%bvz)
YZIu?I
Y_FGl#
y]44$W
fw$AD6
hV7]|(!
"V[hk%
0u>T"|n
CKI! 8+
eS#P 1
7IrLc_
CP+`AH&
H^Ch<a
i%B+$hAnGs6H
T^f%w=
#*D[br
1CF}i2gj
6i_\9WM
bM4Li!
F!sFo8
!6P{E.j
mWG?`,_4t
X<'	50
~\vi Y^
l.{G#t
8;n=gL
fr1E%*
wC710|[
os[&9&
>&uVmv
[z.l[uvxbJ||
3{j?B!1
}tw~y	
"${:Yg
&cp%OG
dt}oB|Jc/
m]MrGm
rL[ey<i
R&y$2>
3sj>fh?D
>.#**g
\pGwmS,
DC>},A
Hy\Ykl
\?\zz_[
33dDD@
f&&nvb
26/sSw
}~n3r'W=z
#"R"#!
N%"'t=
~~WO(R
>apaFAHwA
Gtfw/ 
Nwu wE	
+UTZv<
FooFFDD
Csl\(n
1K>>p>
	~T5M;
&zdGhR5Z@
@@?~X*
7R{<<t
%DD{Ye
'2'0'#'
,qo2.2
cs.sGuF
>u^bU^
~;3@~7
3CcH&.D8$.{o
#?;R6C4F
5bB;2^
	TBdKu
4FRNwf
`X .IeN
8wC~?!r,
n2^!Fo
<#,+ba
y>AO53
\kOm%W
GetSystemTimeAsFile
%Na8'OEMCP
IsValidCRePage1k
ProcessHeap
@Debug4r,
7(entECurr
ApisANSI
tLCIDS
InfodHM
LibraryI
2Next8
vTothelpLSn
m;t<o7Qu4yP
5}Fu8P&h
L`--Cr
r#La"E
PptibX83
Habl/mi
#^*nM,
ypeUS~
VZBObj
rqAd!H
MJiBy>=**V
lQxO)V
S(eLl:
l[D4Im
J{oK,pla
CIBegD
HcK846
7*mAss
#Dba)BoW
upDixx
FDd6S'
nkGoBa
GD~.Tw
UrlA^0
HtqRvs~F
XPTPSW
IDATx^
iCCZGJ
W;2_*1
GpA+9-
Un(G:0*2
Q?FND6
"s7hdb0
XX\m*3<{
z2u<U<
#~I/.!
QtIfy/1!-e}
z@9'',5Le
'zL@91'
&',9Zz
LLJC@@@99,
zeZZYLLLI@@@@@95'
zzzzeedZZLLLC@@@@@;5,
'',5Le
{zzzeeeZZZLLL@@@@@@95'
zzzeee[ZPLLLA@@@@@95'
'',9Lz
zzzmee^ZZLLLA@@@@@@9,'
{zzzeeeZZPLLC@@@@@@95'
'',9Zz
zzzeeeZZZLLL@@@@@@95,% ',9Le
zzzmeeZZZLLLJ@@@@@@9,'
zzzseeeZZPLLL@@@@@@95'
'',9Zz
zzzseeeZZZLLL@@@@@@95+
'',5Le
zzzeee[ZZLLLC@@@@@>9,'
''5@Zz
{zzzsee^ZZNLLC@@@@@@95'
&',9Le
zzzmeeeZZZLLL@@@@@@95'
szzzzzzz{{{{
zzzseeeZZZLLLA@@@@@<6,
ssssssssszzzzzzz{{{{{{
zzseee[ZZPLLC@@@@@@95,
mmmmsssssssssssszszzzzzzz{{{{{{
zzzqeee^ZZPLLLBCZ@
eeeeeemmmmmmmmssssssss{{sszzzzzzzzz{{{{{
zzzseeeeZZzL
^eeeeeeeeeeeeeemmmme
ssssszzzzzzzzzzzz{{{{
^^^^^^^^^^^eeeeeeee
sessssssssszzzzzzzzzzzzzz{{{
[^^^^^^^^^^^^^^^^^ss
eemmmmmmmmssssssszzzzzzzzzzzzz{{{{
.zZ[[[[[[[[[^^^^^^^^
*****'
eeeeeeeeeeemmmmmmsssssssszzzzzzzzzzzz{{{{
*zZZZZZZZZ[[[[[[[[[^e
''''''*(
s^^^^eeeeeeeeeeeeeemmmmssssssssssszzzzzzzzzz{{{
*zPPZZZZZZZZZZZZZZZeL
"''''''''(
e^^^^^^^^^^^^eeeeeeeeeeeemmmmmssssssssssssszzzzzzzz{{{
(zPPPPPPPPPPPPPPZZZe>
'''''''''''"
^[^^^^^^^^^^^^^^^^^^^^eeeeeeeeeeememssssssssssssssszzzzzzz{{{
#zNPPPPPPPPPPPPPPPP^9
""""""""""''"
