Sample details: fa0b4d269db6eac956ff483efbe5e42c --

Hashes
MD5: fa0b4d269db6eac956ff483efbe5e42c
SHA1: bc1ee650ee62ea586b6e42445063d30cd2128ae1
SHA256: b04bc2f46ae466048d5a185fda7219c7a48b9cd0ecafcf8ea75d45358fffbe4d
SSDEEP: 6144:AyT/vRoQwkkqxhDKl5h1jBNN+G6TKKAqnQqZ0727h:AURZ3kWh4BNN+GPi072V
Details
File Type: PE32
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Armadillo_v171_additional | YRP/Armadillo_v4x | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasOverlay | YRP/HasDigitalSignature | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/WMI_strings | YRP/network_http | YRP/screenshot | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/Big_Numbers1 | YRP/BLOWFISH_Constants | YRP/MD5_Constants | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API |
Parent Files
715c5a879dbf89e46c5bee0b2f23c6b2
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
9\t	HII
Yf9;Yu
Y_^][YY
YY_^][Y
VWjD_Wj@
PVWWWj
SVWjD3
YY_^[]
F0_^[d
WWWjdWWW
VVVjdVVVj
VjdVVVj
VVVjdVVVj
1AABBf
t	BBFFf
QQSVWd
t.;t$$t(
sO;>|C;~
HHtpHHtl
VC20XC00U
[ShpZA
"VVShlZA
E VVVV
^VhpZA
PVhlZA
^}%95 
HSVHWtgHHtF
YYF;5 
^VhpZA
PVhlZA
PPPPPPPP
PPPPPPPP
[ShpZA
"WWShlZA
+ttHHtd
u.h [A
`h````
ppxxxx
(null)
GAIsProcessorFeaturePresent
KERNEL32
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
1#QNAN
1#SNAN
H:mm:ss
dddd, MMMM dd, yyyy
M/d/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
GDI32.dll
gdiplus.dll
ole32.dll
OLEAUT32.dll
SHELL32.dll
SHLWAPI.dll
urlmon.dll
USER32.dll
WININET.dll
FreeLibrary
GetProcAddress
LoadLibraryW
GetFileAttributesW
CreateMutexW
GetSystemTimeAsFileTime
MultiByteToWideChar
GetTempFileNameW
GetTempPathW
GetModuleFileNameW
GetVersionExW
LocalFree
LocalAlloc
GetCurrentProcess
SetLastError
GetVolumeInformationW
FormatMessageW
SetFilePointer
lstrlenW
lstrcatW
MulDiv
lstrcmpiW
CreateThread
InterlockedDecrement
GetSystemDefaultLangID
GlobalFree
GetSystemTime
GetFileSize
GlobalUnlock
GlobalLock
LockResource
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
GetOEMCP
GetACP
FlushFileBuffers
GetCPInfo
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetModuleFileNameA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
FindResourceW
LoadResource
SizeofResource
CreatePipe
GlobalAlloc
CreateProcessW
WaitForSingleObject
TerminateProcess
WideCharToMultiByte
GetLastError
DeleteFileW
CreateDirectoryW
CreateNamedPipeW
ConnectNamedPipe
CreateFileW
ReadFile
WriteFile
GetExitCodeProcess
LeaveCriticalSection
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
InterlockedIncrement
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
RtlUnwind
GetModuleHandleA
GetStartupInfoW
HeapAlloc
RaiseException
HeapFree
ExitProcess
GetVersion
CloseHandle
OpenProcessToken
GetTokenInformation
EqualSid
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
SetTextAlign
SetBkMode
SelectObject
TextOutW
DeleteObject
CreateFontW
GetTextColor
SetTextColor
GetTextExtentPoint32W
GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdipCreateBitmapFromStreamICM
GdipDisposeImage
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipDrawImageRect
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
GdipDeleteGraphics
GdipFree
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateFromHDC
CoUninitialize
CreateStreamOnHGlobal
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
StringFromGUID2
CoInitialize
CoCreateInstance
ShellExecuteExW
ShellExecuteW
PathIsDirectoryW
URLOpenBlockingStreamW
GetDesktopWindow
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
CreateAcceleratorTableW
RegisterClassExW
LoadCursorW
LoadIconW
BringWindowToTop
SetForegroundWindow
SetFocus
UpdateWindow
ShowWindow
RemoveMenu
GetSystemMenu
CreateWindowExW
GetSystemMetrics
MessageBoxW
EndPaint
BeginPaint
GetWindowLongW
DefWindowProcW
wsprintfW
SetWindowTextW
SendMessageW
GetClassInfoW
SetWindowLongW
GetWindowRect
DestroyWindow
ReleaseDC
DrawStateW
DrawFrameControl
InvalidateRect
GetClientRect
CallWindowProcW
EnableWindow
PostQuitMessage
GetWindowTextW
InternetOpenW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetQueryOptionW
InternetSetOptionW
InternetCrackUrlW
InternetConnectW
InternetCloseHandle
SHGetFolderPathW
Set objWMIService = GetObject("winmgmts:\\.\root\cimv2") 
 Set colItems = objWMIService.ExecQuery _ 
 ("Select * from Win32_DiskDrive")
 For Each objItem in colItems 
 Wscript.Echo objItem.SerialNumber 
 exit for  ' do the first cpu only! 
