lockbit | 2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit
Size

264KB
MD5

280a6d555f997ba29b2749207f3a48c0
SHA1

bda2d92d343a390b85523f4bc1e6ab9d502ce7ab
SHA256

f8928dc897b948a680ebbfbba74930cf4ab0f2991932d34e8a9550a5854e83df
SHA512

9c646ae8c13880c453277dd645b5679b305babef5f033c04660e6023eade6282e1474686ad7f7207460609039ba59c5f41869cc3d432d29e59287893723e1969
SSDEEP

6144:76wysJpiy3eNuUf+7wgAS+Dq/u0vIPvtghrr:+srl3e0UEAR+m0Ggh

Score

10^/10

lockbit

Malware Config

Signatures

Lockbit family
lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs

resource	yara_rule
sample	family_lockbit

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit

Files

2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size:

IMAGE_SCN_MEM_READ

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

g��5��
Size: 720.1MB - Virtual size: 706.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

@c$��
Size: 1047.3MB - Virtual size: 3147.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

M�/2;Y�
Size: 2659.1MB - Virtual size: 2977.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�b+��0�
Size: 400.0MB - Virtual size: 1086.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�s��T:�
Size: 1781.4MB - Virtual size: 2293.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

!А,��
Size: 1450.6MB - Virtual size: 3748.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

pUaJ~�
Size: 50.8MB - Virtual size: 2275.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

~J��LR
Size: 3979.5MB - Virtual size: 3104.7MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�P�H��
Size: 864.1MB - Virtual size: 434.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

{��g�
Size: 2606.6MB - Virtual size: 548.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�Ym��f
Size: 1740.5MB - Virtual size: 2474.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

C �l��
Size: 3948.6MB - Virtual size: 2087.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

>�T:#E
Size: 1141.5MB - Virtual size: 2870.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Y�@@
Size: 1375.3MB - Virtual size: 3530.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

{�?��b
Size: 3272.6MB - Virtual size: 3631.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�lY�sX!�
Size: 289.5MB - Virtual size: 737.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

��/d��
Size: 1190.6MB - Virtual size: 1234.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

Bb��Nak
Size: 1882.9MB - Virtual size: 1595.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��6N��L
Size: 2906.7MB - Virtual size: 1221.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

5��`
Size: 2097.2MB - Virtual size: 1904.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�}�1�=
Size: 1969.5MB - Virtual size: 129.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ɯ4�H�;�
Size: 2364.8MB - Virtual size: 615.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

��G��
Size: 2134.7MB - Virtual size: 4040.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

%<Y�D��
Size: 2451.5MB - Virtual size: 1638.5MB

IMAGE_SCN_MEM_WRITE

�u�W��K~
Size: 4089.0MB - Virtual size: 1947.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�o�G1��
Size: 1571.2MB - Virtual size: 2111.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

l�rt$�̔
Size: 2160.4MB - Virtual size: 3767.9MB

�~��=f�
Size: 2750.8MB - Virtual size: 3270.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��7t�
Size: 3464.1MB - Virtual size: 4046.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��iI�P
Size: 419.1MB - Virtual size: 1668.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��5| C�
Size: 3347.9MB - Virtual size: 1525.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

-�B{Mެ
Size: 1818.8MB - Virtual size: 3313.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

&��nl�X�
Size: 310.6MB - Virtual size: 32.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��0��ܱf
Size: 203.2MB - Virtual size: 1779.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

� �7�}��
Size: 4003.5MB - Virtual size: 1307.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

| �@?�O
Size: 3009.0MB - Virtual size: 3645.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

I�t6ٽ
Size: 2018.3MB - Virtual size: 971.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

VU� pȽ
Size: 764.9MB - Virtual size: 2160.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

P�k.r��
Size: 2339.0MB - Virtual size: 2829.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��?~;N�
Size: 1448.8MB - Virtual size: 553.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�>�6>�I
Size: 2855.0MB - Virtual size: 1340.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/O��a�
Size: 2773.3MB - Virtual size: 2787.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�̀a��
Size: 264.1MB - Virtual size: 1954.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�l��f�
Size: 3024.3MB - Virtual size: 1942.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

q l�٣B
Size: 923.0MB - Virtual size: 3544.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�m��M�g�
Size: 2730.5MB - Virtual size: 3424.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��'��cz
Size: 1581.1MB - Virtual size: 3531.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:�[��
Size: 3753.1MB - Virtual size: 231.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P�2|�a��
Size: 1436.6MB - Virtual size: 69.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�R�$e�~
Size: 2735.7MB - Virtual size: 2822.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�2�D?H
Size: 3217.7MB - Virtual size: 1132.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��h�
Size: 728.7MB - Virtual size: 2883.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ؘ��W
Size: 2503.4MB - Virtual size: 1565.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

