Windows Analysis Report
INQUIRY 2024-SP000422-B(01) INQ24-_1.exe

Overview

General Information

Sample name: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe
Analysis ID: 1467273
MD5: 32b02b00cf70b41be019e7e456ad02ff
SHA1: 01bf3a8b8237af4a24c9a801f28c7ddb3c0c0eea
SHA256: 1414599021af8f143148a590ed56e6a1d0fa3eee7fa0c2eb78c32866b84a4954
Tags: exe
Infos:

Detection

FormBook
Score: 84
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected FormBook
AI detected suspicious sample
Found potential dummy code loops (likely to delay analysis)
Machine Learning detection for sample
Checks if the current process is being debugged
Contains functionality for execution timing, often used to detect debuggers
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Contains functionality to call native functions
Contains functionality to read the PEB
Detected potential crypto function
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
May sleep (evasive loops) to hinder dynamic analysis
PE file does not import any functions
Program does not show much activity (idle)
Sample file is different than original file name gathered from version info
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Yara signature match

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Avira: detected
Multi AV Scanner detection for submitted file
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe ReversingLabs: Detection: 68%
Yara detected FormBook
Source: Yara match File source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 100.0% probability
Machine Learning detection for sample
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Joe Sandbox ML: detected
Uses 32bit PE files
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: wntdll.pdbUGP source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2363076840.0000000001881000.00000004.00000020.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001A30000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001BCE000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2354866122.00000000016DE000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: wntdll.pdb source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2363076840.0000000001881000.00000004.00000020.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001A30000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001BCE000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2354866122.00000000016DE000.00000004.00000020.00020000.00000000.sdmp

E-Banking Fraud
barindex
Yara detected FormBook
Source: Yara match File source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

System Summary
barindex
Malicious sample detected (through community Yara rule)
Source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_Formbook_1112e116 Author: unknown
Source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 Author: unknown
Source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 Author: unknown
Contains functionality to call native functions
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E5C223 NtClose, 0_2_00E5C223
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2B60 NtClose,LdrInitializeThunk, 0_2_01AA2B60
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2DF0 NtQuerySystemInformation,LdrInitializeThunk, 0_2_01AA2DF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2C70 NtFreeVirtualMemory,LdrInitializeThunk, 0_2_01AA2C70
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA35C0 NtCreateMutant,LdrInitializeThunk, 0_2_01AA35C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA4340 NtSetContextThread, 0_2_01AA4340
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA4650 NtSuspendThread, 0_2_01AA4650
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2BA0 NtEnumerateValueKey, 0_2_01AA2BA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2B80 NtQueryInformationFile, 0_2_01AA2B80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2BE0 NtQueryValueKey, 0_2_01AA2BE0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2BF0 NtAllocateVirtualMemory, 0_2_01AA2BF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2AB0 NtWaitForSingleObject, 0_2_01AA2AB0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2AF0 NtWriteFile, 0_2_01AA2AF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2AD0 NtReadFile, 0_2_01AA2AD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2DB0 NtEnumerateKey, 0_2_01AA2DB0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2DD0 NtDelayExecution, 0_2_01AA2DD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2D30 NtUnmapViewOfSection, 0_2_01AA2D30
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2D00 NtSetInformationFile, 0_2_01AA2D00
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2D10 NtMapViewOfSection, 0_2_01AA2D10
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2CA0 NtQueryInformationToken, 0_2_01AA2CA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2CF0 NtOpenProcess, 0_2_01AA2CF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2CC0 NtQueryVirtualMemory, 0_2_01AA2CC0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2C00 NtQueryInformationProcess, 0_2_01AA2C00
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2C60 NtCreateKey, 0_2_01AA2C60
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2FA0 NtQuerySection, 0_2_01AA2FA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2FB0 NtResumeThread, 0_2_01AA2FB0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2F90 NtProtectVirtualMemory, 0_2_01AA2F90
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2FE0 NtCreateFile, 0_2_01AA2FE0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2F30 NtCreateSection, 0_2_01AA2F30
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2F60 NtCreateProcessEx, 0_2_01AA2F60
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2EA0 NtAdjustPrivilegesToken, 0_2_01AA2EA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2E80 NtReadVirtualMemory, 0_2_01AA2E80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2EE0 NtQueueApcThread, 0_2_01AA2EE0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2E30 NtWriteVirtualMemory, 0_2_01AA2E30
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA3090 NtSetValueKey, 0_2_01AA3090
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA3010 NtOpenDirectoryObject, 0_2_01AA3010
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA39B0 NtGetContextThread, 0_2_01AA39B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA3D10 NtOpenProcessToken, 0_2_01AA3D10
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA3D70 NtOpenThread, 0_2_01AA3D70
Detected potential crypto function
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E32850 0_2_00E32850
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E5E823 0_2_00E5E823
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E40003 0_2_00E40003
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E3E2A3 0_2_00E3E2A3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E3E29C 0_2_00E3E29C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E31250 0_2_00E31250
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E40223 0_2_00E40223
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E33300 0_2_00E33300
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E32440 0_2_00E32440
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E325F1 0_2_00E325F1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E46D0E 0_2_00E46D0E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E46D13 0_2_00E46D13
