lockbit | 2024-06-01_95a02c57cf893a554accfb5fe9055583_lockbit

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-01_95a02c57cf893a554accfb5fe9055583_lockbit
Size

264KB
MD5

95a02c57cf893a554accfb5fe9055583
SHA1

a79b24531dd5811e1cea525b7e63c37077961f66
SHA256

abcfabccdfe5ec1033945f280cb0fb305175d993d367eadca780ebece766ed2c
SHA512

5f868a70047a951f03a454907296f3432575e83ff1b9dad19de6157c736b269fd0f99b0f66904498481850f7697323f2212c2e52de86131e73db8758ee982814
SSDEEP

3072:oPtAau3Q8YnzACJCg04XkgPb38GSGmj8TijGiaVmz7myMUzjOlGvreJyKu6:UAaaCGOLZSZATXiaVcrMyvrII6

Score

10^/10

lockbit

Malware Config

Signatures

Lockbit family
lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs

resource	yara_rule
sample	family_lockbit

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_95a02c57cf893a554accfb5fe9055583_lockbit

Files

2024-06-01_95a02c57cf893a554accfb5fe9055583_lockbit
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size:

IMAGE_SCN_MEM_READ

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

'��9�
Size: 3504.2MB - Virtual size: 2384.5MB

IMAGE_SCN_MEM_DISCARDABLE

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�rWp��
Size: 2712.3MB - Virtual size: 1005.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!�q�Z6�
Size: 2623.5MB - Virtual size: 373.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�� OJ
Size: 2137.0MB - Virtual size: 3234.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

,#�Rp�ہ
Size: 1962.3MB - Virtual size: 1684.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f��'�."
Size: 3830.6MB - Virtual size: 1601.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

U�Q֝�P#
Size: 2052.2MB - Virtual size: 3256.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Bx�y�
Size: 3530.7MB - Virtual size: 2776.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

`��F
Size: 2505.4MB - Virtual size: 2539.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

ӐE:U�y�
Size: 52.2MB - Virtual size: 1620.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

L�d��
Size: 1835.3MB - Virtual size: 2789.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��(��
Size: 682.0MB - Virtual size: 78.4MB

a��2i��
Size: 1726.8MB - Virtual size: 4094.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��q&xq��
Size: 273.0MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

N��ļW�
Size: 3495.3MB - Virtual size: 2343.5MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/d�X�0�
Size: 2065.8MB - Virtual size: 1315.6MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

?�Q{�:
Size: 2253.8MB - Virtual size: 3039.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

R|��#�n3
Size: 2818.6MB - Virtual size: 265.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��;A�
Size: 544.2MB - Virtual size: 1081.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d<t*�
Size: 4066.8MB - Virtual size: 1317.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

p�2{
Size: 1819.3MB - Virtual size: 3357.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c�{5<��
Size: 703.2MB - Virtual size: 2462.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

k�+�N"�
Size: 2882.6MB - Virtual size: 2549.9MB

IMAGE_SCN_MEM_EXECUTE

��9�M�z�
Size: 3935.5MB - Virtual size: 3132.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��5퓝�
Size: 3969.9MB - Virtual size: 1621.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7��X��
Size: 197.3MB - Virtual size: 3408.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��10=
Size: 995.1MB - Virtual size: 1247.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�e:�7
Size: 3969.8MB - Virtual size: 3292.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

@��˥�
Size: 1067.9MB - Virtual size: 3963.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�� }�N
Size: 2481.2MB - Virtual size: 2171.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w��U�,
Size: 3075.8MB - Virtual size: 861.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

c�S�!��
Size: 386.7MB - Virtual size: 2592.7MB

IMAGE_SCN_MEM_DISCARDABLE

��3��
Size: 1610.6MB - Virtual size: 3905.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�� (��
Size: 1226.0MB - Virtual size: 3575.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

�b ��K�<
Size: 3964.2MB - Virtual size: 754.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��p�?9
Size: 1466.9MB - Virtual size: 3135.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�&�vݞ#
Size: 734.5MB - Virtual size: 391.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�(̏��
Size: 3791.7MB - Virtual size: 148.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�t��,�B
Size: 2187.0MB - Virtual size: 3736.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��x4��
Size: 251.5MB - Virtual size: 2682.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

i��-5i�
Size: 1249.1MB - Virtual size: 3211.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��#0:Ц
Size: 3129.2MB - Virtual size: 3697.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�� ז�
Size: 2997.8MB - Virtual size: 218.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