[[[[[[[[[[^^^^^^^^^^^^^^^^^^^^eeeeeeeeeemmmssssssssssssssszzzzzz{{{{{
MNNPPPPPPPPPPPPPP^7
""""""""""""'
ZZZZZZZZ[[[[[[[[[[^^^^^^^^^^^^^^^^^^^eeeeeeeeeeeeeemssssssssssssszzz
zCNNNNNNNNNNNPPPPP^>
""""""""""""""
PsPZZZZZZZZZZZZZZ[[[[[[[[[[^^^^^^^^^^^^^^^^^^m
eemmmmsssssssssse
zCLLLNNNNNNNNNNNNNV>
"""""""
mkPPPPPPPPZZZZZZZZZZZZZZZZ[[[[[[[[[[^^^^^^m
Z91,,5e
s^^^eeeemmmmmsses
CCLLLLLLLLLLLNNNNPC
z^PPPPPPPPPPPPPPPPZZPZZZZZZZZZZZZZ[[[[[[s
s^^^^^^^^^^eee^e
CCCCCCCCCCCLLLLLLNN
PPPPPPPPPPPPPPPPPPPPPPPPPPZZZZZZZZZZZs
''''''"
^^^^^^^^^^^^^^[
CCCCCCCCCCCCCCCCCLP
,{NNNNNNNNPPPPPPPPPPPPPPPPPPPPPPPPPPPe{
''''''''''
5{[[[[[[^^^^^^^P
CCCCCCCCCCCCCCCCCCP"
>sLNNNNNNNNNNNNNNNPPPPPPPPPPPPPPPPP^
'""""""""''
e^ZZZZ[[[[[[[[P
zNACCCCCCCCCCCCCCCCP*
P^CLLLLLNNNNNNNNNNNNNNNNNPPPPPPPPP
"""""""""""""
6mZZZZZZZZZZZZP
zP?CCCCCCCCCCCCCCCCP5
ePCCCLLLLLLLLLLLNNNNNNNNNNNNNNNP
"""""""""
mPPPPPPPZZZZZN
zP>CCCCCCCCCCCCCCCCP;
sCCCCCCCCCCCCLLLLLLLLLLLLNNNNNz6
ZPPPPPPPPPPPPN
s^>CCCCCCCCCCCCCCCCCC
'sCCCCCCCCCCCCCCCCCCCCLLLLLLCmC
A[PPPPPPPPPPPNe
ee>CCCCCCCCCCCCCCCCCM
7mCCCCCCCCCCCCCCCCCCCCCCCCC[Z
7[NNNNNNNNPPPLP
^s>CCCCCCCCCCCCCCCCCP
LZCCCCCCCCCCCCCCCCCCCCCCCPm
1[NNNNNNNNNNNMC
Zz>CCCCCCCCCCCCCCCCCP*
^PCCCCCCCCCCCCCCCCCCCCCCs
,ZLLLLLLLLLNNLC
>CCCCCCCCCCCCCCCCCP1
sCCCCCCCCCCCCCCCCCCCCCs'
*ZCCCCCCCCLLLCA
>CCCCCCCCCCCCCCCCCP7
(sCCCCCCCCCCCCCCCCCCCe7
*PCCCCCCCCCCCC@
>CCCCCCCCCCCCCCCCCCC
>^CCCCCCCCCCCCCCCCCXC
(PCCCCCCCCCCCC>
>CCCCCCCCCCCCCCCCCCC
PPCCCCCCCCCCCCCCCO^
'PCCCCCCCCCCCC>
>CCCCCCCCCCCCCCCCCCP
^C>??CCCCCCCCCCCs
"PCCCCCCCCCCCC>s
ACCCCCCCCCCCCCCCCCCP*
sVPCC>>>??CCCs'
"PCCCCCCCCCCCC>Z
CCCCCCCCCCCCCCCCCCCP1
>L^s{{sr^PCC^7
"PCCCCCCCCCCCC>C
NCCCCCCCCCCCCCCCCCCN>
"PCCCCCCCCCCCC?>
PCNNNLLLLCCCCCCCCCCNC
PCCCCCCCCCCCCC?
^CNNNNNNNNNNNNLLLLCLP
PCCCCCCCCCCCCC>
sCPPPPNNNNNNNNNNNNNN['
PCCCCCCCCCCCCC>
CPPPPPPPPPPPPPNNNNN^.
PCCCCCCCCCCCCC>
CPPPPPPPPPPPPPPPPPP^:
PCCCCCCCCCCCCC>
CPPPPPPPPPPPPPPPPPP[C
PCCCCCCCCCCCCC>s
N[[[[[[ZZZPPPPPPPPP[P
PCCCCCCCCCCCCC>P
P^^^^[[[[[[[[[[[ZZZ^^
,x^^^P
PCCCCCCCCCCCCC@C
P^^^^^^^^^^^^^[[[[[[m,
'x^PP^^
1mk^VP6
""""""
VCCCCCCCCCCCCCAA
P^^^^^^^^^^^^^^^^^^^s;
"""""""""""""""
[CCCCCCCCCCCCCCA
[emmmmeee^^^^^^^^^^^mZ
""""""""""""""""""""""""
[NLLLLCCCCCCCCC>
^msssssmmmmmmmmmme^^es.