.?AV_com_error@@
 iciNWq
Ze2Zh@
A4x{%`
BFUa.X
	-f3F2
w``u N
:XpJwqHPm6l
BASS_StreamCreateURL
BASS_StreamFree
BASS_Free
BASS_ChannelStop
BASS_ChannelPlay
BASS_Init
BASS_SetVolume
.?AVtype_info@@
ERROR!
Corrupt Data!
XXXXZt
ExitProcess
GetModuleHandleA
GetProcAddress
VirtualProtect
GlobalAlloc
GlobalFree
MessageBoxA
wsprintfA
CoInitialize
mixerOpen
acmStreamSize
KERNEL32.dll
USER32.dll
ole32.dll
WINMM.dll
MSACM32.dll
MSVCRT.dll
BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
BASS.dll
w<zu>k
`c8;|R
(Fnt!q>P
:`[y+K
R}{z.J
y}z{0?
	|zqO~
[nn`0G
=Q4ipfJ3
e8.S*z:b
7T4Gx5O
`g'kN7^A
+:.S	&"
ru)n}]
eGlUsU
J0 5Z&D
XX*^ZF@
;Ttp*a(
YWx+wJ
YxU>(W
b`2,4\FA
3eGdCqv-
~La	'~
X)iY	.
&l]m] 2
`Q,/~ae
z9NAcMBc
u_~e(5
8>				<28>5
mPPzd|
f>M&^!q
bbfWA/\
A0SF0x
"8?P3%
|9`uKa9
ec,@u_
m/6@	p1\J
H^iF-F
K5$SH`
`y{6We
v9aY_n
"T!B^BT@
#e	3iC
 +X8&W
BvF0^Svfrj 
hYxwA.
>,jt%,
EoDU)p
as}`*X
Lzv(HS
h	Ka(f
_1WV+)p
I$&Kg"00
24W045r
l!A4EV#s
J3$dN8
L([%o 
$IhAaHjO
Jd6L+B
-Y5vUd
<>Z28p^v
c-`vWFp1
%`i"p!
\WO6eq
'c}4*MW
R+2[}!
Pn,;vO
a2C+G*
-^)	f#
:HQzen
&B]Kf}P
K]eXSKR
vf4S\[
]?2{s!
gp_7tJ
{	a		9D
Oy7j$H
-5.(,(
SgPLNU`q
j7++Oj
Dcc&y`
r7fL?Q
l$ebDK
cc!}s`=t
[Y2>+;rE
;:C>c?
qgg"lh
_sVFzp'
aY*	95
$)"wy}E
lJ.J,nN
21v9u C
,}:FS8
w~}2CW
)R_\p,.]
?|5Oh4
&C`R"~
V*pQTX^
8n=/'Y
o?%6hx
 'XevE'
$%'4!:+
r`Lm!y^
}HzNK 
C.?D=_
4\T|}[H
rI_KdV!
7cSc%,
D`'[FO7
1Wa=T4
^!*8#VJq
SESD$}`d
QB5^0D
SLa`PT
z"1rON
g`W8mw
.s.vd824
*u=zIv
Mk3Z"A4"
$X&tuYb
ueQdSZ
f::s,6
F*U'p88K
IspOLKI@
	WywaB@
nWAAB@
~%:G$t
D1E,%R
|u_=K@
]Aqn=q>
qU5>1xe^
N*';!iC`
k@@a;}
t!l;08E
?01=*1
)!2%Bp
/I!wp$I:
iE(gIR
mh&$I@E
4!I5~T
	uVy'f
LJonm?
