Windows Analysis Report
Micra.exe

Overview

General Information

Sample name: Micra.exe
Analysis ID: 1545328
MD5: 1ad521dbfab2e258ac84aa46e82fb5c7
SHA1: 560a6c25f441e888a805b328f773969a82e2c4a3
SHA256: 5249ac3848e42ac5264815414a321bfa6a698970ff8ffea1dd1d0a4e070b0224
Infos:

Detection

FormBook, GuLoader
Score: 92
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected FormBook
Yara detected GuLoader
AI detected suspicious sample
Switches to a custom stack to bypass stack traces
Tries to detect virtualization through RDTSC time measurements
Abnormal high CPU Usage
Checks if the current process is being debugged
Contains functionality for execution timing, often used to detect debuggers
Contains functionality for read data from the clipboard
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Contains functionality to call native functions
Contains functionality to dynamically determine API calls
Contains functionality to read the PEB
Contains functionality to shutdown / reboot the system
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Detected potential crypto function
Drops PE files
Found dropped PE file which has not been started or loaded
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE / OLE file has an invalid certificate
Sample file is different than original file name gathered from version info
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Yara signature match

Classification

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: Micra.exe Avira: detected
Multi AV Scanner detection for submitted file
Source: Micra.exe ReversingLabs: Detection: 16%
Yara detected FormBook
Source: Yara match File source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 100.0% probability
Uses 32bit PE files
Source: Micra.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Source: unknown HTTPS traffic detected: 142.250.184.206:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.4:50003 version: TLS 1.2
Source: Micra.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: mshtml.pdb source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp
Source: Binary string: wntdll.pdbUGP source: Micra.exe, 00000005.00000002.4039419079.0000000035730000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4039419079.00000000358CE000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974687432.00000000353C7000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3977470529.000000003557D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: wntdll.pdb source: Micra.exe, Micra.exe, 00000005.00000002.4039419079.0000000035730000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4039419079.00000000358CE000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974687432.00000000353C7000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3977470529.000000003557D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: mshtml.pdbUGP source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_00406232 FindFirstFileA,FindClose, 0_2_00406232
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004056F7 GetTempPathA,DeleteFileA,lstrcatA,lstrcatA,lstrlenA,FindFirstFileA,FindNextFileA,FindClose, 0_2_004056F7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004026F8 FindFirstFileA, 0_2_004026F8
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19
Suricata IDS alerts with low severity for network traffic
Source: Network traffic Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:50002 -> 142.250.184.206:443
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: GET /uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Host: drive.google.comCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /download?id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS&export=download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Cache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Host: drive.google.comCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /download?id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS&export=download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0Cache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
Source: global traffic DNS traffic detected: DNS query: drive.google.com
Source: global traffic DNS traffic detected: DNS query: drive.usercontent.google.com
Source: Micra.exe String found in binary or memory: http://nsis.sf.net/NSIS_Error
Source: Micra.exe String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp String found in binary or memory: http://www.ftp.ftp://ftp.gopher.
Source: Micra.exe, 00000005.00000001.3420489258.00000000005F2000.00000020.00000001.01000000.00000007.sdmp String found in binary or memory: http://www.w3c.org/TR/1999/REC-html401-19991224/frameset.dtd
Source: Micra.exe, 00000005.00000001.3420489258.00000000005F2000.00000020.00000001.01000000.00000007.sdmp String found in binary or memory: http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://apis.google.com
Source: Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/
Source: Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/s
Source: Micra.exe, 00000005.00000002.4039037120.0000000034B40000.00000004.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015584233.000000000566B000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS
Source: Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS)
Source: Micra.exe, 00000005.00000002.4015584233.000000000566B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaSfJ
Source: Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.google.com/uc?export=download&id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaSk
Source: Micra.exe, 00000005.00000003.3530333738.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974977352.00000000056CA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975134687.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975222724.00000000056CA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015767984.00000000056CD000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974880692.00000000056C8000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.usercontent.google.com/
Source: Micra.exe, 00000005.00000003.3974880692.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015584233.000000000566B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.usercontent.google.com/download?id=1oy1LR6ySauupAi9qDWRVXnDK8AVMnjaS&export=download
Source: Micra.exe, 00000005.00000003.3530333738.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974977352.00000000056CA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975134687.00000000056C8000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975222724.00000000056CA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015767984.00000000056CD000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974880692.00000000056C8000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://drive.usercontent.google.com/vCp
Source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp String found in binary or memory: https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://ssl.gstatic.com
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.google-analytics.com;report-uri
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.google.com
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.googletagmanager.com
Source: Micra.exe, 00000005.00000003.3486956573.00000000056CE000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3486883007.00000000056CE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://www.gstatic.com
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown HTTPS traffic detected: 142.250.184.206:443 -> 192.168.2.4:50002 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.4:50003 version: TLS 1.2
Contains functionality for read data from the clipboard
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_00405194 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageA,SendMessageA,SendMessageA,SendMessageA,SendMessageA,SendMessageA,ShowWindow,ShowWindow,GetDlgItem,SendMessageA,SendMessageA,SendMessageA,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageA,CreatePopupMenu,AppendMenuA,GetWindowRect,TrackPopupMenu,SendMessageA,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageA,GlobalUnlock,SetClipboardData,CloseClipboard, 0_2_00405194

E-Banking Fraud
barindex
Yara detected FormBook
Source: Yara match File source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