'''''"
''''"""""""""""""""""""""
"^NNNNNNNNNNLLLL>
sssssssssssssssssmmmm{P
'('''((**
'''''''''''''""""""""""""
"^PPNNNNNNNNNNNNA
{szzzzssssssssssssssss
*((((((*
{ms'"**))'''''''''''''''''''''''"""
"^PPPPPPPPPPPNNNC
{{{{{{{{zzzzsssssss
e"'*******
*(((''''''''''''''''''''''''''
ePPPPPPPPPPPPPPC
{{{{{{{{{
*******"
***(((((((((''''''''''''''''''
e^PPPPPPPPPPPPPN^
,,,,,,*
,************((((((((('''''''''
^^[[[[ZZPPPPPPPPP
7",,,,,."
*,,*********('''''''(((((((((((((
k^^^[[[[[[[[[[[PP
9'*,,,,111,,,,,,,,,,**'""*,11,*'"""(*******((,,,
se^^^^^^^^^^[[[[P
L'(.,...,1/,,,,,,,*'(7Nm{
s^A5'"'**********
****((''
*ze^^^^^^^^^^^^^^P
s5',..11.....,,*'.L
s>''**,,****,
******((
mmmmmee^^^^^^^^P
^5**,,....,*'5[
{>'',,,,,,,*
,*******
P{sssssmmmmmmmmmeZ
zC71,***.>m
m1",,,,,,1*
,,,,,,**'.
zsssssssssssssmm^
@'(,,,,,11**1.,,,,,,*"P
{{zzssssssssssss^
m.',1....11.,,,,,,,'7
{{{{{{{zzzzssm
A'*.11111111...,'.
{{{{{sz
s7(,111111111,'5
e7**,,11.,(*C
Z>6115;Z
!!!!!!
"""""!
""""""
"#####
#######
"*******#
#--------#
$---------0$!
*------------110110-*#
-111111111111111111111111111--##
-1111111111111111111111111111111122111-*#"
122222222222222222222222222222222222222226666221-*"
"166666666666666666666666666666666666666666666666666666621.-#"
#6:::::::::::::::::::::::::::::::::::::::::::::::::::::::77::::::622.-(#"
#(1;Lz
#::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::221-*###(*6@Z
*:>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>=:::::7321--**-17C^
->>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>=:::320---12>Le
-????????????????????????????????????????????????????????????????????????????????????????????????????>;:7621.z
1ACCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCAAAA?
2CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
6CNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNMMMNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
7PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPNC>>>>?ACCCMNNPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
:PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPN?^
s^VMA?>;=;>>?CCMNNPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
>Z[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[PP
s^PCA??>??ACCMNPPPV[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[
?^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^P
{mVNCAA?ACCMNPPV[[[^^^^^^^^^^^^^^^^^^^
A^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
{mPPMCCCCCNPPV[[^^^^^^^^P
A^mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
{k[PNMMNNNNP
CP[^kmmmssssssssssssssssssssssssssss
se^[VV[[^^mmssssss{{{{{{{{{{{{{{
ss^^[^^^^msss{{{{{{s
ss^^^^^[
$%&wOFA
9:;|ME?
%%%t***~)))|)))|)))|)))|)))|)))|)))|)))|)))}**)~***
(((xnnl
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    type="win32"
    name="Hoc"
    version="4.0.0.0"
    publicKeyToken="6595b64144ccf1df"/>
  <!-- Operating System Context. -->
 <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> 
        <application> 
            <!-- Windows 10 --> 
            <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
            <!-- Windows 8.1 -->
            <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
            <!-- Windows Vista -->
            <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/> 
            <!-- Windows 7 -->
            <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
            <!-- Windows 8 -->
            <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
        </application> 
 </compatibility>
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
  <security>
   <requestedPrivileges>
    <requestedExecutionLevel
     level="AsInvoker"
     uiAccess="false"/>
   </requestedPrivileges>
  </security>
 </trustInfo>
</assembly>PAD
ACTIVEDS.dll
ADVAPI32.dll
AVICAP32.dll
COMCTL32.dll
COMDLG32.dll
dbghelp.dll
DCIMAN32.dll
GDI32.dll
IMM32.dll
IPHLPAPI.DLL
KERNEL32.DLL
ole32.dll
OLEAUT32.dll
pdh.dll
SETUPAPI.dll
SHELL32.dll
urlmon.dll
USER32.dll
WININET.dll
CryptGenKey
capGetDriverDescriptionA
ChooseColorA
FindExecutableImage
DCIBeginAccess
SaveDC
ImmGetContext
IcmpCloseHandle
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect
CoInitialize
PdhCloseQuery
SetupDiGetDeviceInstallParamsA
SHGetFileInfoW
HlinkGoBack
FtpOpenFileA
sixth.exe