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E32600 0_2_00E32600
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B241A2 0_2_01B241A2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B301AA 0_2_01B301AA
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B281CC 0_2_01B281CC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60100 0_2_01A60100
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0A118 0_2_01B0A118
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF8158 0_2_01AF8158
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B303E6 0_2_01B303E6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E3F0 0_2_01A7E3F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2A352 0_2_01B2A352
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF02C0 0_2_01AF02C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B30591 0_2_01B30591
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1E4F6 0_2_01B1E4F6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B14420 0_2_01B14420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B22446 0_2_01B22446
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6C7C0 0_2_01A6C7C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A94750 0_2_01A94750
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8C6E0 0_2_01A8C6E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B3A9A6 0_2_01B3A9A6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A86962 0_2_01A86962
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A568B8 0_2_01A568B8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E8F0 0_2_01A9E8F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A72840 0_2_01A72840
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7A840 0_2_01A7A840
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B26BD7 0_2_01B26BD7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2AB40 0_2_01B2AB40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A88DBF 0_2_01A88DBF
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6ADE0 0_2_01A6ADE0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7AD00 0_2_01A7AD00
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0CD1F 0_2_01B0CD1F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10CB5 0_2_01B10CB5
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60CF2 0_2_01A60CF2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70C00 0_2_01A70C00
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEEFA0 0_2_01AEEFA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7CFE0 0_2_01A7CFE0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A62FC8 0_2_01A62FC8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B12F30 0_2_01B12F30
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB2F28 0_2_01AB2F28
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A90F30 0_2_01A90F30
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE4F40 0_2_01AE4F40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2CE93 0_2_01B2CE93
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82E90 0_2_01A82E90
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2EEDB 0_2_01B2EEDB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2EE26 0_2_01B2EE26
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70E59 0_2_01A70E59
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7B1B0 0_2_01A7B1B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA516C 0_2_01AA516C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5F172 0_2_01A5F172
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B3B16B 0_2_01B3B16B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2F0E0 0_2_01B2F0E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B270E9 0_2_01B270E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A770C0 0_2_01A770C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1F0CC 0_2_01B1F0CC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB739A 0_2_01AB739A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2132D 0_2_01B2132D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5D34C 0_2_01A5D34C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A752A0 0_2_01A752A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B112ED 0_2_01B112ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8B2C0 0_2_01A8B2C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0D5B0 0_2_01B0D5B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B395C3 0_2_01B395C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B27571 0_2_01B27571
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2F43F 0_2_01B2F43F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A61460 0_2_01A61460
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2F7B0 0_2_01B2F7B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B216CC 0_2_01B216CC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB5630 0_2_01AB5630
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B05910 0_2_01B05910
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A79950 0_2_01A79950
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8B950 0_2_01A8B950
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A738E0 0_2_01A738E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADD800 0_2_01ADD800
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8FB80 0_2_01A8FB80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AADBF9 0_2_01AADBF9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE5BF0 0_2_01AE5BF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2FB76 0_2_01B2FB76
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB5AA0 0_2_01AB5AA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B11AA3 0_2_01B11AA3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0DAAC 0_2_01B0DAAC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1DAC6 0_2_01B1DAC6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE3A6C 0_2_01AE3A6C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B27A46 0_2_01B27A46
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2FA49 0_2_01B2FA49
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8FDC0 0_2_01A8FDC0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B27D73 0_2_01B27D73
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A73D40 0_2_01A73D40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B21D5A 0_2_01B21D5A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2FCF2 0_2_01B2FCF2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE9C32 0_2_01AE9C32
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2FFB1 0_2_01B2FFB1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A71F92 0_2_01A71F92
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A33FD2 0_2_01A33FD2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A33FD5 0_2_01A33FD5
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2FF09 0_2_01B2FF09
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A79EB0 0_2_01A79EB0
Found potential string decryption / allocating functions
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: String function: 01AEF290 appears 105 times
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: String function: 01A5B970 appears 280 times
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: String function: 01AB7E54 appears 111 times
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: String function: 01ADEA12 appears 86 times
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: String function: 01AA5130 appears 58 times
PE file does not import any functions
