MalScore
100/100
MalFamily
Ispy

orderoriginal.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 47/66 Related 2258
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 481.50 KB (493056 bytes)
Compile time: 2018-01-02 01:37:25
MD5: 60d1d55b9b5f7e75dd3941055771ebc2
SHA1: b13278812b60132956ee9196f35611b1e5f452be
SHA256: 3f6eaf0279975a2b9ed92a299a39a4b63b3fc6ff9dd09781913ba22eddc64c36
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-02-08 22:36:03
Last submission: 2018-02-08 22:36:03
Filename detected: - orderoriginal.exe (1)
URL file hosting
hXXp://yt.wozyzy.com/orderoriginal.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-02-04 05:48:19 [47/66] VirusTotal
PE Sections 3 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x3a3d4 238592 75c4db0cb6707d548f49fce681a06ede 18c082cc693a2239b5274c917326efc2773aabc7
.rsrc 0x3e000 0x3dc84 253440 55795f96c54b52eed10a6b3f81eb1c27 6b7f6c3d87a349b914be5b261d76169209eeb9ad
.reloc 0x7c000 0xc 512 ace6838498b03052e1426c3e2cf5a596 891b317b84922ae3f8cc81f38d808b086128b00a
PE Resources
Name Offset Size Language Sublanguage Data
RT_BITMAP 0x3e1f0 235254 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_ICON 0x7af38 1128 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x7b3a0 48 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x7b3d0 952 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_MANIFEST 0x7b974 784 LANG_ENGLISH SUBLANG_ENGLISH_US
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: (c) Darden Restaurants
Assembly Version: 8.17.9.0
InternalName: orderoriginal.exe
FileVersion: 17.15.7.6
CompanyName: Darden Restaurants Company
Comments: Darden Restaurants Arto
ProductName: Darden Restaurants Checker Arto
ProductVersion: 17.15.7.6
FileDescription: Darden Restaurants
Translation: 0x0000 0x04b0
OriginalFilename: orderoriginal.exe
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
17.15.7.6
URL(s)
http://www.w3.org/2001/XMLSchema-instance
String too long
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="asInvoker" uiAccess="false"/> </requestedPrivileges> </security> </trustInfo> </assembly> PA<?xml version="1.0" encoding="utf-8"?> <asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"> <requestedExecutionLevel level="requireAdministrator" uiAccess="false" /> </requestedPrivileges> </security> </trustInfo> <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> <application> </application> </compatibility> </asmv1:assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
 
(c) Darden Restaurants
VarFileInfo
Darden Restaurants Checker Arto
Comments
ProductName
InternalName
StringFileInfo
Translation
8.17.9.0
Assembly Version
17.15.7.6
FileVersion
VS_VERSION_INFO
orderoriginal.exe
000004b0
ProductVersion
FileDescription
OriginalFilename
LegalCopyright
CompanyName
Length
Darden Restaurants Arto
Darden Restaurants Company
Darden Restaurants
wFC
elv}
?N	L_'p
X%$||
6 "AE
fouj
K8}
7
Y;NU
ay-`0I
j(y)1}W
9bx
s,O"
.\(#
FS%d}#
&)
(N]D
DDPA
PNG
XohfI+
E0SU~
'q_L
+YFN-m
>5TD
~4SC
l$4D2$j
;pE
A5zy
?B}S
Ev
kb4m
`uGS
'5:X}[
u{Aeb
FK?[
j/'=
GetInstance
_*XHG/
L*<L
xpkoZR
>?;#Z
Z7C3
1FIpT
x]$>:
0OT
.)9a
<~c$
dv9, d!J
S)Q>
+^O%f
gMp6
|3`D
u!.Z
R^|{D
0<a
^:7UR
GY]iEg
}p
<L
Y%MW<I/m
TweL
}R1k{
zc| 9
`%0t
<lCW
ai,f
xUPPT
1j8K
IzW`
%Kbz
BiZ{
C`::eP
mVXz
x
yF
DgYM
~rye
+fi;
&2!8^
#	G:
2[N
T
Yo8kF\
A)MQ8Z
%gc++9
,N%"
}M5l;
"<FUy
q?,`
cB'F
_TS!p
L}N
k8lq
3%C@
h_)2
fzx"
K1lTpg
g_
%	jf
gN)q
N8Hx%
\*.FD
IYULn
|D}qR
goz9c
AB{P.,
XmP
2P?j<
Z|cg
x	A\
B/N>&
-Fbe
z	f>
^}?GJ
60x!R
Q}L@2
L/LJ
l)P'9Q
sZ^
J+vIA
pAyo5
3k2<
Uf<o
Pa>u
herv
\0k0
YZfk[
*/#Q
OJ^#
WU"U
lmBF$ Y4
C|="p
C%]?
A8PY(uC
J=$W
f5Y|uu4
`3%f
I$fb
K~r0
vO!L
T
9.
zkaVo
Y|	LH
;IS
x#.m
+tO<
5Sv
e^q
ybS>;
HNm^~
.a6n
L12;
MT{:C
Dg)?
}BP1
,@PJ
SCh
@?ie
%Si)<5
8d82
A9Sr)
TTRK
0?Wa
9C_Ym
dt&<
.*g
tsq9
2lY&6
N
XW
39@CQ
U!J
17
$Fd
9K5z
&dk4
iW?0
rooA
]M/c+]t$
iM
5@
5jW|j
kqjrGo
^CM.
c4HL
%:@uD
_+e1
Ewnu
k:'c
8%`1O
o8U
0Q@y
XT"#,
jwbK;|
^#Ea
IOqE8l
GjNn
F0|eq
Kj71
fTT^R<
8V
-
'ntp\?
!C..
AssemblyCompanyAttribute
b!2
%L*L
ISh}{%Z
6Tv3
6IF	]
NRW4
"9@m
##EB
;B	0
&ReBe'&]
)t^S2X
get_Computer
sM{a,# tO
X]`}
2x.
mY{O
~R_-
$T/&
_c`$
_,7[
9Zp
TrS,/]
S}Wg
UNEP
^	
';
F$IZ.
ya(]
kr
.u\
YhQS
4k|4y
[:Zj
WMg
K9x]
Cvt)
i
7
v7C>
1I&{A
n+wi
fhqPxjR5O
)ew>3Y
vu2:
9*'Djm
^30@
QB8Cb
]'
1
*?.IL
sy
JxN2q
*Z=P
IX{:
BOrk[}
ko?q
9W5)
cXa}
;8G`
VV[!Im
B-cX
3-hP(EvL
'}Rf
0Rp[
5,Zs>
h1<w
eQwgA
#?^q
ZOTG
QN/Jo7d
!'Bg
^("O
cP4'EY
l3xH_Q
{gHN&
get_Application
v,x%
%BWl
fyzx
LTo.IJ&
^CLN
-3>9C8
gF+EY
h:'-iHp7
F.&U
?N#C
/}%5^
UXFD
mR_
QU'U
_}KM
'4Z<
YN4;e&6
g^l
i
m%O;
UAR@
TLIq
h>{'$
3E7<
,+4
o}76
)\Lp\
fQ|&
YDJ{
pWxvr
@8$4Zq
iVg
@F`b	+
:_wK#
6GfjkA*
N_IG
`+.bl>
DSz*
C"I@
qx]M
#Blob
WMA_
9C|)
d]br
\6^J
<v[{
-u
:
GiZi
P<_^&
-t'C
1r5R]
B
#_
S7]{l
_b8{H
P[pmJ
0R\2
tl=W
3
e]d
]H}
N8*o
*#?X'
m_UserObjectProvider
Y/}3
bzm9FQ
m
/T
#a
A
bAO"
AssemblyFileVersionAttribute
/>=yk
gf|Y
Darden Restaurants Arto
s\o0
rXq@
;.7
pEv<l
`z-2
,G
l
K>I\
mVcQ
c|?l
ToByte
oD?B
[3kd
;(DX
p<4i]
bp[Q
L|{k
ElvM<
HelpKeywordAttribute
QL,H
iPt*7^
.Y\g_
}T|8
i $]
gBo]
Ek8m
rKVP<b]
P:Jv
`[~d
-m/g
;)~Ko
&*\
8:Kf
e9hu
LrUL !+
i
XD>Y
/r^M
r"NHtD/
}kvA
qMC*
gH:D
FgSH
;wQd
%^p>[o2
d'|X=]
WEmo
,(Rh
C_OL
]1m)
IRSt
-M
csB3t
Zn, V
q<8`
c}	xL
8z=%
tP@)
}2[;
c8av
gp`N
Djp	Rv
LateGet
S\!z!
