XML is not good IDEA here, because you are not going to send/receive data belong app and an external resource, I thing a customized-format (encrypted) file, in a no visible path (temp, resources) would be nice.
also you would embed the info inside the execution file, but be careful about this, that would hurt your file.