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: No import functions for PE file found
Sample file is different than original file name gathered from version info
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001B5D000.00000040.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs INQUIRY 2024-SP000422-B(01) INQ24-_1.exe
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2363076840.00000000019AE000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs INQUIRY 2024-SP000422-B(01) INQ24-_1.exe
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2354866122.0000000001801000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs INQUIRY 2024-SP000422-B(01) INQ24-_1.exe
Uses 32bit PE files
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Yara signature match
Source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_Formbook_1112e116 reference_sample = 6246f3b89f0e4913abd88ae535ae3597865270f58201dc7f8ec0c87f15ff370a, os = windows, severity = x86, creation_date = 2021-06-14, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Formbook, fingerprint = b8b88451ad8c66b54e21455d835a5d435e52173c86e9b813ffab09451aff7134, id = 1112e116-dee0-4818-a41f-ca5c1c41b4b8, last_modified = 2021-08-23
Source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 reference_sample = 6246f3b89f0e4913abd88ae535ae3597865270f58201dc7f8ec0c87f15ff370a, os = windows, severity = x86, creation_date = 2021-06-14, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Formbook, fingerprint = b8b88451ad8c66b54e21455d835a5d435e52173c86e9b813ffab09451aff7134, id = 1112e116-dee0-4818-a41f-ca5c1c41b4b8, last_modified = 2021-08-23
Source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 reference_sample = 6246f3b89f0e4913abd88ae535ae3597865270f58201dc7f8ec0c87f15ff370a, os = windows, severity = x86, creation_date = 2021-06-14, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Formbook, fingerprint = b8b88451ad8c66b54e21455d835a5d435e52173c86e9b813ffab09451aff7134, id = 1112e116-dee0-4818-a41f-ca5c1c41b4b8, last_modified = 2021-08-23
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: Section .text
Source: classification engine Classification label: mal84.troj.evad.winEXE@1/0@0/0
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe ReversingLabs: Detection: 68%
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Section loaded: apphelp.dll Jump to behavior
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Binary string: wntdll.pdbUGP source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2363076840.0000000001881000.00000004.00000020.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001A30000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001BCE000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2354866122.00000000016DE000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: wntdll.pdb source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2363076840.0000000001881000.00000004.00000020.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001A30000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000002.2856922715.0000000001BCE000.00000040.00001000.00020000.00000000.sdmp, INQUIRY 2024-SP000422-B(01) INQ24-_1.exe, 00000000.00000003.2354866122.00000000016DE000.00000004.00000020.00020000.00000000.sdmp
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E490A0 push esp; ret 0_2_00E490B5
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E3D99B pushad ; ret 0_2_00E3D99C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E38926 push ebx; iretd 0_2_00E3892A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E41CAC pushfd ; retf 0_2_00E41CB8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E41CBF push 3E557F42h; ret 0_2_00E41CC4
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E375A7 push 67C9EEB0h; retf 0_2_00E375B1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E33570 push eax; ret 0_2_00E33572
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A3225F pushad ; ret 0_2_01A327F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A327FA pushad ; ret 0_2_01A327F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A609AD push ecx; mov dword ptr [esp], ecx 0_2_01A609B6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A3283D push eax; iretd 0_2_01A32858
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A31366 push eax; iretd 0_2_01A31369
Source: INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Static PE information: section name: .text entropy: 7.99517005757836
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA096E rdtsc 0_2_01AA096E
Found large amount of non-executed APIs
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe API coverage: 0.6 %
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe TID: 4164 Thread sleep time: -30000s >= -30000s Jump to behavior
Program does not show much activity (idle)
Source: all processes Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Process information queried: ProcessInformation Jump to behavior

Anti Debugging
barindex
Found potential dummy code loops (likely to delay analysis)
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Process Stats: CPU usage > 42% for more than 60s
Checks if the current process is being debugged
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Process queried: DebugPort Jump to behavior
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA096E rdtsc 0_2_01AA096E
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_00E47CC3 LdrLoadDll, 0_2_00E47CC3
Contains functionality to read the PEB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA0185 mov eax, dword ptr fs:[00000030h] 0_2_01AA0185
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B04180 mov eax, dword ptr fs:[00000030h] 0_2_01B04180
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B04180 mov eax, dword ptr fs:[00000030h] 0_2_01B04180
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE019F mov eax, dword ptr fs:[00000030h] 0_2_01AE019F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE019F mov eax, dword ptr fs:[00000030h] 0_2_01AE019F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE019F mov eax, dword ptr fs:[00000030h] 0_2_01AE019F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE019F mov eax, dword ptr fs:[00000030h] 0_2_01AE019F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A197 mov eax, dword ptr fs:[00000030h] 0_2_01A5A197
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A197 mov eax, dword ptr fs:[00000030h] 0_2_01A5A197
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A197 mov eax, dword ptr fs:[00000030h] 0_2_01A5A197
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1C188 mov eax, dword ptr fs:[00000030h] 0_2_01B1C188
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1C188 mov eax, dword ptr fs:[00000030h] 0_2_01B1C188
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A901F8 mov eax, dword ptr fs:[00000030h] 0_2_01A901F8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B361E5 mov eax, dword ptr fs:[00000030h] 0_2_01B361E5
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B261C3 mov eax, dword ptr fs:[00000030h] 0_2_01B261C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B261C3 mov eax, dword ptr fs:[00000030h] 0_2_01B261C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE1D0 mov eax, dword ptr fs:[00000030h] 0_2_01ADE1D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE1D0 mov eax, dword ptr fs:[00000030h] 0_2_01ADE1D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE1D0 mov ecx, dword ptr fs:[00000030h] 0_2_01ADE1D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE1D0 mov eax, dword ptr fs:[00000030h] 0_2_01ADE1D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE1D0 mov eax, dword ptr fs:[00000030h] 0_2_01ADE1D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A90124 mov eax, dword ptr fs:[00000030h] 0_2_01A90124