ko,eV
f2.W
"XaM
`R
N
/[v.=2,J
R|+:K
='X
AYW\KH
DA a|
5@|A
fh~
r41+
20KD
-cl(
gZ$R
Kf$y
%K
+
ToString
JdZi
TPM-
>c_
i*h~
{
bC#T
't~&B
Yo)B
` ]o
[HMUo
PvR
v}Z&f?
pd1
2)ag
:.w5{
GLe^
7AU>
xi
S
&z
?bee
TOy_qI|n
nifp
q~]jr
a,#a
ziR/4
-~!
SoJ>
%-m+@
NKc
d0	w-[O
StandardModuleAttribute
*mGR
}kR8
S*@LA
<<Bx
+1X!tl
5d7/
JLM5
:h P
yzMz
RZ{<
OqCV
Sy4U3
VY\4];
'P7])
w%s_A
pvcn
~Rik
n6S/
g1s4
,[rWh
MBjo
GetString
?@aa
&	A|
+8Am{
9K(q
:%
5
hZ%
P[||()
L*P4
4 M._
7c_x
!Z>Iz5
4/[
'
bvTyK_
4r`<
.lr4:s
'		9
jVSI
=a#\Z
=!Wu
$HA
|<GI
;
k:
o0)
oQ&E
yz_@8B
_:	)
rFG5
f$tA1
z`|jc
System.Reflection
>F*j5
4System.Web.Services.Protocols.SoapHttpClientProtocol
C_,
]qSN
:V7v.
GUh B4
Ld{Z
-$
Kn
!<`K
_9s!
=+Wv
BV
J[CV<8
@!I{
S2nj
j3moBkG
EuT/
D}4cA
&-jf
7
*!
O}cx
i]b6
9Hd-
$$NV
A4IX
p{2
d]aE
)bu"
ALKJ
cC`A
f.iR
MO28
E%\|1|4
Q&?h;+
{M3:
lPpU{
&V;A
dVwtG(&R<|DY
H A
1_j]
!ak6q.Z
VML]
KJ\
/B-5&
+Lu8
%sN
W#7V^_
1"8h~
+Xn*
'cbg
yZ;&Y
Yd<Jt3
?Z'>
(,!'4V#
RuntimeTypeHandle
XvVL
ZM	f
=h}5(
SV%/
>s"h
]en;X
Zn1_[
1AX
=VVG
r ]'
TUZ8
|D+
wmOc
lc=x
_1?P
Hec_
kv.)
yEp
`.rsrc
^{8G
9wiCj
HuI
h]D<
~368
Bk>z
ce7=
Mrr
a}lrs
CAqB$
a";Ai
&o"Z06
i:+l
8t
Y>; 4wG
JRD/oev
WMPE
NmZb_
Q_Qzti
H{:j9
zVW,\t2|L
l^
lgTk3
$Qz@
dZv~
.ctor
BEj,
!'4k
jTLiaB#\|E5
Tc'jDl
jD,D,
lwbSR
$;a
h]r%
Jc~h
y}cZ
{MO0Bb'
l2ne
u8N
+F'9_8
W
F+[
6\eT
;W};
&,
"
"=CCO#
27{|0
E9Z@$
uc/
<]fqj
T	<i%
fmqf
tSd
X5r[S
2)da
_q )z
FC1vg
Computer
i19zG*
;C;=
5jx3h
y-hO[
Xmih
4bs_
,rJ47>
y!}o
!bAA
l[l\,

7HV*F
AwR)
799K
w:<*
get_User
Ed^r
yfuj
ohF+,
z} T
tTg$
-7_U36
dVmo
Ei8A
jOa&
-WQk
OT(
r^5RS
I9>>
8O*[={
FUsD
9&0;b
Ss|a
yq=@
25R
z1
L
8.-E
]XMY
{uW+
0KX`
~$=p
PY)zA|
ThreadSafeObjectProvider`1
W*>3R{
Q4)G
g9w0
JE'h
bcif
BmH
[(-(
"||n8
iD6s
96a v|:
(
D
l|&t
Z m*
!7dP
![KTV
KxHA^
D&CV
lM>7m
VPdS
A:7r
"(kA!U
,	~h
X\az
F_KG
k[Ov
y)r^w
oA1N
%DHi
^(6
6TJ6y
w|JO
C@
d
BtAK
93[Y
.!J~
v}2X
x5><
/`u
STAThreadAttribute
p7R
HzKX
npN8
1bebb^
:a28
]qB6
K(jP.P
\yGGu
cZ\_
~[N$
k/L~
$I|2x
`ua2
%1:t1
#m+B
^@T>
Y}*+
8nI,
"SY,
:+p:,
{9t}
9=Wrq
:llE
3N"w
vyeT^
?3?~
aD?Eu
q2"Wr
?9_7
2x|k
EqN8
v/LW
ARo=p
*-jj
A-"%
nT4v~2
&>\q
~D*OX
g3!M
qUB<q
{<T6
DkNX
:iDH
O80X
!IQw
BK5r
4::w1
qiMW
}hsq
>NeY9L8
0^1U
hAV1
b;k1
\<0K
S;ea
fAKN
c?Vy
`2M3
q4!;
!^PEG
+j)%
N^W!
tAn5
3EqP#
Czn?
OWZC
MyWebServices
<}fAV
zD3
j>;My
O\ay
|Lv3
MORd+I
gbX@1
AEK=
+|\EI
M1(
<~q
J~$jN
Hh8_
d)Kz
C
&QC0
w"@E
`8	8
5~V!~
KqDZ
3za<j
Nv |!
t=*Z
/a`I
Urw1N
>s,+
9W
z&
IHDR
SR#[
Cs*G
f1lsU*
FcZkH
`3fU?
c3$C
bSc)6
U+q
J5_7S
Y	[x
&S"+
Y\R/
jw}Y
\j8vd
-jj0
nM95
L@A4
PPt$
'	;V
E=m"3
3'ZGO
2'3&
OLdR
(Z,&
OU3z0G
gMf]g
R4l~
h]C
w)S*
rH9^(,
Application
=l'454!
Q[WaV
.W1r
>QdS+
da,~
3DB!
4D ZZw
C{5v
AfJ'QKR
Oi f
4~6
GF0t
IQAHXkp
6zvP
Y$2/@
&T}]
P$'`
m	[L8^
&a1e
p"wkc
u=
E
YWew
JY&_
gO99u
:q2A
EMm
7KU
CreateInstance
?RBQ|
}8yh
U~b6
BnYu
UNYNz~
<83U
2owG
|+*x
MWjp
-^|}
.Exe
#Strings
og"^x
n`BU
tV>5
HyjPO
wXfj
~aV(
K%b
UTG'
|$1t
y.ne#
[q3&"
I;"5
Qi{
ebpSI]
S
P
$Xst
![R*
F\IFI
k9>;)
38'B
PsIZ
^UH4+d
j8-w
6vd?