L\)=T�\�
Size: 2042.6MB - Virtual size: 2370.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ͬq��
Size: 3509.9MB - Virtual size: 3289.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�ա)�$�
Size: 3243.6MB - Virtual size: 1693.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

D��N��z
Size: 1783.7MB - Virtual size: 214.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

l� �ƝO�
Size: 1142.7MB - Virtual size: 3675.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��aʆf�A
Size: 3629.7MB - Virtual size: 3225.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

YAf��
Size: 1029.3MB - Virtual size: 1500.4MB

IMAGE_SCN_MEM_EXECUTE

��T
Size: 1259.5MB - Virtual size: 3408.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

J`�jD��s
Size: 4037.1MB - Virtual size: 2967.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��Am�
Size: 2771.2MB - Virtual size: 3578.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@�;�58&s
Size: 3573.0MB - Virtual size: 1440.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y1`�/Tx8
Size: 3343.4MB - Virtual size: 330.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

5��t�xg�
Size: 2270.8MB - Virtual size: 217.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�F̾��E�
Size: 494.9MB - Virtual size: 956.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�o?��
Size: 930.4MB - Virtual size: 61.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��J�ВW
Size: 3227.3MB - Virtual size: 933.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��D��
Size: 843.4MB - Virtual size: 230.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�wl}r�!�
Size: 3971.1MB - Virtual size: 3843.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

yqT�>8>a
Size: 2293.8MB - Virtual size: 2896.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

{k��x]
Size: 1883.2MB - Virtual size: 2369.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

ȝ HR1
Size: 1644.8MB - Virtual size: 2952.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

W��uU��
Size: 2144.3MB - Virtual size: 3274.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$'j�L!n|
Size: 2358.1MB - Virtual size: 1884.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

T��U��
Size: 4079.9MB - Virtual size: 4047.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��m�`e
Size: 533.0MB - Virtual size: 2775.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

+
Size: 217.4MB - Virtual size: 2694.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

K��G��@
Size: 510.9MB - Virtual size: 2622.3MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

V�.��
Size: 471.6MB - Virtual size: 1428.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��@��~
Size: 3036.0MB - Virtual size: 1614.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

y�7�r
Size: 3852.8MB - Virtual size: 3992.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ԛ�(K#8
Size: 2986.5MB - Virtual size: 1828.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P=#�Z�O�
Size: 1608.1MB - Virtual size: 2085.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

i��a�v�
Size: 3015.4MB - Virtual size: 2815.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�/��H�
Size: 3849.2MB - Virtual size: 2437.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��J
Size: 235.1MB - Virtual size: 1702.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�0WX
Size: 1807.9MB - Virtual size: 3854.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

}��c
Size: 2571.8MB - Virtual size: 3292.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�B��R
Size: 1503.4MB - Virtual size: 2543.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��e�@��E
Size: 1755.0MB - Virtual size: 637.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Ȫ�
Size: 3206.3MB - Virtual size: 4034.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�p6g�[
Size: 2057.3MB - Virtual size: 3485.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��SfKv
Size: 63.2MB - Virtual size: 1245.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

��>y;�o[
Size: 1274.1MB - Virtual size: 3076.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

/�3�!�r
Size: 2884.5MB - Virtual size: 4066.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�x ��
Size: 2993.9MB - Virtual size: 709.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�� I
Size: 3416.0MB - Virtual size: 2075.1MB

IMAGE_SCN_MEM_DISCARDABLE

��P��
Size: 1899.7MB - Virtual size: 2673.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

6{��ӱh
Size: 2898.2MB - Virtual size: 3760.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

H-�I޾
Size: 3202.2MB - Virtual size: 2172.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��Y��
Size: 537.6MB - Virtual size: 3660.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�T��
Size: 3847.1MB - Virtual size: 2643.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

h��
Size: 2587.0MB - Virtual size: 2449.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