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B20115 mov eax, dword ptr fs:[00000030h] 0_2_01B20115
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0A118 mov ecx, dword ptr fs:[00000030h] 0_2_01B0A118
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0A118 mov eax, dword ptr fs:[00000030h] 0_2_01B0A118
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0A118 mov eax, dword ptr fs:[00000030h] 0_2_01B0A118
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0A118 mov eax, dword ptr fs:[00000030h] 0_2_01B0A118
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov ecx, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov ecx, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov ecx, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov eax, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E10E mov ecx, dword ptr fs:[00000030h] 0_2_01B0E10E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34164 mov eax, dword ptr fs:[00000030h] 0_2_01B34164
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34164 mov eax, dword ptr fs:[00000030h] 0_2_01B34164
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF4144 mov eax, dword ptr fs:[00000030h] 0_2_01AF4144
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF4144 mov eax, dword ptr fs:[00000030h] 0_2_01AF4144
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF4144 mov ecx, dword ptr fs:[00000030h] 0_2_01AF4144
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF4144 mov eax, dword ptr fs:[00000030h] 0_2_01AF4144
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF4144 mov eax, dword ptr fs:[00000030h] 0_2_01AF4144
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A66154 mov eax, dword ptr fs:[00000030h] 0_2_01A66154
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A66154 mov eax, dword ptr fs:[00000030h] 0_2_01A66154
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5C156 mov eax, dword ptr fs:[00000030h] 0_2_01A5C156
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF8158 mov eax, dword ptr fs:[00000030h] 0_2_01AF8158
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A580A0 mov eax, dword ptr fs:[00000030h] 0_2_01A580A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF80A8 mov eax, dword ptr fs:[00000030h] 0_2_01AF80A8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B260B8 mov eax, dword ptr fs:[00000030h] 0_2_01B260B8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B260B8 mov ecx, dword ptr fs:[00000030h] 0_2_01B260B8
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6208A mov eax, dword ptr fs:[00000030h] 0_2_01A6208A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A0E3 mov ecx, dword ptr fs:[00000030h] 0_2_01A5A0E3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE60E0 mov eax, dword ptr fs:[00000030h] 0_2_01AE60E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A680E9 mov eax, dword ptr fs:[00000030h] 0_2_01A680E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5C0F0 mov eax, dword ptr fs:[00000030h] 0_2_01A5C0F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA20F0 mov ecx, dword ptr fs:[00000030h] 0_2_01AA20F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE20DE mov eax, dword ptr fs:[00000030h] 0_2_01AE20DE
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A020 mov eax, dword ptr fs:[00000030h] 0_2_01A5A020
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5C020 mov eax, dword ptr fs:[00000030h] 0_2_01A5C020
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6030 mov eax, dword ptr fs:[00000030h] 0_2_01AF6030
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE4000 mov ecx, dword ptr fs:[00000030h] 0_2_01AE4000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B02000 mov eax, dword ptr fs:[00000030h] 0_2_01B02000
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E016 mov eax, dword ptr fs:[00000030h] 0_2_01A7E016
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E016 mov eax, dword ptr fs:[00000030h] 0_2_01A7E016
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E016 mov eax, dword ptr fs:[00000030h] 0_2_01A7E016
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E016 mov eax, dword ptr fs:[00000030h] 0_2_01A7E016
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8C073 mov eax, dword ptr fs:[00000030h] 0_2_01A8C073
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A62050 mov eax, dword ptr fs:[00000030h] 0_2_01A62050
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6050 mov eax, dword ptr fs:[00000030h] 0_2_01AE6050
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8438F mov eax, dword ptr fs:[00000030h] 0_2_01A8438F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8438F mov eax, dword ptr fs:[00000030h] 0_2_01A8438F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E388 mov eax, dword ptr fs:[00000030h] 0_2_01A5E388
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E388 mov eax, dword ptr fs:[00000030h] 0_2_01A5E388
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E388 mov eax, dword ptr fs:[00000030h] 0_2_01A5E388
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58397 mov eax, dword ptr fs:[00000030h] 0_2_01A58397
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58397 mov eax, dword ptr fs:[00000030h] 0_2_01A58397
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58397 mov eax, dword ptr fs:[00000030h] 0_2_01A58397
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A703E9 mov eax, dword ptr fs:[00000030h] 0_2_01A703E9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A963FF mov eax, dword ptr fs:[00000030h] 0_2_01A963FF
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E3F0 mov eax, dword ptr fs:[00000030h] 0_2_01A7E3F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E3F0 mov eax, dword ptr fs:[00000030h] 0_2_01A7E3F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E3F0 mov eax, dword ptr fs:[00000030h] 0_2_01A7E3F0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B043D4 mov eax, dword ptr fs:[00000030h] 0_2_01B043D4
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B043D4 mov eax, dword ptr fs:[00000030h] 0_2_01B043D4
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A683C0 mov eax, dword ptr fs:[00000030h] 0_2_01A683C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A683C0 mov eax, dword ptr fs:[00000030h] 0_2_01A683C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A683C0 mov eax, dword ptr fs:[00000030h] 0_2_01A683C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A683C0 mov eax, dword ptr fs:[00000030h] 0_2_01A683C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A3C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A3C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E3DB mov eax, dword ptr fs:[00000030h] 0_2_01B0E3DB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E3DB mov eax, dword ptr fs:[00000030h] 0_2_01B0E3DB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E3DB mov ecx, dword ptr fs:[00000030h] 0_2_01B0E3DB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0E3DB mov eax, dword ptr fs:[00000030h] 0_2_01B0E3DB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE63C0 mov eax, dword ptr fs:[00000030h] 0_2_01AE63C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1C3CD mov eax, dword ptr fs:[00000030h] 0_2_01B1C3CD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B38324 mov eax, dword ptr fs:[00000030h] 0_2_01B38324