9oZxx
*lM#
2YvB
smR4
Z|=z)
l7=v
JL*[w
6j|FZ
5,P<
^k7L
03?c
7Pm5
@6Qv
%y64
}vB5
jdi,
F5WS
67-5
N+Ii
JVha
3]f
CF{>
:Dg
l*H1b
W|/u
#'TzZ
K{wo
hU%!
U0#*
mhd9
'o%
skBr
yxvb
37oPZ
ZF9(
T&>aF
e4YNzW
f9aW
4NO6
$Vo]
xJ^L
lN(
Q0@=
x.~LTF
eF,
System.Diagnostics
:-k
@DIl
'N9
f,%W
OrQ
O+
T
PMX;
;dv
'opt[
!MI8
U`od
tnv
9iF<
8QXd
lA
q
R#+D
.>_p
bC8q
4]0]
c$IO
ThreadStaticAttribute
3W$
5
h@)KZ
V.>XFc
HJ9C5w
AssemblyDescriptionAttribute
C(/1
^vFey
:^7f
#9O@p
sp>&
NE<
gesC(
d5J
Y'0x
o%tP
orderoriginal.exe
::%,
eYM-
TDFh
8i:lw
`	s\I
h
[Z QI
"c
l
|1u[
hWnY
j"|I
!"S}
Fbwaxr
=wZ3
NcY9
d5>1p
oaSK.
5-!c
[WYq6
p`YZ
S9_U
Mt^6
M4TLX$
J7F#
GetType
K[F0
utAy#
a")m
FY}Wc)
wv	F
~O%8t0
w~<U
[h!lD
h*?rp~
DSX
t-
RidU
d*}W
$=pi
3>c#
^DUO
/d)U
WnXg
J8gR
Zi>N
/EoAD
I6P#
= @f
j)j{
k :{
guz(}5
v"pl
e\p;%S
ef^|0T&q%
-]b<S
}v5&
Y	7_
n!0U
_CorExeMain
=TQmZ}
:+@2
,H^%{r
AssemblyProductAttribute
$av|
~I:a
sk
JcR
,J"S
A@ajb
/`xk
N{fo
Xv
w*v>^
p_Ts}(m
zX,lG0c
6<H)
H)03
;_Qu
@V8!
vz	u9
u!?p_
GL"V
8DN%-8
el:&:Jq
Xu1&
|4a+.
v/y)
exV*1d
9sS.
Jq6
yYYT
;Z-l(H
\%51y
8ihR}
%~a0
r
	V
Q }N
Wh*o
f>-
ZZ:
=
x
}C2w<
lGkgmC
;	+u
z{7R
`3L
A^}-
Oy
@)KM
OSX9
+lt<V
L!a@
]3i!
f2U81
`M|#W
u)JY
<r^|}q
xlk+t
6{l\
iYT|
n;i
WwLs9`Q
;oo/
}%r<
$'=n
BrnZ
">0u;
)6py
]y?"
)-/~
(b(
System.ComponentModel.Design
r.Sr
IKfN
Kr#\:
zZPl
sCJ,
6@*0
!*}g
nU.N
YD.inx
q8|e
FWLU
tE"8S
*xg?
Kj)1F
7/|a=
8
T<^t
wFt?
7M
C(n
Y$&"c7
Zo	yE
/;
KxQ{
;{qz
pd1k
j,.BR
"@n$
+k[SL
eEg/W
,l0]
J4/5
|>pzRK
zdy;
gJ1dH
c5n$
Iy,U
{hCM
Q~.t
:|P"
3Q@M_
A fIj
+	y}
|y4`
~8n#
: NH
zzY23
xdz}
H0}`h
pWYq
=7Y[4m
5dLf
COO`
M|OE
QVtc
%Lix
2/]q(;!
Ac3~
P(rm
m]l+
T.wkD
e7F@w
*\H
(
..&U
Iz[<
i$1R
0*;G
qd4c
&|;`
HF?q
Xv^m
4Q"
HZ8=O
.!EpT
Y-n8
,QE@
(j m
$\ {(
ik}$c
\@cW
4e_R'
`R(	4vf
Y[s>
oQ{J&
n.]
4J[{
?VI%H
@s-
\	h(%V
r<.t
OS|W
1P~s/
w;!q
Qzfv
1r
So=)1
Darden Restaurants Checker Arto
7#\c
+{eu
U9_r
.cW@
ehb4
53|4
o\qcq
|V1L,~
|AoJ
yN0J
nu4JQB
$!K$
6}47]
NX5F
} V
i|2r?
*}kOnI
9$4m$
K9$4
MME&$
s0}.
)7??v
bg8
U
'
	&
R[z|]I4
zA5i
rO4s&
jjaj
&l'=
oG+T+
\1-#b>
Nid0
sl*5
LVOY
][q,
?\sl
?}
^
gC<B
i"[.(vz
b\9_
`0l#"
h7G&=)
1!2
Qb;l}
yg-9
cA]Z

dg
System.CodeDom.Compiler
xP@
>*HTP
~	&O
Q]k@
]MS*
UCaA
c\t'
x|_R
F)7n3
n5d
~n}B
M!LW
\Hal
Q XJ
jt"M
9_K&"
(!qg
v|nJ
r
'2
+L"^
ehtM4w6
?h-#b
+XF)v
XV5epd
;FA-X
S6S_
0r)	K
c"hd
&u	fy/
z}e:(
:z%%
pP"
V~(d
!cEXC!
}1,F
-Led0g
lyMQ
;6y +
5KK"
\_&T
s;E%
(d,g
aO
Q
W9\-5
u #hB
B9-x
Dwte
3hRP
@SaT
({'Q
+?x:=3HUf
0ShE
5<OU
%Lt6
ng
b2U_R
E/:"
Pu(Z
X4A6
'*w:
Ou|<x
&c	Z
,IQT
Equals
:h]
Si 0q
`SpD
UInt32
%mILd
Sg?o
cee
BT|
~<v
V:3Y
{5)f
NC=Y
Qrz}
$Epv
V(eA
BI4_=Qg
^&qS
k89+
;Lew
PBN4>
yo/iY
@jqS
@4?F-
Zm#:
ke_-
n$:0
##GI3>
.V|T
'PH8
eN(
-/XO
WXS$
lu~G
-FTo
m'IdiDs@-;8
FTUc
'32!2jTf
RPu%
k
oS
o
5\
6J/x
SUt+
7~QQ
b?TX
}LKh
Eo@'
s*7X
|:9|
EsCo
6n+
+UD@
]t,
"+E(9
Ai,%
Uud2
D@yJ
eb86
TivKp
*eT(
YI3~
m@S
DebuggerHiddenAttribute
$\&
.Lre
]Xk8
Szk\D
O$1r
EwE$_
M2M'
)yHVF
zyn?
+An4]
vt`#
#FT
A?!HQ_
~
g_m
yf)n
$
&R-j
01uL
1gqt
AssemblyTitleAttribute
7beE
\fv6
=
{C
b_jS
W@{Bf
j!=<
d]'J^
&cd[
7K0q
foD*.
^X7fE
hrfM
^fR'9p
g:Bl
66
?