+�H��0��
Size: 2977.1MB - Virtual size: 2645.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�J�`Ȁ�
Size: 3081.0MB - Virtual size: 1336.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

]��
Size: 324.8MB - Virtual size: 1222.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�m�WϥK~
Size: 913.3MB - Virtual size: 3132.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��&&�S
Size: 2270.4MB - Virtual size: 3511.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z��G��)
Size: 3191.7MB - Virtual size: 2697.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�^[;�I��
Size: 3795.7MB - Virtual size: 1678.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��т
Size: 83.3MB - Virtual size: 163.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

}��E��
Size: 171.1MB - Virtual size: 1402.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c'��$�
Size: 417.3MB - Virtual size: 1116.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��R��
Size: 2693.8MB - Virtual size: 703.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�)s��
Size: 631.3MB - Virtual size: 2168.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Ԃ�i
Size: 1480.9MB - Virtual size: 366.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

J�� |c�
Size: 268.4MB - Virtual size: 3061.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

s�{ ��
Size: 2117.4MB - Virtual size: 3705.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

oᙺ:�>�
Size: 3824.0MB - Virtual size: 925.6MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

`'��W��
Size: 2726.9MB - Virtual size: 2971.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

�E�{��+�
Size: 3864.9MB - Virtual size: 3993.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

TdCc��
Size: 2776.6MB - Virtual size: 3045.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

��6�E
Size: 3849.8MB - Virtual size: 1819.2MB

IMAGE_SCN_MEM_WRITE

��Z`"(��
Size: 907.3MB - Virtual size: 3662.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

${��j+��
Size: 1783.7MB - Virtual size: 60.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�a��c�
Size: 1607.2MB - Virtual size: 3068.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

D(��
Size: 638.5MB - Virtual size: 990.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��F�#
Size: 3374.6MB - Virtual size: 72.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

޼�8��=
Size: 747.7MB - Virtual size: 3473.1MB

IMAGE_SCN_MEM_EXECUTE

l�|GrV�
Size: 2591.4MB - Virtual size: 2611.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�燗
Size: 2672.9MB - Virtual size: 2491.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

ÉJ�Mb
Size: 1186.5MB - Virtual size: 3306.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

G_�sO�=�
Size: 1309.1MB - Virtual size: 1442.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

י��H
Size: 1646.1MB - Virtual size: 416.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

�VF� �h
Size: 3077.4MB - Virtual size: 1643.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

t�zL�P/�
Size: 4004.1MB - Virtual size: 3673.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

`�}S#J�
Size: 2718.2MB - Virtual size: 3995.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w��=�'�
Size: 2172.3MB - Virtual size: 2664.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�l<6@��
Size: 1551.4MB - Virtual size: 2302.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��\�r8
Size: 375.3MB - Virtual size: 2517.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

X�R;y1 �
Size: 440.5MB - Virtual size: 2897.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SQ;�BcC
Size: 1151.1MB - Virtual size: 3317.2MB

IMAGE_SCN_MEM_READ

4��o<L�>
Size: 1503.8MB - Virtual size: 2114.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�Y��;��
Size: 2698.3MB - Virtual size: 2678.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

t�a�A�U�
Size: 1938.7MB - Virtual size: 1685.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

�&�>H{#
Size: 1142.6MB - Virtual size: 1268.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��~ϻ
Size: 3883.4MB - Virtual size: 2746.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i#F��]��
Size: 2033.4MB - Virtual size: 1557.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��e�*�8
Size: 1439.9MB - Virtual size: 1832.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

Ƈ7��{
Size: 3794.4MB - Virtual size: 2651.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

��V��L�
Size: 3565.0MB - Virtual size: 1121.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��X 7eO�
Size: 641.1MB - Virtual size: 3536.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

5�!��
Size: 2284.2MB - Virtual size: 2609.2MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

�R
Size: 3620.9MB - Virtual size: 3745.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�:ΫI
Size: 2401.4MB - Virtual size: 2280.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�N�u��
Size: 179.9MB - Virtual size: 2480.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

$_�wh��&
Size: 1927.7MB - Virtual size: 3385.2MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

X��
Size: 860.0MB - Virtual size: 3618.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��i��
Size: 2261.7MB - Virtual size: 940.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��U��
Size: 1393.6MB - Virtual size: 1171.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

X�@�4
Size: 3127.6MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

P�q��
Size: 822.5MB - Virtual size: 51.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