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B38324 mov ecx, dword ptr fs:[00000030h] 0_2_01B38324
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B38324 mov eax, dword ptr fs:[00000030h] 0_2_01B38324
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B38324 mov eax, dword ptr fs:[00000030h] 0_2_01B38324
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A30B mov eax, dword ptr fs:[00000030h] 0_2_01A9A30B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A30B mov eax, dword ptr fs:[00000030h] 0_2_01A9A30B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A30B mov eax, dword ptr fs:[00000030h] 0_2_01A9A30B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5C310 mov ecx, dword ptr fs:[00000030h] 0_2_01A5C310
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A80310 mov ecx, dword ptr fs:[00000030h] 0_2_01A80310
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0437C mov eax, dword ptr fs:[00000030h] 0_2_01B0437C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2A352 mov eax, dword ptr fs:[00000030h] 0_2_01B2A352
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B08350 mov ecx, dword ptr fs:[00000030h] 0_2_01B08350
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE2349 mov eax, dword ptr fs:[00000030h] 0_2_01AE2349
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov eax, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov eax, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov eax, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov ecx, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov eax, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE035C mov eax, dword ptr fs:[00000030h] 0_2_01AE035C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B3634F mov eax, dword ptr fs:[00000030h] 0_2_01B3634F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A702A0 mov eax, dword ptr fs:[00000030h] 0_2_01A702A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A702A0 mov eax, dword ptr fs:[00000030h] 0_2_01A702A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov eax, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov ecx, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov eax, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov eax, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov eax, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF62A0 mov eax, dword ptr fs:[00000030h] 0_2_01AF62A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE0283 mov eax, dword ptr fs:[00000030h] 0_2_01AE0283
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE0283 mov eax, dword ptr fs:[00000030h] 0_2_01AE0283
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE0283 mov eax, dword ptr fs:[00000030h] 0_2_01AE0283
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E284 mov eax, dword ptr fs:[00000030h] 0_2_01A9E284
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E284 mov eax, dword ptr fs:[00000030h] 0_2_01A9E284
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A702E1 mov eax, dword ptr fs:[00000030h] 0_2_01A702E1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A702E1 mov eax, dword ptr fs:[00000030h] 0_2_01A702E1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A702E1 mov eax, dword ptr fs:[00000030h] 0_2_01A702E1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A2C3 mov eax, dword ptr fs:[00000030h] 0_2_01A6A2C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A2C3 mov eax, dword ptr fs:[00000030h] 0_2_01A6A2C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A2C3 mov eax, dword ptr fs:[00000030h] 0_2_01A6A2C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A2C3 mov eax, dword ptr fs:[00000030h] 0_2_01A6A2C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A2C3 mov eax, dword ptr fs:[00000030h] 0_2_01A6A2C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B362D6 mov eax, dword ptr fs:[00000030h] 0_2_01B362D6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5823B mov eax, dword ptr fs:[00000030h] 0_2_01A5823B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B10274 mov eax, dword ptr fs:[00000030h] 0_2_01B10274
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64260 mov eax, dword ptr fs:[00000030h] 0_2_01A64260
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64260 mov eax, dword ptr fs:[00000030h] 0_2_01A64260
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64260 mov eax, dword ptr fs:[00000030h] 0_2_01A64260
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5826B mov eax, dword ptr fs:[00000030h] 0_2_01A5826B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1A250 mov eax, dword ptr fs:[00000030h] 0_2_01B1A250
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1A250 mov eax, dword ptr fs:[00000030h] 0_2_01B1A250
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE8243 mov eax, dword ptr fs:[00000030h] 0_2_01AE8243
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE8243 mov ecx, dword ptr fs:[00000030h] 0_2_01AE8243
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B3625D mov eax, dword ptr fs:[00000030h] 0_2_01B3625D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5A250 mov eax, dword ptr fs:[00000030h] 0_2_01A5A250
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A66259 mov eax, dword ptr fs:[00000030h] 0_2_01A66259
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE05A7 mov eax, dword ptr fs:[00000030h] 0_2_01AE05A7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE05A7 mov eax, dword ptr fs:[00000030h] 0_2_01AE05A7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE05A7 mov eax, dword ptr fs:[00000030h] 0_2_01AE05A7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A845B1 mov eax, dword ptr fs:[00000030h] 0_2_01A845B1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A845B1 mov eax, dword ptr fs:[00000030h] 0_2_01A845B1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A94588 mov eax, dword ptr fs:[00000030h] 0_2_01A94588
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A62582 mov eax, dword ptr fs:[00000030h] 0_2_01A62582
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A62582 mov ecx, dword ptr fs:[00000030h] 0_2_01A62582
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E59C mov eax, dword ptr fs:[00000030h] 0_2_01A9E59C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C5ED mov eax, dword ptr fs:[00000030h] 0_2_01A9C5ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C5ED mov eax, dword ptr fs:[00000030h] 0_2_01A9C5ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A625E0 mov eax, dword ptr fs:[00000030h] 0_2_01A625E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E5E7 mov eax, dword ptr fs:[00000030h] 0_2_01A8E5E7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E5CF mov eax, dword ptr fs:[00000030h] 0_2_01A9E5CF
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E5CF mov eax, dword ptr fs:[00000030h] 0_2_01A9E5CF
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A665D0 mov eax, dword ptr fs:[00000030h] 0_2_01A665D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A5D0 mov eax, dword ptr fs:[00000030h] 0_2_01A9A5D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A5D0 mov eax, dword ptr fs:[00000030h] 0_2_01A9A5D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70535 mov eax, dword ptr fs:[00000030h] 0_2_01A70535