%;\vB
&k"P
Wd\H
;XA~Q
wF=a
E^i#
'r8;
N+"^
Jl_nVf
wBgN
5dy$
H|[(\
;2&wZ:ER
\X;r
+0H
,r?ESIp
tZ].
F/S	"
	H`
{W<g
;Q O
R~Rw
"le%
S-9Y
jk%Y
]J(m
f~a]
x[z:
g\oa
gE g:
JJ$4m
<	-o
X)d4
t\o/
$92EA
)vBC
5Kq
@v&k[
h09tl
dT4,p
IDATx^
9;r1
5Q!xnXY+Y
X#1b
?]4O
4@wV
Data
.hZU
ON&x
Z}dp
j3nD9?{
_+@VAR.hc
*v
$
"-D=
U	8vl
I
@zMB
$
#KKj
aIn`
I7&)
:lVc
d~]My
OoW.
P$!
Od`n
C!Ot+
Sq3$K
|T]Qk&"
_~y
CAV.
20`W
0T7R
(|Q;
`a$KVi
T#1,
V"GPi)
pHYs
OB,O
J=aL
+}BH%D
_Pn74
W`-{
`~MM`
Int32
EB+
>V*&
mscoree.dll
{`
(
k"Qd
NyB~
)`%I
s{D0
~l~%
eRuog
nebS
Main
<Z

;"fG
U^/~q;J
i2[Y.
>DQ5
[zfa]
LT~f
~rls
uH,M
pf~_
~n%v
=/lP
YRJ
An^7h
A+
]4nZk
^D&oN
;sK_\9tF
W/BDsR
j,+,
v4.0.30319
_[)hE
hXVe
(
%B66
{7.y
X/,D
;~)G
-HAWP
Wffg
*;QT9o
bIC<
iw	(
a-$;
F,Z(!{
ModObject
mXG>
S7=[
3i#[P
`OIqB8
8P&
joHR
xN`r
/>y?d
9H%`n
6

w
On(u
Zt^d
w)y"
}\|c2:9:
|W;J
7l[}
9cWV
sE6lj&
xqtD
qd7L
;s1`
DJV0EQ
``
@uB
4vh*
@.reloc
q~%s
eBJq
zC8-
&nGh
5Wf|N
lbz;
=)U3
@93
SO`{
j
s(
HK$w
ZN7yv
3J%9
X)Qx
2M7`_
ZJ#;
`ZJ[
pb!U
]c]1
SOR#U
Byte
EOW:
G9U
Xh^!H?&
[<Pv
Ch:/
\lh^5
=Ov[
t_[t
?;E
/
c|AwK
pbKF:
R,2at
WAEO
9Z<ow
gKt;
QzaqN
k'E6
L@6V
<g 5
f3
FT<IS
R97+
Wk$l
T	{G*
7cN+Ki
p"+b
`bq
N2gN0
sRB\0
G#d:
S][N
DPJi\8
D[:aiU
qm`=
Darden Restaurants
Fzcl
0oc&
Ego=
:$5G
BjMwB
a/N~
2r{D
Dqe4
w49
*GdQ]
HI&1
p"x\
HA.5s|
<d\?z
WgLW1
Ovt3
-L9
Y
T)=m+n
p;E_
Z>w7[
FGU>
MyApplication
kz=<
Z7G
cE)j[p
KGd
.text
`x).
yx
8RB(
_qJG
L!:-x
%JZ:F
z[Iq$B6
k$y)
7gJWl
=^St
W'C\n
M#r
l26
0B?Y
Qb
|Sq]M
O5SEE
{)0Q
kA4-
L	x%R
7-,hZ
Bc^{k<	S
&tRWE
Fx`jR
g)C
Z@I+7
j
XUHa
AV;F
V.5
[']#
LUvw
J.R*k~d
3xW}
(Ntp?;&
DxK#
7oH
flcI
E3"O`4BL
~@'7
V:Y~
G~sHk>
.P'*
.sZ
/
[.}0
mkxK
<'JAg
C/n.
"l+$
;eY1
<UyK
<wuPL9
L'[v
Wb'd
.uqa
wjzK%
&4G(K
Ir~yF(
vIwfF
RuntimeCompatibilityAttribute
'X5_
p5/4	:
o5Px
9m
}LZ
^993
v<nE
Utgv
-ABV
U'Q*
?8sfB}
B75
,0Ul
lVCFZ_
5*86
6-9\I
CHIw
7PgB!4
N`&J
2
oJv)g=-
F
>/Q
!Uh.
H$Eb&
YA{\
$jfeV
m7:C
N=P)=
'BM
E=f 
7
2J{I
i}Df
FNwo
H8>R^
>a`^n+
|C_l
%%f
phx=
?wr
U)]U
QpQA
X:sO
!2QN	b
(;|J
N8BqV
I/]R
[":
y
yS
BmZj
:eF,
5(yO
l9%|9
McE9
Zr3y
N7y
s}UD
EFX`
4>XP
0.kew
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
daty3
<X>X[
8D!
D1/3
j]Q(
_6,F
3gSw
HU.4B
SBg
-ScT
]<-1T
{N,r
i4Z)
0R:>
/P/l?V
P@,/
!q9;{L
V`8|
.$\}3j
H^%^L
%VSE
lx]U
OC}
*sB.
n],A
;<<
`=k_
q.J;
MnF`
Z	u
IxOL
`{Xc
JKO)
Iw8O
lSO]
rsJ
6^n ({')qF
=E<9
OLY j
?zmw
jBW
M7(VFGn})
`<6=i$
$vf'kn(
LQ\Q
Qst?
Bh5T^'
n ~_W
V3lN
ZU[{**
4!_2
g.8)
RCKa
L\*X
\#eD}YE
fjl;q+'<
JEGf
a))@
^U1=!
k"

%pGIv
e9>V
nh-1<E
46tr
rJ~=
>
gL
C=M`}
*;s<tIP
D39y
t/1~
N2q\
p+@hQR
@ph'_
.k.6
^vr\
ia/&i
IkKi
N37zR
2oc2u
wjS]
><3%
ke5
R5b p
_E5?>r
PMSa
KMe
pQFD
4:Jf^Q{
}w|#
f.M=}>z
6}A~
^$CaM
Fhf?g
MfHf.hk
"M&u
E[ &
c8#(
>~:<
pv:
GLx^H1
\z	;1
$tca
Of\5
`w?
CU0F
h4w,R+r$
pw1=
V6Y<
iG+"
5>Y`R
(741
|5%
pnXn
:T4O
g
o5
H	 7!
bGdF
WZWF/J
(996cAp<
$hL[
f7H
rPj3
k]+ox1'
t&Ba
BH7~
OP.`
%[7u
'k\`b
sb\w
P.Fe
5k-ecs
6#Rv2
?yWFz
rUO)
ZAkl
HA!}2
::CF
-|vS
tCK)@
$~=s
h	EV
zEa%
wKc7
1FG&
+zw
!,,
C,dT#
?ObJ
sw /
olo7
m
z0
%=}G
9 xP
^5*yK4K
J+n
; k&
MyGroupCollectionAttribute
hL4<
6SrI
L:
NWhw>D oq
U\i[
5E@|*M
1]CK
-*$q8
Zj_*
-1hd&
R"`N<m
5c{,
)RhB
_lTq
nKd\?ND
O~iYHX
5ZE
br5vK
^[u
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
PA<?xml version="1.0" encoding="utf-8"?>
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
               <requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
      </requestedPrivileges>
    </security>
  </trustInfo>

  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
    <application>
  
    </application>
  </compatibility>

</asmv1:assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
;pR8
_+yG
&s&8
K}X6
GQ@T:j
V,B.?
