The RSA keys were extracted from the binary, and were presumably used for the SOCKS5 proxy.