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E53E mov eax, dword ptr fs:[00000030h] 0_2_01A8E53E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E53E mov eax, dword ptr fs:[00000030h] 0_2_01A8E53E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E53E mov eax, dword ptr fs:[00000030h] 0_2_01A8E53E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E53E mov eax, dword ptr fs:[00000030h] 0_2_01A8E53E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E53E mov eax, dword ptr fs:[00000030h] 0_2_01A8E53E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6500 mov eax, dword ptr fs:[00000030h] 0_2_01AF6500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34500 mov eax, dword ptr fs:[00000030h] 0_2_01B34500
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9656A mov eax, dword ptr fs:[00000030h] 0_2_01A9656A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9656A mov eax, dword ptr fs:[00000030h] 0_2_01A9656A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9656A mov eax, dword ptr fs:[00000030h] 0_2_01A9656A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68550 mov eax, dword ptr fs:[00000030h] 0_2_01A68550
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68550 mov eax, dword ptr fs:[00000030h] 0_2_01A68550
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A664AB mov eax, dword ptr fs:[00000030h] 0_2_01A664AB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A944B0 mov ecx, dword ptr fs:[00000030h] 0_2_01A944B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEA4B0 mov eax, dword ptr fs:[00000030h] 0_2_01AEA4B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1A49A mov eax, dword ptr fs:[00000030h] 0_2_01B1A49A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A604E5 mov ecx, dword ptr fs:[00000030h] 0_2_01A604E5
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5C427 mov eax, dword ptr fs:[00000030h] 0_2_01A5C427
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E420 mov eax, dword ptr fs:[00000030h] 0_2_01A5E420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E420 mov eax, dword ptr fs:[00000030h] 0_2_01A5E420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5E420 mov eax, dword ptr fs:[00000030h] 0_2_01A5E420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE6420 mov eax, dword ptr fs:[00000030h] 0_2_01AE6420
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A430 mov eax, dword ptr fs:[00000030h] 0_2_01A9A430
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A98402 mov eax, dword ptr fs:[00000030h] 0_2_01A98402
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A98402 mov eax, dword ptr fs:[00000030h] 0_2_01A98402
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A98402 mov eax, dword ptr fs:[00000030h] 0_2_01A98402
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEC460 mov ecx, dword ptr fs:[00000030h] 0_2_01AEC460
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8A470 mov eax, dword ptr fs:[00000030h] 0_2_01A8A470
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8A470 mov eax, dword ptr fs:[00000030h] 0_2_01A8A470
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8A470 mov eax, dword ptr fs:[00000030h] 0_2_01A8A470
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B1A456 mov eax, dword ptr fs:[00000030h] 0_2_01B1A456
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9E443 mov eax, dword ptr fs:[00000030h] 0_2_01A9E443
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8245A mov eax, dword ptr fs:[00000030h] 0_2_01A8245A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5645D mov eax, dword ptr fs:[00000030h] 0_2_01A5645D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A607AF mov eax, dword ptr fs:[00000030h] 0_2_01A607AF
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B147A0 mov eax, dword ptr fs:[00000030h] 0_2_01B147A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0678E mov eax, dword ptr fs:[00000030h] 0_2_01B0678E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A827ED mov eax, dword ptr fs:[00000030h] 0_2_01A827ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A827ED mov eax, dword ptr fs:[00000030h] 0_2_01A827ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A827ED mov eax, dword ptr fs:[00000030h] 0_2_01A827ED
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEE7E1 mov eax, dword ptr fs:[00000030h] 0_2_01AEE7E1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A647FB mov eax, dword ptr fs:[00000030h] 0_2_01A647FB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A647FB mov eax, dword ptr fs:[00000030h] 0_2_01A647FB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6C7C0 mov eax, dword ptr fs:[00000030h] 0_2_01A6C7C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE07C3 mov eax, dword ptr fs:[00000030h] 0_2_01AE07C3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C720 mov eax, dword ptr fs:[00000030h] 0_2_01A9C720
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C720 mov eax, dword ptr fs:[00000030h] 0_2_01A9C720
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9273C mov eax, dword ptr fs:[00000030h] 0_2_01A9273C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9273C mov ecx, dword ptr fs:[00000030h] 0_2_01A9273C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9273C mov eax, dword ptr fs:[00000030h] 0_2_01A9273C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADC730 mov eax, dword ptr fs:[00000030h] 0_2_01ADC730
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C700 mov eax, dword ptr fs:[00000030h] 0_2_01A9C700
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60710 mov eax, dword ptr fs:[00000030h] 0_2_01A60710
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A90710 mov eax, dword ptr fs:[00000030h] 0_2_01A90710
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68770 mov eax, dword ptr fs:[00000030h] 0_2_01A68770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70770 mov eax, dword ptr fs:[00000030h] 0_2_01A70770
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9674D mov esi, dword ptr fs:[00000030h] 0_2_01A9674D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9674D mov eax, dword ptr fs:[00000030h] 0_2_01A9674D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9674D mov eax, dword ptr fs:[00000030h] 0_2_01A9674D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEE75D mov eax, dword ptr fs:[00000030h] 0_2_01AEE75D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60750 mov eax, dword ptr fs:[00000030h] 0_2_01A60750
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2750 mov eax, dword ptr fs:[00000030h] 0_2_01AA2750
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2750 mov eax, dword ptr fs:[00000030h] 0_2_01AA2750
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE4755 mov eax, dword ptr fs:[00000030h] 0_2_01AE4755
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C6A6 mov eax, dword ptr fs:[00000030h] 0_2_01A9C6A6
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A966B0 mov eax, dword ptr fs:[00000030h] 0_2_01A966B0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64690 mov eax, dword ptr fs:[00000030h] 0_2_01A64690
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64690 mov eax, dword ptr fs:[00000030h] 0_2_01A64690
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE6F2 mov eax, dword ptr fs:[00000030h] 0_2_01ADE6F2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE6F2 mov eax, dword ptr fs:[00000030h] 0_2_01ADE6F2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE6F2 mov eax, dword ptr fs:[00000030h] 0_2_01ADE6F2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE6F2 mov eax, dword ptr fs:[00000030h] 0_2_01ADE6F2