R[4D
kUj&s
!e0y
~GF*6
J'|d
Z/,!HR
gM$B
\;/PD
!|T9
s6tP4e
~G&G.9
x`,r
W88N
qL~@
1G!I
AssemblyCopyrightAttribute
VV+5
A dV
@FN9
I}@*
{8?-;
Il{
w>2R
L>9
<
VveryS
RI:{AO[
oo>h:Ib+
}?$
qpgGuZ
z9~y
ZKPT
^eZ\
DBsZ
.:5idC|
gC?I
q+RQX
f72
q2YI
`e l
D&`XPb
MyComputer
j]h&@b
Operators
(
tR
+wTR
BNl6Itj
&SK
HeP
u++^zY
]=8'
lk "m
]9=h
F(q=
6o{\
|f8c
Pc"7y
M#~
IIs)(
(&`;
2'N@
a_])
H`v50EB#p
(d??
pj*h
Type
P@b4
"zB:
lH
X
bo/t
ccx[
hLws|
_#F@
cS!a
}-
pP
e9rg
OenO
?&vFs
n-(/
;)=$
)m5("
S/3W
T"wh
Y	i(n
be>
Y1cll
>/^_x
LQn@
OE_}
"A-B
hB$Og
bTw
=U+7
:I84
jV~J
6?;E
m	
E
_zY/8
Y6-o
q@2{b
,D51
kv#LY=
d!92
w[W<.i
~Eec
+{r
u*vA
|=mS
eI?j
rWpa
>
hQ
ZM^~
E}TB
|OPd
^$msZp
rn`ds[
HC]P
lkn_*
=(uBe
L'k?C
ToUInteger
O1d@
o!RP
?$4n
-8k^
`5OLL
VuZRw5aH
7rM3p
|
}W
B"2"
Q@	^
cMY7
l6}5
=kwj}
cdBX
gAMA
+B0Vf
3F$=}
b9\y
x}*9
7}KL
u|;
H*ra
Nz|(*
kumZ
3^:KF
\2>9D
{45}
IDAT5j&|_
YTP)6
Mf8ZGC#%
W8MT5
,/~T!
niX7
4A}[
.i!~
u&
F%*
.cctor
Cmw`q
)	W,
:3	r
tX7X
yT-v3J
mscorlib
=If"
F"%.`
Q&i+xqXd
WebServices
%arr
^x>@^%sa
_k~S
Iq{uVUdu
l6x
fY(y
csr#
|Y0~X
Gg@
}oIe
o);
UuL`
!KJzT
GetObjectValue
]Bl*
f-Un~
AndObject
T{X&Z
c
YK
+hZoA
r>V/
ilM?
j<[5
rtP3g
rNe
s%z/c
NQzch
7qjG
^}O/T
',1[
$5t$W9'v	mm
{&`;
)Be@
b3F{
u~zmM
@i"0
VyS=h
$r@7
WW3J
l[Mw
l=Rk8j
CupA4
?WFL.
S$V
L.y
X.B
va3z
#`?{
WC9{ZN
hNN1
x-K_
w{f
yS/
KTl?
l_zB/
vD_Fc
;o?hk
]6;$
'rYI
k'5:
:QqO
>0\^}
['?`
4xhq\s
|Jen
WrapNonExceptionThrows
UCnX|
1*yN
z\Y>A
lRJ\
C8J
1y
F|;.
)'9E
i.
O&
]_|a
ja#5
1e,c
f{XOJBT
'.F?8
Z>{
Tt@V
}p%,j
<n1
C@4`h+
[oa7
6BI
1kQlt
j@[B
O&-
Z.(
_
"s{
1ei]
System.Runtime.CompilerServices
+gc
T^;V
!{_4
{TayJ
^i
O
GQ]I
\Z"&
vDFA,
2o3za\
vPr
v
'sAV
@=#<
;T8
=8yq
)qt:
G0pM
=HvGa
/
;-
S1|1
mor@
i(Pd
CD}48X
53Xp
q
UY
$qeq
u
QU
d+r#l
~:4
Iz@;
Am&o
REhb^}@6N
!9
hX
$y\;=T
#3B$1
MNQ
`0#cr
~@75
tW	su%
hrtGY,
]QMNA
H_L7?
Ay0~
3p/^Zr
pNzjM
|pY}
QQ45{
S5eg=;
^.]
}z/K
OMk.1
6]N:w
9k.S
gZ9m3
%B1'
`3	BR
W*L
G9UK78
h3!
#-e
n@-t
_%5;
xs.E
x0=
Darden Restaurants Company
y*w
p!o+,
6FQE^
^L_%
j5049
1DIr;
I1oY X
n 'yL]
4-w(
(=lo
LmV!S
9){v
H^f,
CX=%
WR8}
k2.-p
Duy"
"eks
;sD*Ou(
Tt8p
mch@-H
[;M
-s0"m
g8 M
GLs:T
}0jg
'O!x%
ChF
b*:'
PV2`
4@OK
i9Y"S
nk;{KB
rKBx>
"!?U
US'~
GJ
<
7WUN
J2Y
DY;
+S9_
-MQNV
44XX
Xa.hDx
lud_
ShIU
+~Y*
SCCD
8(~tm
sFV.
Px4WA
]F+B
wq&
G4HW
Ol\y?
1<5U
XoXo2
D-U:
PeKiy
nO8F
Stz{}
c*C1;O
!This program cannot be run in DOS mode.

$
PE~H
BQkidQ
{9MH
o:T|mC
N
_J
GrRM
$!,O
x%%|
j=
,P)
a@mK
D<Q
YYw
0k7A
O
L
5-cT
umQR
F9@
H
GetHashCode
4WK]5
6gQ1
RqQt
ho
D`
pH{B
-vH}q
xBkJ
Z
aT
%4k>_
6)?H^
t&hK
tf1Im
5*B|S
oc>`
vCzt
meu>z9k?:
<&wI
el6knCQ
D2l4qIS
dY.l=
V)#d
P?xZ
z`{z
M88e
`	aZ
%j~.
lLPK&
OcOpH
m?.r
vEVY*
get_GetInstance
&Pl[
(PgaZe
B\q
XZA
CompareObjectEqual
#GUID
}?@}
mD8X-=>
(-6,
=F^H
@AEFj3
kve*
VHmt8
{S-AZ
t0U
Ll`	f
.FRJ}
^XB`C
iqJ{
jwC
>d,!
,mEGX@
fJHo
j]E
^*$
BSJB
/`)T
ZQ|<
Pukt
c/37{
*Ke)p
G!2u9+
My.User
\LkK
*('
SJ&e
40&H
X_%fy
6f~=
!IWN
Gm!eL
^71S
"e$03eD
;zbu
.3WD
N-:w
L'#E
xQO
=Vru
u&p^
4^:4
LKuvZ
:E/3&
`MX$d
j4.4"
/&{H
|{]b~3
c"xF>
Zg8.
g{o^
'mbC
I-).p
Q><7n
kruT
zw#oy
bBHv
^vdF
FhFB
i@wW
{*ym
=yck
tGKf
r%
>ipp
}q(!RMyVO"
m.,x
K3B#
&M9V7
2 VV=/
*}iO
;q8_{$9I
EJ!}
JMw"
m~"qk
3G>!
iJ(
ptV3
/*;t
BZ"&<
x"?{
|^@d
;.wS`
|CE
Wk:
7
Vvvz
hX
*bL2C
My.WebServices
KM77
MtzKD
zelQ
v5rQ
;P.S
2@_ey+
mWrA
u4t2C
lZ]Nc
=eTf
QX>
^X82
t_;%S
{4EK
g#x8
Dt2)
!Yq?7
!3YKru
Iv|b
,)Sa
4dI|
]KeP
"#	H
:6qJ
n95a
*W|w
<T#+
W6+N;y
o
@(
^P8[
)sz(E%
rO82
mmBu^a
>-gi
f)=/j>B
`a2C
RlX&S
]:~
|Se#@
8E,;
bP*`.