V{\I,q
(QD_6T
%}c_9O
)/gHs>
"I*#$	\L}=h
Z3S5pXq-X
3"@r]*+6u
?~j!LW
B_o&8MG&
RTlP .
uvUun2[K
4?w]^.
c"ko7xg
Sm1!J{i
.|?`Uu.
n9Z]NVu
+sun"<`XUG
zd]Gu5
{X;+[gk
_Iy9XZ
LG#H,R00
8(TkJ]qL
\xetOu&E
Z"k^BiXu
%}5%>L
8?Kp]D
W_1:1{g
fR	p]^\
|\/+\W
k-F]:^
C{GZ~~
	"*J?c
"&r,p{W	p=
&e6?wR
[Fs1P_C
7UH5*,`
-]Qp0]
Qa&D~'
+E[h80-
na~q2*(
t'X_Pd(X
tUMGhx
of_!IW
_uz4fw
5eQ\<U
3>,$	3L
GBf!"\R
!DT#;7t
kwe09;
INELvJB
MHCU`V
qcm~wc2
+,;>10*
XTYscdY_XLDDDKEJBD]VNO}p
}|vcd~zw{b{Ogygd
&Yfodyi
sY5U40
raJ2I&
+k0MQd\K{
(2ZUT6H
P4EDE.
\~xPdP4
oy7z5b}^
T*:wc>WO
(\p_,]
~]FhlqdH
qCp*Ke.
@nMonA
#[DGqUf
fZ[P"8!
W"|AN?
S)JB&LJEGB
0@J/(z
R?>.*R
Mgh|eFtqmpC
_M5xj`xs|
*2%!Tx
|aZ_Ult
"VUYOXxx
zv{yK|{A
eek.V	ei%uX
[wCGA]
5K721Y.
xL/5*:
Ugo2n*
TLR9NdFb
rlfAA|G
DWItK^LQZ
8'd*+=
+E n9C
zIjqS3TPoa}x
Ppb'7,
D[v@Fbu
UHYXFY
DRYXOM\JPJ}Q
Vy|;zMz$b44}s
BACK=< 
CLOSE=
USER_LICENSE=
USER_LICENSE_PREFIX=
NOT_ENOUGH_SPACE_TO_INSTALL=
NOT_ENOUGH_SPACE_TO_INSTALL_YES_NO=
FOLDER_IS_NOT_WRITABLE=
TO_PLAY=
TO_PAUSE=
LOADING_AND_PLAYING=
PLAYING=
PAUSED=
INFORMATION=
INSTALLATION_FOLDER=
DOWNLOAD_FOLDER=
QUICK_LAUNCH_SHORTCUT=
DESKTOP_SHORTCUT=
START_MENU_SHORTCUTS=
QUICK_INSTALLATION=
EXTENDED_INSTALLATION=
PREPARING_COMPOSITION=
DOWNLOADING_MUZ_BROWSER=
INSTALLATION=
LAUNCH=
GETTING_INFO=
CHECK_JAVA=
DOWNLOADING=
UNPACKING=
INSTALLING=
STARTING_PLAYBACK=
INSTALL_SOFT_FOR_HELP=
LAUNCH_ON_WINDOWS_STARTUP=
 Zona 
OPEN_TORRENT_VIA_ZONA=
 .torrent 
OPEN_AFTER_INSTALLATION=
ADD_FIREWALL_EXCEPTION=
INSTALLER_RUNNING_ALREADY=
ONLINE_MUSIC=
PREPARE_TO_PLAY=
DOWNLOADING=
PREPARE_TO_DOWNLOAD=
ONLINE_VIDEO=
PREPARE_TO_WATCH=
#Rambler
RAMBLER_TITLE=
FULL_INSTALL_RECOMEND=
CUSTOM_SETTINGS=
APPLY_RAMBLER_HOME_PAGE=
APPLY_RAMBLER_SEARCH=
#MailRu
MAILRU_HOME_PAGE=
 Mail.Ru 
MAILRU_SEARCH=
@Mail.Ru 
MAILRU_INSTALL_GUARD=
 Guard@Mail.Ru
MAILRU_INSTALL_SPUTNIK_FF=
@Mail.Ru 
 FireFox
MAILRU_ADD_STICKY_TABS=
MAILRU_ADD_LINK_TASKBAR=
MAILRU_INSTALL_CHROME_EXTENSIONS=
 Chrome
VERSION_LESS_THAN_1016=
 Zona 
 1.0.1.6 
OK=Finish
NEXT=Next >
BACK=< Back
CLOSE=Close
USER_LICENSE=License agreement
USER_LICENSE_PREFIX=By clicking "Finish", you agree to
NOT_ENOUGH_SPACE_TO_INSTALL=Not enough disk space, you need to %s MB of free space
NOT_ENOUGH_SPACE_TO_INSTALL_YES_NO=Not enough disk space, you need to% s MB of free space. Continue anyway?