*⽛��x
Size: 1567.3MB - Virtual size: 2753.2MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c��6d�
Size: 2692.9MB - Virtual size: 1556.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��<.
Size: 1597.7MB - Virtual size: 4058.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�a��
Size: 1781.1MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��֊hi
Size: 1933.5MB - Virtual size: 1662.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

DPJՁV�
Size: 3837.8MB - Virtual size: 3418.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

j̴��ha
Size: 911.9MB - Virtual size: 3237.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

)�}xԳ�
Size: 586.0MB - Virtual size: 2982.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

񱠡]��
Size: 1320.6MB - Virtual size: 755.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T��&�;:
Size: 2654.1MB - Virtual size: 2622.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�*��oA��
Size: 1238.8MB - Virtual size: 2573.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��1��w
Size: 1048.7MB - Virtual size: 3820.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

fj8
Size: 2121.0MB - Virtual size: 3047.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T*ѭ�
Size: 2423.4MB - Virtual size: 3926.7MB

IMAGE_SCN_MEM_READ

�8�db�
Size: 2642.1MB - Virtual size: 3414.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�7r'��
Size: 1222.5MB - Virtual size: 877.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��[�X��
Size: 2038.9MB - Virtual size: 520.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�[~�D�O
Size: 2199.6MB - Virtual size: 3321.0MB

IMAGE_SCN_MEM_WRITE

Te��N
Size: 1961.6MB - Virtual size: 311.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�'�bG.�7
Size: 2821.4MB - Virtual size: 2284.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_D>Pt
Size: 1119.4MB - Virtual size: 3824.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��_�r��3
Size: 2079.6MB - Virtual size: 1019.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

[!�}� h�
Size: 1468.8MB - Virtual size: 2128.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

×��S�b
Size: 2797.2MB - Virtual size: 908.3MB

IMAGE_SCN_MEM_DISCARDABLE

R��'�
Size: 20.3MB - Virtual size: 2340.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��W�6
Size: 3870.2MB - Virtual size: 2788.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ʄ
Size: 3556.8MB - Virtual size: 3269.5MB

��x*a�
Size: 1127.2MB - Virtual size: 1037.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

Hi�^�|�N
Size: 227.8MB - Virtual size: 2694.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

O��ȼ
Size: 1436.6MB - Virtual size: 2072.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

z��-:'�
Size: 764.2MB - Virtual size: 3249.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��u�
Size: 1955.3MB - Virtual size: 2180.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�Be�!� e
Size: 2288.8MB - Virtual size: 1881.0MB

IMAGE_SCN_MEM_DISCARDABLE

��*j�'
Size: 1957.0MB - Virtual size: 658.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�1�� 0Zz
Size: 3210.6MB - Virtual size: 26.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N?�� T
Size: 3359.0MB - Virtual size: 260.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��D4�
Size: 1824.7MB - Virtual size: 325.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

;�Ao��i
Size: 3893.8MB - Virtual size: 721.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�,�,��
Size: 3838.4MB - Virtual size: 1546.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

O'CN�
Size: 3327.0MB - Virtual size: 3684.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

5��`��
Size: 3146.0MB - Virtual size: 909.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

� ��j..
Size: 2362.2MB - Virtual size: 1649.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��|MQ�
Size: 206.5MB - Virtual size: 45.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�%Sm�`�
Size: 220.4MB - Virtual size: 2915.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

靈��l
Size: 4022.9MB - Virtual size: 3660.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��=�C
Size: 3254.8MB - Virtual size: 3607.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

F��>��
Size: 1384.1MB - Virtual size: 814.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Y_ǀ��H�
Size: 2953.8MB - Virtual size: 701.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ݝv�A�
Size: 3225.5MB - Virtual size: 2190.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

e�b�ݎ
Size: 1981.4MB - Virtual size: 2285.2MB

IMAGE_SCN_MEM_DISCARDABLE

�\��d��5
Size: 2071.6MB - Virtual size: 2730.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��'�L
Size: 2689.8MB - Virtual size: 479.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

femh�
Size: 1057.8MB - Virtual size: 3559.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��\S`(
Size: 3081.4MB - Virtual size: 2634.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��%wk e
Size: 3994.1MB - Virtual size: 3561.4MB

IMAGE_SCN_MEM_WRITE

�~��<�=6
Size: 1074.6MB - Virtual size: 1869.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��G�~N
Size: 1583.9MB - Virtual size: 1079.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�T�cx.��
Size: 1940.1MB - Virtual size: 2429.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

n��}*k
Size: 3000.8MB - Virtual size: 2676.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