'vB$
.%b
}g[A
oAkd
+q%R
!y&v
M4-+;&
%/K4
0Jib
Fzr/O
c@[>
="
D
oXPy
(F,e
lMvu7
@h\@
]`8+[
(%&;
cqjR
-5Es)
'!nk3`Z(Yr
^;Fj5u
QhZ<e
1T<\
KWD!|
({
SH$(
];$S
=T_*
+y'=
7zvP
}WZ<
m_ComputerObjectProvider
S}iiKT
C`4Y]mQ
)sz!M
Tef]
~9{BZ
{lV#
,>g{
~pA6
g'[+=
.dFL
rw3Ni
g4Ui
Nu`C
abB6
9^,i
O2NK
b$[ca
7`o
pZA
g
K-
B{
j
}vBa
s}'b
e#WU
di8^
N6dX
}x_P
]X<'
GHwg
.#u, E
xxy
^Nl)
H1lbkn7W
z)rT#
L:XC
u]2~
CompilationRelaxationsAttribute
NzE?b/
get_WebServices
evL"
H6tt
_(j.
u0x\z
H	m'
fq[
Cwlx
T>4m
:>0E
-.v!
RAt4
0wzP6
.q/P]
nuIy
pZ;c
-Ge"
~h^w
AQP;
yF%Eo%l
U:v
g]5s
%<j/
!u8
&>
*
xzu[
GA/j
ea5}
=+4?
YlSk
-Jsf
"laf
"7QF
@s?P
LffC
IDATl
-ft*
-Q;#q
WoNy
e }.q
QOq{kQ
UG)}
#w{eBg
K!Q
[y z
Hzqx
30j0s
?wM=
*Ui~
frPX
mbJi
gBw<
F9c1
W6cmn]
$#Vq
[^Ir
6PZ;
60'j
zC__Qd
UHZ|
PSNyh
System
yx\-
N=KxPR
X5@J`
OX]k
<+2zJ
y69
HideModuleNameAttribute
l	2
,cXm
orderoriginal
Sb(W
$rFh
IEND
M	yW
.1.f
Microsoft.VisualBasic
zyzPeg
6+wI
_@ef^
c*
E
82#M
gvm
1b'
^N	U
+`	,
u{{
z7PM
7Y}l
S%$.
$#6jT
BO*^
2ff]
K\j6
hrIb!
xvc
~&V(
^7w
^
U0
\z=Q
&#&(
( 2V@FC
u3-
}(.xr
8oB<
-z(DWm
5vrRb/
\B:)+=
8vCK
6m	$I
:[`6
_0r7
kVb;
oqgv
F;(q
Ee:l
Y
>H]
UrI_
|6$rk
2u7
*=X#
~\I`
f6rc
o$
CQI'
(|I(
Vt,b:
-2E
+][B
}NgP
--ak
@h\a
3c)i
=r4t6
Concat
WeO|
]OY
 A
CR U
LRR
O
&&[t
0M:E
wV^Y
u"J9
ZEM
(cHw
`?vV
<pAHZU
)Fep.
V^1s
V> a
PeCj
Hc+W
?bF
D[#PY
~#jD
0}]o#
vpP\(
@A>X
dX#W
{T0d
k~P%8m
|w m5
1>pSY
kJ;TD
L/DU
ebiY
`gC~
bHa<
LS@P
vLBg
CompilerGeneratedAttribute
g%xg:
{wKl
_9x}
#6P72
+:m|
e2|N
Q
;e
N	?Vj
e.EC
CEh_,
tFn|K
Ze`|
m85@
jV+vu
p	W3@yk
s0My
+ALcw
oDh5
MfUKz
XaW*
-WTo
Omym:
USmq
a=*%
H(#/
\^Z$"<
0-]d
|rU8
zOx>
WUc"
=dD)
WXmQ
w1-5
Ocdm
aZ8K
@b"i
AWA;
3H+E
Y8jR
0tf
v_"!
iA"w
S.
0
m b(-\
rwRL
0S6Eq
T?;p
H(5
yYuI
u\\\
1x:
mE@f
~kdp
h$Ia
9man
=2?i'	4
8$<6
v`xv\
MyTemplate
#U x
k5&^W
?Ju	
`
bmYf
s] L
[x)I*
D @]_"
"i8,
inJC
&io89!
822l
dw9?N
Ah#}
~z+
XO(Q
[|f
Ai)%
+K[,
T.Cs
>Dl9#
=^:u
${}C
[xQ
9XE%oAj
x05
e6rE9
62rx
2aLC
/
{m
IsjG
}vO
.
j/p("
Mut3tq
V.${p+
~!GR`9
<ao$
>
6!
.9R1-
=W'$[E
FIN+;
y1L_
d5l.
G6-i
RQ>v;
n]Z<
+:0@*
ksW.
O	wx
P+EV
xf"!
]Qsb6
91/V
[>_a
Nt
5
<!x8
mZq>u
WwZ=bG
jCLN
$_2y
([AA
+p??
i2i'Q:
g3C/Nl
[9MEm
c{Jt
E_Lyp;r'q
8>g#
3Q:"B
p	at
6}0O
',@4
N$ql&
$6)$c
a]RrB
#O\J
jbO:
_b;@,
M~3L
o	J7H
iXs8k[
String
>k9=
pe(
77
hx
Mz(56
[TF
hb~y
s:>/
v)ak
:S+b
"$2m
NO?T0d
Create__Instance__
mWm=@
R^`9
LateIndexGet
'V'vO
^$6b
4;tC
|Igr
o-%L
sGW]#
AVq"
-r9C\
?inV
X"J#I
4{z?
XpP{
IN2?
o;Yv
KKmHH
@lGe
,([0
dYP.'
]P%ab
D0>7
n+t
pu3
Wn}B
Microsoft.VisualBasic.CompilerServices
Q.Ps(>
2#cR@
D.K{
lCL'x
44e\IG
r7@V
WcT
OrObject
/
pv<S
nWkJ	_
,Bn2
!)pS
p	4<
aZDO
[dR
1
Zodun
EditorBrowsableAttribute
Ws3>pA
Pb1
@YC`
P+Fc
-}h@
K]F34N
G>HF
<ykz
{L	gL
~2+{&
t'
W
yg+
$3:U
/B'7Sc3
k5V}
a)T3
F/uEg
2y~0
41LzE|(
$Wj$
User
+p;Q
?c
{G.0/*;p
[-|)
"UEI
6q$a"
KJ9o[
+,
.
S"IQ"-
Bt<u5
#Vvw
*5KY
1]>6
~m\6@{y
bo2>`>E
0s'2
p#T}
*v%,
R//I
$P`e
Yq6UF&
b>8-X
'YSf
9&Tq
.{h
iwzq
3y;
>jF,]
1m7=Iq_
2YOZ
bZ#;
}0pW
N@k)y
,XmP
86pz
._Xp
LF=IO
2De~
5U!qW[*
b=hc
9LS?