FOLDER_IS_NOT_WRITABLE=The folder is not writeable
TO_PLAY=Play
TO_PAUSE=Pause
LOADING_AND_PLAYING=Loading and playing
PLAYING=Playing
PAUSED=Paused
INFORMATION=Information
INSTALLATION_FOLDER=Installation folder
DOWNLOAD_FOLDER=Download folder
QUICK_LAUNCH_SHORTCUT=Create a quick launch shortcut
DESKTOP_SHORTCUT=Create a shortcut on the desktop
START_MENU_SHORTCUTS=Create shortcuts in the Start Menu
QUICK_INSTALLATION=quick installation
EXTENDED_INSTALLATION=extended
PREPARING_COMPOSITION=Preparation of compositions
DOWNLOADING_MUZ_BROWSER=Downloading music browser
INSTALLATION=Installation...
LAUNCH=Launch
GETTING_INFO=Getting information
CHECK_JAVA=Checking Java
DOWNLOADING=Downloading %s
UNPACKING=Unpacking %s
INSTALLING=Installing %s
STARTING_PLAYBACK=Launch playback
INSTALL_SOFT_FOR_HELP=Establishing the proposed software you help %s remain free
LAUNCH_ON_WINDOWS_STARTUP=Start Zona when Windows starts
OPEN_TORRENT_VIA_ZONA=Open .torrent files in Zona
OPEN_AFTER_INSTALLATION=Open after installation
ADD_FIREWALL_EXCEPTION=Add firewall exception
INSTALLER_RUNNING_ALREADY=The installer is already running
ONLINE_MUSIC=Play music online
PREPARE_TO_PLAY=Preparing for playback
DOWNLOADING=Downloading
PREPARE_TO_DOWNLOAD=Preparing for download
ONLINE_VIDEO=View online video
PREPARE_TO_WATCH=Preparing for playback
#Rambler
RAMBLER_TITLE=Together with %s You can install Rambler
FULL_INSTALL_RECOMEND=Full Install (recommended)
CUSTOM_SETTINGS=Configuring
APPLY_RAMBLER_HOME_PAGE=Set Rambler homepage
APPLY_RAMBLER_SEARCH=Set Rambler search by default
#MailRu
MAILRU_HOME_PAGE=Set Mail.Ru homepage
MAILRU_SEARCH=Set Search@Mail.Ru search by default
MAILRU_INSTALL_GUARD=Install Guard@Mail.Ru
MAILRU_INSTALL_SPUTNIK_FF=Install 
@Mail.Ru for FireFox
MAILRU_ADD_STICKY_TABS=Add
 sticky tabs to browser
MAILRU_ADD_LINK_TASKBAR=Link in task bar
MAILRU_INSTALL_CHROME_EXTENSIONS=Install Chrome extensions
VERSION_LESS_THAN_1016=This link works in Zona version 1.0.1.6 and above. Please wait for updates and follow the link again.
BACK=< 
CLOSE=
USER_LICENSE=
USER_LICENSE_PREFIX=
NOT_ENOUGH_SPACE_TO_INSTALL=
NOT_ENOUGH_SPACE_TO_INSTALL_YES_NO=
FOLDER_IS_NOT_WRITABLE=
TO_PLAY=
TO_PAUSE=
LOADING_AND_PLAYING=
PLAYING=
PAUSED=
INFORMATION=
INSTALLATION_FOLDER=
DOWNLOAD_FOLDER=
QUICK_LAUNCH_SHORTCUT=
DESKTOP_SHORTCUT=
START_MENU_SHORTCUTS=
QUICK_INSTALLATION=
EXTENDED_INSTALLATION=
PREPARING_COMPOSITION=
DOWNLOADING_MUZ_BROWSER=
INSTALLATION=
LAUNCH=
GETTING_INFO=
CHECK_JAVA=
DOWNLOADING=
UNPACKING=
INSTALLING=
STARTING_PLAYBACK=
INSTALL_SOFT_FOR_HELP=
LAUNCH_ON_WINDOWS_STARTUP=
 Zona 
OPEN_TORRENT_VIA_ZONA=
 .torrent 
OPEN_AFTER_INSTALLATION=
ADD_FIREWALL_EXCEPTION=
INSTALLER_RUNNING_ALREADY=
ONLINE_MUSIC=
PREPARE_TO_PLAY=
DOWNLOADING=
PREPARE_TO_DOWNLOAD=
ONLINE_VIDEO=
PREPARE_TO_WATCH=
#Rambler
RAMBLER_TITLE=
FULL_INSTALL_RECOMEND=
CUSTOM_SETTINGS=
APPLY_RAMBLER_HOME_PAGE=
APPLY_RAMBLER_SEARCH=
#MailRu
MAILRU_HOME_PAGE=
 Mail.Ru 
MAILRU_SEARCH=
@Mail.Ru 
MAILRU_INSTALL_GUARD=
 Guard@Mail.Ru
MAILRU_INSTALL_SPUTNIK_FF=
@Mail.Ru 
 FireFox
MAILRU_ADD_STICKY_TABS=
MAILRU_ADD_LINK_TASKBAR=
MAILRU_INSTALL_CHROME_EXTENSIONS=
 Chrome
VERSION_LESS_THAN_1016=
 Zona 
 1.0.1.6 
tEXtSoftware
Adobe ImageReadyq
pIDATx
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
tEXtSoftware