^>�ǽ�&
Size: 2494.2MB - Virtual size: 1510.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��u<yr�,
Size: 3272.0MB - Virtual size: 3392.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�_ O8?J�
Size: 1414.4MB - Virtual size: 856.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�:�|�yt
Size: 2847.7MB - Virtual size: 1813.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�/Q.щ�
Size: 2015.0MB - Virtual size: 3661.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�M{ܺ*�
Size: 383.1MB - Virtual size: 3800.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

F2�#�
Size: 349.6MB - Virtual size: 1251.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��Y��
Size: 3159.2MB - Virtual size: 3131.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�Jjw�߭?
Size: 4006.8MB - Virtual size: 3939.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�ŭ�e�
Size: 1939.5MB - Virtual size: 2122.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�nUN��
Size: 3313.4MB - Virtual size: 23.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�1K�q��_
Size: 3210.5MB - Virtual size: 1741.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ۄ��d�
Size: 253.5MB - Virtual size: 2415.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

^T�n2��
Size: 982.8MB - Virtual size: 546.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

T��;;�wM
Size: 1475.0MB - Virtual size: 3525.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�\��t
Size: 1914.2MB - Virtual size: 1383.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�x1\x��
Size: 1073.3MB - Virtual size: 471.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��o[�
Size: 2925.2MB - Virtual size: 2091.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

j��Z
Size: 1098.5MB - Virtual size: 1394.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

��kh'�r
Size: 3362.3MB - Virtual size: 3775.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�/K(��
Size: 1770.9MB - Virtual size: 3214.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��d�n�
Size: 4022.9MB - Virtual size: 3672.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�#�P�� C
Size: 2992.9MB - Virtual size: 2823.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��۹��
Size: 2228.8MB - Virtual size: 931.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

L�8A��
Size: 2935.3MB - Virtual size: 1121.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

H>f�f��
Size: 1094.9MB - Virtual size: 3950.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�ƫ�N��
Size: 2884.0MB - Virtual size: 4079.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

+�nY9ЌE
Size: 691.5MB - Virtual size: 370.7MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

~4��i
Size: 2717.9MB - Virtual size: 4079.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�i�%_E�
Size: 963.5MB - Virtual size: 3923.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Z�L};x
Size: 2710.2MB - Virtual size: 1168.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

5�~�D�OJ
Size: 3591.9MB - Virtual size: 2361.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�PR�&%�
Size: 3165.7MB - Virtual size: 1227.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

'x�q"B�
Size: 75.4MB - Virtual size: 2720.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��V�
Size: 1889.6MB - Virtual size: 3327.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��P7�
Size: 1517.2MB - Virtual size: 3162.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c��'��o
Size: 1130.3MB - Virtual size: 1702.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�_�R��
Size: 2233.2MB - Virtual size: 3311.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��メ��_
Size: 660.8MB - Virtual size: 3634.4MB

IMAGE_SCN_MEM_DISCARDABLE

_-j��t
Size: 3895.8MB - Virtual size: 3543.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

R��\!��
Size: 2479.5MB - Virtual size: 2480.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�N/�q`"
Size: 31.3MB - Virtual size: 4027.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

N� �|qU
Size: 969.0MB - Virtual size: 2959.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

D��AY��
Size: 1176.6MB - Virtual size: 3952.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

J�n� 3�
Size: 3713.9MB - Virtual size: 1684.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9En=�#�
Size: 2440.0MB - Virtual size: 1873.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

��%10
Size: 2253.7MB - Virtual size: 4030.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��dkX`
Size: 232.6MB - Virtual size: 350.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��9Ō��
Size: 2571.4MB - Virtual size: 2647.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

dbP��
Size: 1832.3MB - Virtual size: 373.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

r��'%�
Size: 796.5MB - Virtual size: 1489.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��p� k
Size: 2340.9MB - Virtual size: 578.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�k��
Size: 413.7MB - Virtual size: 1153.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

�RU��T�
Size: 3993.0MB - Virtual size: 1438.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

xW��Ē�
Size: 1284.6MB - Virtual size: 2260.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

!_�*^k
Size: 953.9MB - Virtual size: 2343.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�V�O>*R
Size: 335.5MB - Virtual size: 1219.8MB

IMAGE_SCN_CNT_CODE

�1�=��V
Size: 3147.5MB - Virtual size: 2181.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�~�{&�
Size: 3785.8MB - Virtual size: 229.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�іz��
Size: 886.6MB - Virtual size: 2991.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