>2z5
+n=
;U
mv]~
BKHIIVALi
6YcJ)
vQ47
z`_t
NPYb
/`%<
_INF+7
?~HO
Dispose__Instance__
pV.1R6
1"bzcgSz
4d[b]
S-jLC
/RX%
O:#Y
H=KY
{s&-Q
:(o\v
M	9e
JVSQ
}(]~
qU]R
^KRX
.Ag
T#g0`c
Kh/T
Og .
r*3
H++J
sgJJ
B5M'
RuntimeHelpers
"g21Im
vq7?
&V`~YfF
AqXD
H@@;
a)	Jrv
(Xrsz
+rC)
_~0{
>pbF
17.15.7.6
yAft
m_AppObjectProvider
CQ.
{k8'
kvNo4
0>I
M'=
.{wg"
o1\=
D4PE:y
n-y)
_UVd
Bc(Z
4,A9
XI
N
i>7/
wU>Z
p',J
-}Q.
F
l1
|.mw
e|O9
pQ$SV
2sN3
{Q6c
SubtractObject
Object
\n%;Qo}
Owdb%
4
T6
1Kp
']m
mlU9
yKv">$
TejY
@x*{r
]p(
ComVisibleAttribute
n8
U
{P4~<
zYYz
"xm,
qrs
=-_GpEU
Q
dL
G{l7F;a
(`oe
x7$x
1L6:o
;B'#
JYaG
:\i|
mKV^?
OCM:k
Ikh-/
;r-N
"#e_cN]
N
6g
|\5CB
a-Y`
H)lJ
>+8-
LkIM0
%Xds<
9Jp)
S+-,
Pbr[uhS
>I@DLp>
^3a
@
ha0%')
8xgkH
vFP'
EditorBrowsableState
.Y
]
b+S99
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
(|AY
5M dm
ZUR
lJ-
{AAj
Fl1>
os.R
*<b)
h%gr
E\1
9~J~@F
*2ln.{
hCR@
ooD
:_N|
'V6k
x'ya
'CV.
@y#k
Q~6B
:gih
&.g#
V4p0
PoH
U@9M
C$ v
VFV
v>2q
Mo&nu
%>
4
zCyI
7KS-t4y
'X>j
&:D
Fxxoa
Q1J4
,m"sr_
Bh[A
`yi9
6XU}}
]jCN,
a-J
}Obx
J'k?
5"vc
2Iw
NNTJ
i7fe
5v/R
eK&4
oulz
T&Xu
sRGB
myLQ
U,z5
G~I{U
wx\m=v
?9y[
VsJM
rU\|
:LHG
aCF|
)T48
+O1+%
A "v
Q}!1
JB6{
XwD+
-jT^*
{IFx
ApplicationBase
GAl`"
DY}
jo-}
op}~
sH?Jj
d("t-o
v{"S
{:v/
SyUs
- mACsoJ
R5NO~
o
TRDW
Q{P)
0	LUVT
kvs=E
TR)
@+p,
..DC1
XJRD
rps
[l8U=
mDK!$d
asz9
lI@e
JN{+
r!D	m
cP$p
$}Qm
}f!Ho6J[
Zgb4
eOGW
LM@R
-5Bbw
9le(
E=g|
K\h4
(BEj
*	XB
s%M~
.`
-(*E
g qY~F
^
5"
Xkn(
7ph-7o~
|p"r
G4g5
AV.w
#Fqq
h"T
Z:$4Yb
8JZ
],-U
L}>`i2
Tu%!
W	aG
WIZo
07lY
1^i9
i@#k
vwt%8A
DwVx>
}M$^xq
9gM{dA
cb	Q_
,2p";6
rr"H
'uB*
Xgo
0r?$
/B~;
d6Q4
E
hCp
s| yV
:gSl
wJ#Hr
}\0c
huL~
|g
*
<!zr
)7~0
=@Xl
F q
My.Application
uqaz
FVnb
nmiZ
),A*-
9g*f
mSdS8l
V)Z	~n
@bnyOx8
PudR
g_o:
vFR:K
*T5NBf
4,% "q u
%(	Ah
2JL*U
>`K_
Iei(
ru('o+7
EP!(WX
^>Os
py&C
#h2b@_~N
-hr-
V0Yz
9:in
TSayW
Xb	(jG
17wI'
q~m\4`-.
|9c$
`Xh(/
uf3=
1N&U
vM3!'
]g]
7#
0`fP
aM#
8
eG
f+DU
hjU#o
N>JY
S"x
=|1r
XMno
|eN:
Ju{
ve1$
ZkR~
ZPf`
]
7W
S
2L1
KW^$
kt;~
wg8'
GuG1
J:y%
h&4Q
mN
Ux
;
g
TU	<;
Q5X\
69._
zjx.t
zV>z
@uCz
-/ad
bGIV
<\vHYU
H\4q
\}G1
4~7E
8V@p,
W%'Vx
3H?X
'B]X
d+i
]zy[Z
Bh=l`
+e,{
Conversions
{xqx
#9d;
v>-+
0<k>cn
We">&
9G#G1
C6Ge
EAFP
\69
.EW9
EoG$
!VDQS
tUaO
h4&XC
RyUFn
D\ 4
{b6z
JI*.
-E/U
m
QK
.6jp
Microsoft.VisualBasic.ApplicationServices
R5)Cng
J}IQ
k]-C
@RM\
Zdt#
M5LU
$SF
EIXlx
#MDV
C+Ff
S[n7
7glph
fPqD
Ue?([
YHFa
h>"OU
q97 z
'L}
])Xr
+_|lwP
2_ G
7I0GR[
nM<f
{mS0o
&QpU
Qu5nu
]o`u+
&P*Q
p_639=
HFn0
3JSS
|Z:>
`"w<?JPKyl7f
9eDcW
zmi9
C;e
GFON1
IDAT*I
&ww_
9/w@
t@R!
p]:
S2F
#Z_k~f
]+:KP
()p3
K>C%8
0
Zp#
FUlJc
RT	N
yqnDa
g=7@
HL\o
(Ia\
2<;F
/I[K~
g!2
K?roW
fW>O9{
EFB0
AddObject
b`)W
kEtO
J%3g
CompareObjectNotEqual
\@l]
My.Computer
bIt55f
&B
2 bSq3M
`Z{
tc47
Qx!9\0
P|/.)|
!5aU
[K!K)
n*UO
K&
&
9ACTgh
)rci
Mvx#
vh!~
H 56
k+0~
qQ>K
3,V
6?~
((\.
fYL^~
mw1|
a}g	a
get_Default
nxx~
s!)'
Ls|
Gwq69
jOj_
BZI#)
<:E>
jk,E
v^*X7
)Y
!CrI
[tG>)
-M"q
'Ei,
hl
!
NQKT0
WG	.
vX$^
'FCC
3}!qM
#:
_;2
7/T
KnW
G,6n:
yIm& L
h0'/
d?
<
nqco
/,&K
2wMn
"Zc!{!
9_Uq^
+9+k
Mg0<
VKi
/(B)
L19x
+)v=0
^/Dg
s {G
hoU
H'ExE'
GetTypeFromHandle
-0Api
R=-BM
9SlE
=O6
kK3&'
wkd
/mV#
#bkt[?
|NK/)
HGeg
dFQL
vss
D\YNP
fADG
sx!T
h9S
tUR$
Nw-r
pHa!
( AA+
FfU
W"
C2=)^j
instance
QXuk
IU7g
'S5{:
vV\~
P{xj
3TG]
yu)C
eBe]
Iauq!
YgH#
3rv%
[ V}
4'U.