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE06F1 mov eax, dword ptr fs:[00000030h] 0_2_01AE06F1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE06F1 mov eax, dword ptr fs:[00000030h] 0_2_01AE06F1
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A6C7 mov ebx, dword ptr fs:[00000030h] 0_2_01A9A6C7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A6C7 mov eax, dword ptr fs:[00000030h] 0_2_01A9A6C7
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7E627 mov eax, dword ptr fs:[00000030h] 0_2_01A7E627
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A96620 mov eax, dword ptr fs:[00000030h] 0_2_01A96620
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A98620 mov eax, dword ptr fs:[00000030h] 0_2_01A98620
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6262C mov eax, dword ptr fs:[00000030h] 0_2_01A6262C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE609 mov eax, dword ptr fs:[00000030h] 0_2_01ADE609
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7260B mov eax, dword ptr fs:[00000030h] 0_2_01A7260B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA2619 mov eax, dword ptr fs:[00000030h] 0_2_01AA2619
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A660 mov eax, dword ptr fs:[00000030h] 0_2_01A9A660
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A660 mov eax, dword ptr fs:[00000030h] 0_2_01A9A660
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2866E mov eax, dword ptr fs:[00000030h] 0_2_01B2866E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2866E mov eax, dword ptr fs:[00000030h] 0_2_01B2866E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A92674 mov eax, dword ptr fs:[00000030h] 0_2_01A92674
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A7C640 mov eax, dword ptr fs:[00000030h] 0_2_01A7C640
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A729A0 mov eax, dword ptr fs:[00000030h] 0_2_01A729A0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A609AD mov eax, dword ptr fs:[00000030h] 0_2_01A609AD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A609AD mov eax, dword ptr fs:[00000030h] 0_2_01A609AD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE89B3 mov esi, dword ptr fs:[00000030h] 0_2_01AE89B3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE89B3 mov eax, dword ptr fs:[00000030h] 0_2_01AE89B3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE89B3 mov eax, dword ptr fs:[00000030h] 0_2_01AE89B3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEE9E0 mov eax, dword ptr fs:[00000030h] 0_2_01AEE9E0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A929F9 mov eax, dword ptr fs:[00000030h] 0_2_01A929F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A929F9 mov eax, dword ptr fs:[00000030h] 0_2_01A929F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2A9D3 mov eax, dword ptr fs:[00000030h] 0_2_01B2A9D3
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF69C0 mov eax, dword ptr fs:[00000030h] 0_2_01AF69C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6A9D0 mov eax, dword ptr fs:[00000030h] 0_2_01A6A9D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A949D0 mov eax, dword ptr fs:[00000030h] 0_2_01A949D0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE892A mov eax, dword ptr fs:[00000030h] 0_2_01AE892A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF892B mov eax, dword ptr fs:[00000030h] 0_2_01AF892B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE908 mov eax, dword ptr fs:[00000030h] 0_2_01ADE908
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADE908 mov eax, dword ptr fs:[00000030h] 0_2_01ADE908
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEC912 mov eax, dword ptr fs:[00000030h] 0_2_01AEC912
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58918 mov eax, dword ptr fs:[00000030h] 0_2_01A58918
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58918 mov eax, dword ptr fs:[00000030h] 0_2_01A58918
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA096E mov eax, dword ptr fs:[00000030h] 0_2_01AA096E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA096E mov edx, dword ptr fs:[00000030h] 0_2_01AA096E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AA096E mov eax, dword ptr fs:[00000030h] 0_2_01AA096E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B04978 mov eax, dword ptr fs:[00000030h] 0_2_01B04978
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B04978 mov eax, dword ptr fs:[00000030h] 0_2_01B04978
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A86962 mov eax, dword ptr fs:[00000030h] 0_2_01A86962
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A86962 mov eax, dword ptr fs:[00000030h] 0_2_01A86962
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A86962 mov eax, dword ptr fs:[00000030h] 0_2_01A86962
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEC97C mov eax, dword ptr fs:[00000030h] 0_2_01AEC97C
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AE0946 mov eax, dword ptr fs:[00000030h] 0_2_01AE0946
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34940 mov eax, dword ptr fs:[00000030h] 0_2_01B34940
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60887 mov eax, dword ptr fs:[00000030h] 0_2_01A60887
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEC89D mov eax, dword ptr fs:[00000030h] 0_2_01AEC89D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C8F9 mov eax, dword ptr fs:[00000030h] 0_2_01A9C8F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9C8F9 mov eax, dword ptr fs:[00000030h] 0_2_01A9C8F9
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2A8E4 mov eax, dword ptr fs:[00000030h] 0_2_01B2A8E4
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8E8C0 mov eax, dword ptr fs:[00000030h] 0_2_01A8E8C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B308C0 mov eax, dword ptr fs:[00000030h] 0_2_01B308C0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0483A mov eax, dword ptr fs:[00000030h] 0_2_01B0483A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0483A mov eax, dword ptr fs:[00000030h] 0_2_01B0483A
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9A830 mov eax, dword ptr fs:[00000030h] 0_2_01A9A830
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov eax, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov eax, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov eax, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov ecx, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov eax, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A82835 mov eax, dword ptr fs:[00000030h] 0_2_01A82835
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEC810 mov eax, dword ptr fs:[00000030h] 0_2_01AEC810
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEE872 mov eax, dword ptr fs:[00000030h] 0_2_01AEE872
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AEE872 mov eax, dword ptr fs:[00000030h] 0_2_01AEE872
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6870 mov eax, dword ptr fs:[00000030h] 0_2_01AF6870
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6870 mov eax, dword ptr fs:[00000030h] 0_2_01AF6870
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A72840 mov ecx, dword ptr fs:[00000030h] 0_2_01A72840
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A90854 mov eax, dword ptr fs:[00000030h] 0_2_01A90854
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64859 mov eax, dword ptr fs:[00000030h] 0_2_01A64859