J�wjt�`
Size: 1251.0MB - Virtual size: 2973.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�Cl�U�
Size: 3886.7MB - Virtual size: 63.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+�"Z��I�
Size: 3595.2MB - Virtual size: 1952.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

�i�NUp��
Size: 3161.1MB - Virtual size: 3460.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

7 Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

'��� 9� Size: 3504.2MB - Virtual size: 2384.5MB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

7
Size: - Virtual size:

'��9�
Size: 3504.2MB - Virtual size: 2384.5MB

�rWp��
Size: 2712.3MB - Virtual size: 1005.0MB

!�q�Z6�
Size: 2623.5MB - Virtual size: 373.1MB

�� OJ
Size: 2137.0MB - Virtual size: 3234.5MB

,#�Rp�ہ
Size: 1962.3MB - Virtual size: 1684.0MB

f��'�."
Size: 3830.6MB - Virtual size: 1601.9MB

U�Q֝�P#
Size: 2052.2MB - Virtual size: 3256.6MB

��Bx�y�
Size: 3530.7MB - Virtual size: 2776.4MB

`��F
Size: 2505.4MB - Virtual size: 2539.0MB

ӐE:U�y�
Size: 52.2MB - Virtual size: 1620.7MB

L�d��
Size: 1835.3MB - Virtual size: 2789.4MB

��(��
Size: 682.0MB - Virtual size: 78.4MB

a��2i��
Size: 1726.8MB - Virtual size: 4094.0MB

��q&xq��
Size: 273.0MB - Virtual size: 6.5MB

N��ļW�
Size: 3495.3MB - Virtual size: 2343.5MB

/d�X�0�
Size: 2065.8MB - Virtual size: 1315.6MB

?�Q{�:
Size: 2253.8MB - Virtual size: 3039.6MB

R|��#�n3
Size: 2818.6MB - Virtual size: 265.5MB

��;A�
Size: 544.2MB - Virtual size: 1081.7MB

d<t*�
Size: 4066.8MB - Virtual size: 1317.5MB

p�2{
Size: 1819.3MB - Virtual size: 3357.4MB

c�{5<��
Size: 703.2MB - Virtual size: 2462.8MB

k�+�N"�
Size: 2882.6MB - Virtual size: 2549.9MB

��9�M�z�
Size: 3935.5MB - Virtual size: 3132.0MB

��5퓝�
Size: 3969.9MB - Virtual size: 1621.5MB

7��X��
Size: 197.3MB - Virtual size: 3408.3MB

��10=
Size: 995.1MB - Virtual size: 1247.8MB

�e:�7
Size: 3969.8MB - Virtual size: 3292.5MB

@��˥�
Size: 1067.9MB - Virtual size: 3963.4MB

�� }�N
Size: 2481.2MB - Virtual size: 2171.8MB

w��U�,
Size: 3075.8MB - Virtual size: 861.2MB

c�S�!��
Size: 386.7MB - Virtual size: 2592.7MB

��3��
Size: 1610.6MB - Virtual size: 3905.8MB

�� (��
Size: 1226.0MB - Virtual size: 3575.9MB

�b ��K�<
Size: 3964.2MB - Virtual size: 754.1MB

��p�?9
Size: 1466.9MB - Virtual size: 3135.1MB

�&�vݞ#
Size: 734.5MB - Virtual size: 391.5MB

�(̏��
Size: 3791.7MB - Virtual size: 148.9MB

�t��,�B
Size: 2187.0MB - Virtual size: 3736.9MB

��x4��
Size: 251.5MB - Virtual size: 2682.4MB

i��-5i�
Size: 1249.1MB - Virtual size: 3211.8MB

��#0:Ц
Size: 3129.2MB - Virtual size: 3697.6MB

�� ז�
Size: 2997.8MB - Virtual size: 218.0MB

+�H��0��
Size: 2977.1MB - Virtual size: 2645.3MB

�J�`Ȁ�
Size: 3081.0MB - Virtual size: 1336.4MB

]��
Size: 324.8MB - Virtual size: 1222.7MB

�m�WϥK~
Size: 913.3MB - Virtual size: 3132.9MB

��&&�S
Size: 2270.4MB - Virtual size: 3511.4MB

z��G��)
Size: 3191.7MB - Virtual size: 2697.0MB

�^[;�I��
Size: 3795.7MB - Virtual size: 1678.8MB

��т
Size: 83.3MB - Virtual size: 163.1MB