Adobe ImageReadyq
IIDATx
tEXtSoftware
Adobe ImageReadyq
%IDATx
tEXtSoftware
Adobe ImageReadyq
g0o/ymY
Y[|RS|g
ZA:!b~o
epp8Hc
g_Y.vO
\X-pNz
L}>bXX
-http://ns.adobe.com/xap/1.0/
<?xpacket begin="
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:89EFB0006D0511E29F3DA9CC2EF5B47B" xmpMM:DocumentID="xmp.did:89EFB0016D0511E29F3DA9CC2EF5B47B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:89EFAFFE6D0511E29F3DA9CC2EF5B47B" stRef:documentID="xmp.did:89EFAFFF6D0511E29F3DA9CC2EF5B47B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
$RCS4D
,0U:\T
cGt6LV"e9
xL"YTK"+
HvvDf1
uKhlyZ
!hwq`6Z
\[j/)u%
A/-I{2g
_p|xtc-
g@v''d)
s'&u4u'$LB
S$ddRD
>%KQ8y]z
/Bm Qf"I
B2~#x|
 AWh)"
Wfa,7,
'.#m"L
L$!LND[
V'oxqM
,Kpwem]
4]TVE'>
W!^z.O
 Ghb\4
a"L@f,I
tTw*8<n'
`EQN:	7
g	eZ]rF
kq%o`o
N	b!8yzd43
v+6 79
;npQ#(
Q`vKQLs(
7NUm<A
NXB3>V1
YPe4xd
=c1]w1
oS MKO
FOU=L3^
mfo`q^E
i<q6)*
2f	+tCK
M`B&&c
yXr9!@Lb
jkgn-n
d9*;	F
z]_)Ra6	
IK#_3?
USW0bN
2FnrnE
D44K72R
k	$UygBd
DS)@Na
FoSqc<{1
pp9P]5
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
	<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
		<application>
			<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>
			<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
		</application>
	</compatibility>
	<v3:trustInfo xmlns:v3="urn:schemas-microsoft-com:asm.v3">
		<v3:security>
			<v3:requestedPrivileges>
				<v3:requestedExecutionLevel level="asInvoker"></v3:requestedExecutionLevel>
			</v3:requestedPrivileges>
		</v3:security>
	</v3:trustInfo>
</assembly>P
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
Western Cape1
Durbanville1
Thawte1
Thawte Certification1
Thawte Timestamping CA0
121221000000Z
201230235959Z0^1
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
http://ocsp.thawte.com0
.http://crl.thawte.com/ThawteTimestampingCA.crl0
TimeStamp-2048-10
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1
Symantec Corporation1402
+Symantec Time Stamping Services Signer - G40
http://ts-ocsp.ws.symantec.com07
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
TimeStamp-2048-20
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
130215000000Z
140215235959Z0
Chelyabinsk oblast1
Chelyabinsk1
LLC Pentagon1>0<
5Digital ID Class 3 - Microsoft Software Validation v21
LLC Pentagon0
/http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0;
/http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
Washington1
Redmond1
Microsoft Corporation1)0'
 Microsoft Code Verification Root0
110222192517Z
210222193517Z0
VeriSign, Inc.1
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
Dhttp://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
,N<jPl
3BH8Q:|8
VeriSign, Inc.1
VeriSign Trust Network1:08
1(c) 2006 VeriSign, Inc. - For authorized use only1E0C
<VeriSign Class 3 Public Primary Certification Authority - G50
100208000000Z
200207235959Z0
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA0
https://www.verisign.com/cps0*
https://www.verisign.com/rpa0
[0Y0W0U
	image/gif0!0
#http://logo.verisign.com/vslogo.gif04
#http://crl.verisign.com/pca3-g5.crl04
http://ocsp.verisign.com0
VeriSignMPKI-2-80
VeriSign, Inc.1
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)101.0,
%VeriSign Class 3 Code Signing 2010 CA
Symantec Corporation100.
'Symantec Time Stamping Services CA - G2
130327135333Z0#
{H	}f|r[