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A64859 mov eax, dword ptr fs:[00000030h] 0_2_01A64859
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B14BB0 mov eax, dword ptr fs:[00000030h] 0_2_01B14BB0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B14BB0 mov eax, dword ptr fs:[00000030h] 0_2_01B14BB0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70BBE mov eax, dword ptr fs:[00000030h] 0_2_01A70BBE
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A70BBE mov eax, dword ptr fs:[00000030h] 0_2_01A70BBE
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8EBFC mov eax, dword ptr fs:[00000030h] 0_2_01A8EBFC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68BF0 mov eax, dword ptr fs:[00000030h] 0_2_01A68BF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68BF0 mov eax, dword ptr fs:[00000030h] 0_2_01A68BF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68BF0 mov eax, dword ptr fs:[00000030h] 0_2_01A68BF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AECBF0 mov eax, dword ptr fs:[00000030h] 0_2_01AECBF0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0EBD0 mov eax, dword ptr fs:[00000030h] 0_2_01B0EBD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A80BCB mov eax, dword ptr fs:[00000030h] 0_2_01A80BCB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A80BCB mov eax, dword ptr fs:[00000030h] 0_2_01A80BCB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A80BCB mov eax, dword ptr fs:[00000030h] 0_2_01A80BCB
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60BCD mov eax, dword ptr fs:[00000030h] 0_2_01A60BCD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60BCD mov eax, dword ptr fs:[00000030h] 0_2_01A60BCD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60BCD mov eax, dword ptr fs:[00000030h] 0_2_01A60BCD
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8EB20 mov eax, dword ptr fs:[00000030h] 0_2_01A8EB20
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8EB20 mov eax, dword ptr fs:[00000030h] 0_2_01A8EB20
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B28B28 mov eax, dword ptr fs:[00000030h] 0_2_01B28B28
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B28B28 mov eax, dword ptr fs:[00000030h] 0_2_01B28B28
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01ADEB1D mov eax, dword ptr fs:[00000030h] 0_2_01ADEB1D
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34B00 mov eax, dword ptr fs:[00000030h] 0_2_01B34B00
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A5CB7E mov eax, dword ptr fs:[00000030h] 0_2_01A5CB7E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0EB50 mov eax, dword ptr fs:[00000030h] 0_2_01B0EB50
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B32B57 mov eax, dword ptr fs:[00000030h] 0_2_01B32B57
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B32B57 mov eax, dword ptr fs:[00000030h] 0_2_01B32B57
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B32B57 mov eax, dword ptr fs:[00000030h] 0_2_01B32B57
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B32B57 mov eax, dword ptr fs:[00000030h] 0_2_01B32B57
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6B40 mov eax, dword ptr fs:[00000030h] 0_2_01AF6B40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AF6B40 mov eax, dword ptr fs:[00000030h] 0_2_01AF6B40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B2AB40 mov eax, dword ptr fs:[00000030h] 0_2_01B2AB40
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B08B42 mov eax, dword ptr fs:[00000030h] 0_2_01B08B42
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A58B50 mov eax, dword ptr fs:[00000030h] 0_2_01A58B50
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B14B4B mov eax, dword ptr fs:[00000030h] 0_2_01B14B4B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B14B4B mov eax, dword ptr fs:[00000030h] 0_2_01B14B4B
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68AA0 mov eax, dword ptr fs:[00000030h] 0_2_01A68AA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A68AA0 mov eax, dword ptr fs:[00000030h] 0_2_01A68AA0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB6AA4 mov eax, dword ptr fs:[00000030h] 0_2_01AB6AA4
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A6EA80 mov eax, dword ptr fs:[00000030h] 0_2_01A6EA80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B34A80 mov eax, dword ptr fs:[00000030h] 0_2_01B34A80
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A98A90 mov edx, dword ptr fs:[00000030h] 0_2_01A98A90
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9AAEE mov eax, dword ptr fs:[00000030h] 0_2_01A9AAEE
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9AAEE mov eax, dword ptr fs:[00000030h] 0_2_01A9AAEE
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB6ACC mov eax, dword ptr fs:[00000030h] 0_2_01AB6ACC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB6ACC mov eax, dword ptr fs:[00000030h] 0_2_01AB6ACC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AB6ACC mov eax, dword ptr fs:[00000030h] 0_2_01AB6ACC
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A60AD0 mov eax, dword ptr fs:[00000030h] 0_2_01A60AD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A94AD0 mov eax, dword ptr fs:[00000030h] 0_2_01A94AD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A94AD0 mov eax, dword ptr fs:[00000030h] 0_2_01A94AD0
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A8EA2E mov eax, dword ptr fs:[00000030h] 0_2_01A8EA2E
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9CA24 mov eax, dword ptr fs:[00000030h] 0_2_01A9CA24
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9CA38 mov eax, dword ptr fs:[00000030h] 0_2_01A9CA38
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A84A35 mov eax, dword ptr fs:[00000030h] 0_2_01A84A35
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A84A35 mov eax, dword ptr fs:[00000030h] 0_2_01A84A35
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01AECA11 mov eax, dword ptr fs:[00000030h] 0_2_01AECA11
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9CA6F mov eax, dword ptr fs:[00000030h] 0_2_01A9CA6F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9CA6F mov eax, dword ptr fs:[00000030h] 0_2_01A9CA6F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01A9CA6F mov eax, dword ptr fs:[00000030h] 0_2_01A9CA6F
Source: C:\Users\user\Desktop\INQUIRY 2024-SP000422-B(01) INQ24-_1.exe Code function: 0_2_01B0EA60 mov eax, dword ptr fs:[00000030h] 0_2_01B0EA60
Program does not show much activity (idle)
Source: all processes Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected

Stealing of Sensitive Information
barindex
Yara detected FormBook
Source: Yara match File source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected FormBook
Source: Yara match File source: 0.2.INQUIRY 2024-SP000422-B(01) INQ24-_1.exe.e30000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.2856776796.00000000014E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.2856642535.0000000000E31000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1467273 Sample: INQUIRY 2024-SP000422-B(01)... Startdate: 04/07/2024 Architecture: WINDOWS Score: 84 7 Malicious sample detected (through community Yara rule) 2->7 9 Antivirus / Scanner detection for submitted sample 2->9 11 Multi AV Scanner detection for submitted file 2->11 13 4 other signatures 2->13 5 INQUIRY 2024-SP000422-B(01) INQ24-_1.exe 2->5         started        process3
⊘No contacted IP infos