@��Z�ӌ
Size: 3673.5MB - Virtual size: 4001.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�2��
Size: 509.2MB - Virtual size: 178.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

5 Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

g��5�� Size: 720.1MB - Virtual size: 706.4MB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

5
Size: - Virtual size:

g��5��
Size: 720.1MB - Virtual size: 706.4MB

@c$��
Size: 1047.3MB - Virtual size: 3147.8MB

M�/2;Y�
Size: 2659.1MB - Virtual size: 2977.0MB

�b+��0�
Size: 400.0MB - Virtual size: 1086.4MB

�s��T:�
Size: 1781.4MB - Virtual size: 2293.7MB

!А,��
Size: 1450.6MB - Virtual size: 3748.0MB

pUaJ~�
Size: 50.8MB - Virtual size: 2275.8MB

~J��LR
Size: 3979.5MB - Virtual size: 3104.7MB

�P�H��
Size: 864.1MB - Virtual size: 434.0MB

{��g�
Size: 2606.6MB - Virtual size: 548.9MB

�Ym��f
Size: 1740.5MB - Virtual size: 2474.7MB

C �l��
Size: 3948.6MB - Virtual size: 2087.7MB

>�T:#E
Size: 1141.5MB - Virtual size: 2870.2MB

��Y�@@
Size: 1375.3MB - Virtual size: 3530.3MB

{�?��b
Size: 3272.6MB - Virtual size: 3631.5MB

�lY�sX!�
Size: 289.5MB - Virtual size: 737.8MB

��/d��
Size: 1190.6MB - Virtual size: 1234.4MB

Bb��Nak
Size: 1882.9MB - Virtual size: 1595.5MB

��6N��L
Size: 2906.7MB - Virtual size: 1221.5MB

5��`
Size: 2097.2MB - Virtual size: 1904.3MB

�}�1�=
Size: 1969.5MB - Virtual size: 129.6MB

ɯ4�H�;�
Size: 2364.8MB - Virtual size: 615.6MB

��G��
Size: 2134.7MB - Virtual size: 4040.3MB

%<Y�D��
Size: 2451.5MB - Virtual size: 1638.5MB

�u�W��K~
Size: 4089.0MB - Virtual size: 1947.6MB

�o�G1��
Size: 1571.2MB - Virtual size: 2111.9MB

l�rt$�̔
Size: 2160.4MB - Virtual size: 3767.9MB

�~��=f�
Size: 2750.8MB - Virtual size: 3270.5MB

��7t�
Size: 3464.1MB - Virtual size: 4046.7MB

��iI�P
Size: 419.1MB - Virtual size: 1668.2MB

��5| C�
Size: 3347.9MB - Virtual size: 1525.6MB

-�B{Mެ
Size: 1818.8MB - Virtual size: 3313.8MB

&��nl�X�
Size: 310.6MB - Virtual size: 32.5MB

��0��ܱf
Size: 203.2MB - Virtual size: 1779.6MB

� �7�}��
Size: 4003.5MB - Virtual size: 1307.5MB

| �@?�O
Size: 3009.0MB - Virtual size: 3645.7MB

I�t6ٽ
Size: 2018.3MB - Virtual size: 971.0MB

VU� pȽ
Size: 764.9MB - Virtual size: 2160.4MB

P�k.r��
Size: 2339.0MB - Virtual size: 2829.1MB

��?~;N�
Size: 1448.8MB - Virtual size: 553.6MB

�>�6>�I
Size: 2855.0MB - Virtual size: 1340.1MB

/O��a�
Size: 2773.3MB - Virtual size: 2787.8MB

�̀a��
Size: 264.1MB - Virtual size: 1954.0MB

�l��f�
Size: 3024.3MB - Virtual size: 1942.2MB

q l�٣B
Size: 923.0MB - Virtual size: 3544.8MB

�m��M�g�
Size: 2730.5MB - Virtual size: 3424.2MB

��'��cz
Size: 1581.1MB - Virtual size: 3531.7MB

:�[��
Size: 3753.1MB - Virtual size: 231.1MB

P�2|�a��
Size: 1436.6MB - Virtual size: 69.8MB

�R�$e�~
Size: 2735.7MB - Virtual size: 2822.9MB

�2�D?H
Size: 3217.7MB - Virtual size: 1132.9MB