!0Qd
;]"Ng|
Pep%
yubN7
x},`>b|
Eot?.
i`nZ=
Isz\w<
xJ'U
&?g
^46YU
p8Zz
akgL.Resources.resources
M@qG
.Bc(
2LR5
Hqan
cs3b
.OA
GoE.
t:0*m
="1C
4W(n+
xu{8
3k|sA
"0J
Ejkw
RX%I
<!=rI
ziql
~1ok
j,kU
WrrVZh
_ IA
PV(MeH)
h^K$
j	HA
System.Runtime.InteropServices
t0
a
W=R:
]9bm
D!QG
h/T4
[I)r
40V+
nk
CR7*
:%R9Gn
XR?H
!QoM
>/h"
_:5`
4`AQL
|Ml]
#'+3
__xT
1nA%
g"O5
O?y$
\I
+J$2
#BGcj
3}k1
AO0S~
mm<D
;gy2
z[S%
?P<~
"QoV
4YhbM
&)D5
2}Me
V)
\
'NiQ
YKWO
j=nk
~*e&
Rvdv
qkw>	9
FKv#X
Q[Xm
p$+B
X`v
PzvZ
qJz4`h
;'
t
NewLateBinding
I$v
i;1
PPZeV
+?o&]
-'ahp
Jms:<
T@
BH
oR&B
)`<z
_PN7D
N)
s"Y?m
LPQ]
{@:[$
{!..
o'T~
@; q
A*O4
R]"g
*[Ym
u;\4d
9\Ys
w&*F]
v,ASfa
FB7I
t[400
WUg[
]Lf:
!JQf
#->
`D:uRC
?wY
zpV@|{=
EV$*
aH~]
oS
B6
eMmB
TwQF
j?7q
,C(Ml
'rV!
i(2J
P[^3G
l)3fY
fl-Pi
LMj)
Qha]
''G+
]\{u
IY5]
`\F2
3#i
4JrJ'9
8"&@z
xfK/
`	@|
095:{
-!~X|
s)4uX
h/-^
kv:@
^/q+z
t5V#
-lc(
J(fk
#V,P
5wh=
)8wV
o232d
[\d9
iHb<[
IY5c
,^Y>
/<J]%
]UW5
oyz]
}
;d
7??h:"
zm>'
>n7"
Fs
7
M^@*h
tfBC
l2
k
,{0`
JW2i
lhCRH)
`B% f
K82v
uX.
B#U
Qx
f
`C$)<D
T<<V
FdJ
UPId
_q=B
a!OTF
T=Ck
'	SSG
N	FA
h
H
lHYz
Be*BS
L6UK
J	\;
<Module>
Iu&8M
B&S#
p'`vL3
Qz	tucCnj
7(D
_]hy
%:UkP\x
45R+
D7K&
GlL<
p'p6
8j{Hmg
y[58
@R{t2
'MJ;
?0	sbG
V-K
E
S9s(\
M
<T5
q(,3
q{<	(
7/0-
^Svg
JTH:
CUiZh
(Z"$
{)O:
p*C,
crmfAr
v,C`\
aU<-
Oc3K|
vkn
xhr8
E6q54
|(W
LTfb
&
vp|
d1_@&F
'uhJ
0Y
{
h[}$^
]1iK~w
Wv~`N{
}t
JcJ7
.)K=*
+8d
E_8z
97Ci
:$Cy
'56
\S.)x?
e\-w
W{ae
0"xEY
jVic
G138
"cJ}
O0\<%
dq{?M
\VCby
;>3b
ctxQ,
8O{l"
gj8k
|jn;{
T%^?
?HBT
ETG3
rFQ+
'ST{
|,n6G
~*k&-
($i'd
nlH<a
MSn1
Yk5l
0O`z;
h_L
o<
"V%d
CM?C
V`[\!
nYxd@y
X[>tz,
?/ 	?UI
xShs
U[ey
3h]rf
YP
Q&
P#O
%Y5t__
\[~*
P't)
~n)<	&
C0#y\
n_JC:0
2MQ*{
#_/"
z;MP
5*[v(
bj7Y
;kf
-bR2
y?~J
6GM,w
ToInteger
: 	}t
k?Lh
<0W
6!	T$]
JZtz
LO>W,
+\}k\w
-I-L
Ks#%
a.f
2J@H
)z-y>
(Q EN4
Gnt,
Z.V8c
xKfo
W6mr
-;w#Nz
pY3S*
~U
t
G}5Q
Uk>.	f
;Pf>
2}y(
7:_!c=
|(K
*
im>L
jo%
*"Z_d
Jhg4
mbj)D$
? :s%[m[ m2
System.Text
y\H	k
lR3R
Q8Ss
acK)
WjZK
SM^5
QI^c
2wTy
d:Ye<Z8~
Microsoft.VisualBasic.Devices
[5Lw
chp
v`:/OI
+^;/
o5{@t
uKvA
\mqj
?LHs
Encoding
PB7N
cx94
"&LQ
m_MyWebServicesObjectProvider
|I(|%`
DCO
_d<V
14.0.0.0
z$I8
(XNq
'Pz{
U=>/
`g9L.
fp3
9<za4/
a\$C
P?.^
ec\w
mQJXED:
QV\@
S5z<
I5pq
^c2J
cBK
>sKR
R#xx
Fd6U1*
5K3X
s!.
>>j61
TR9f
\System.Object[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA-iY
m>&<
`Ki_O
1VFQ[
:C c$e).4
9!g+
R)5<v7:
QU:=
D`4_
68f0
#Le
&\n{
H(BO`
]*=$p
uAqX
U@E3
1!+.m
x 4'
z
w7
WU3'
bq%z`
^?L^AD
{2 {
/e[AR
(!f3
hz`7{
System.ComponentModel
7(6$
}?=^
m_ThreadStaticValue
g",/
@p.
o
^12`
|wJx)
x.SG
MK2/
(c) Darden Restaurants
a=a0
l?;+\
HJl7g
`:1n
0:sXTe
Activator
+u<w
v[
K?.
@Gbt
"i]%C
< qt&
5<H<
lmNUG
ri(]>
;ATVT
ncOz
J]
(
E/YH
30PWo
R4W^
3xba$
Bf2^
A
Y)s0O'-Lzw
2COd
H_V	t
4Qc}
aE30
0`/
pP0F>
Av,:3
SOdH
"#G
(uwkJ]!
pUu
oj:W.
1M#i
rMuI
,.ud(;
vzC)"%
vF:H
MyProject
=pL
&4@
Z$BS*
"S86
vb4x
BgJo
B+\1
udmQo
osQ-(
@42%
a^&[
H|ap
\1(
x
u"g]
:J:F
dnYJ@
}+Pr+7
V(i{|
q^49
F{R.,
,Ke}
[)b
iyv3
KuWw+
C7^iH
i4rI
yW@
)&2o
System.Drawing.Bitmap
n9&>f53
R'5:b
0_\6
MU/WS
W_ym3
_%d&&B
Jj] QK
7FB
-?ji!
[Ft)
vHda
hM
W
Je$
gT
>
;sl
W
f
^{j
g|-ON&
RC)'
/3CR
GeneratedCodeAttribute
O-Dw
cTHOR
Jw@v
'd[H9
MVC=
I~dT~
N~Eb
GG&:
XYrnP
2wA1
|z+
ToBoolean
PB(d
>iRY
02&:- =
A}?[
$jK
9VAC
:VhU
)L"
Y);o
S%wCMt
k!GC
88yl
9~H1
rN	s/
.#7[
T{,,
\K{xA"
+Z% mGNB(
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05b_64 Seven05b_64 VirtualBox 2018-02-08 22:35:13 2018-02-08 22:38:07 174

23 Behaviors detected by system signatures