System Summary
barindex
Malicious sample detected (through community Yara rule)
Source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 Author: unknown
Abnormal high CPU Usage
Source: C:\Users\user\Desktop\Micra.exe Process Stats: CPU usage > 49%
Contains functionality to call native functions
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A35C0 NtCreateMutant,LdrInitializeThunk, 5_2_357A35C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2DF0 NtQuerySystemInformation,LdrInitializeThunk, 5_2_357A2DF0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2C70 NtFreeVirtualMemory,LdrInitializeThunk, 5_2_357A2C70
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A3010 NtOpenDirectoryObject, 5_2_357A3010
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A3090 NtSetValueKey, 5_2_357A3090
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A3D70 NtOpenThread, 5_2_357A3D70
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A3D10 NtOpenProcessToken, 5_2_357A3D10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A39B0 NtGetContextThread, 5_2_357A39B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A4650 NtSuspendThread, 5_2_357A4650
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A4340 NtSetContextThread, 5_2_357A4340
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2D30 NtUnmapViewOfSection, 5_2_357A2D30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2D10 NtMapViewOfSection, 5_2_357A2D10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2D00 NtSetInformationFile, 5_2_357A2D00
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2DD0 NtDelayExecution, 5_2_357A2DD0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2DB0 NtEnumerateKey, 5_2_357A2DB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2C60 NtCreateKey, 5_2_357A2C60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2C00 NtQueryInformationProcess, 5_2_357A2C00
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2CF0 NtOpenProcess, 5_2_357A2CF0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2CC0 NtQueryVirtualMemory, 5_2_357A2CC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2CA0 NtQueryInformationToken, 5_2_357A2CA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2F60 NtCreateProcessEx, 5_2_357A2F60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2F30 NtCreateSection, 5_2_357A2F30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2FE0 NtCreateFile, 5_2_357A2FE0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2FB0 NtResumeThread, 5_2_357A2FB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2FA0 NtQuerySection, 5_2_357A2FA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2F90 NtProtectVirtualMemory, 5_2_357A2F90
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2E30 NtWriteVirtualMemory, 5_2_357A2E30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2EE0 NtQueueApcThread, 5_2_357A2EE0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2EA0 NtAdjustPrivilegesToken, 5_2_357A2EA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2E80 NtReadVirtualMemory, 5_2_357A2E80
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2B60 NtClose, 5_2_357A2B60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2BF0 NtAllocateVirtualMemory, 5_2_357A2BF0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2BE0 NtQueryValueKey, 5_2_357A2BE0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2BA0 NtEnumerateValueKey, 5_2_357A2BA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2B80 NtQueryInformationFile, 5_2_357A2B80
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2AF0 NtWriteFile, 5_2_357A2AF0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2AD0 NtReadFile, 5_2_357A2AD0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A2AB0 NtWaitForSingleObject, 5_2_357A2AB0
Contains functionality to shutdown / reboot the system
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004031BB EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,GetModuleHandleA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,OleUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 0_2_004031BB
Creates files inside the system directory
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Windows\resources\nringsmiddelet.ini Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Windows\terzetters Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Windows\Fonts\karrooers.ini Jump to behavior
Detected potential crypto function
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004049D3 0_2_004049D3
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004065BB 0_2_004065BB
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192312 0_2_03192312
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191316 0_2_03191316
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191F23 0_2_03191F23
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191325 0_2_03191325
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191F5D 0_2_03191F5D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190F44 0_2_03190F44
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191B46 0_2_03191B46
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191368 0_2_03191368
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319276E 0_2_0319276E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190F64 0_2_03190F64
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319139C 0_2_0319139C
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191F95 0_2_03191F95
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191B94 0_2_03191B94
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192797 0_2_03192797
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192389 0_2_03192389
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191782 0_2_03191782
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031923A8 0_2_031923A8
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190FA1 0_2_03190FA1
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190FD8 0_2_03190FD8
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031917DD 0_2_031917DD
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031923C2 0_2_031923C2
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031913C2 0_2_031913C2
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031927C6 0_2_031927C6
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031917F9 0_2_031917F9
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191FF9 0_2_03191FF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031927FE 0_2_031927FE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031913F3 0_2_031913F3
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191BE3 0_2_03191BE3
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192613 0_2_03192613
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190E3B 0_2_03190E3B
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319123A 0_2_0319123A
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319022B 0_2_0319022B
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319222D 0_2_0319222D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191E2E 0_2_03191E2E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191227 0_2_03191227
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191A53 0_2_03191A53
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192A52 0_2_03192A52
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192647 0_2_03192647
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192278 0_2_03192278
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319127D 0_2_0319127D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191677 0_2_03191677
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192A77 0_2_03192A77
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190E68 0_2_03190E68
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191E6A 0_2_03191E6A
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191A6C 0_2_03191A6C
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192261 0_2_03192261
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191697 0_2_03191697
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192681 0_2_03192681
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191EB8 0_2_03191EB8
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031912B1 0_2_031912B1
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031922B0 0_2_031922B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190EB7 0_2_03190EB7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031926A8 0_2_031926A8
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191AAE 0_2_03191AAE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191ACD 0_2_03191ACD
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192AF9 0_2_03192AF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031916FE 0_2_031916FE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191EF7 0_2_03191EF7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031926E9 0_2_031926E9
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031922E0 0_2_031922E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190EE4 0_2_03190EE4
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319211F 0_2_0319211F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191511 0_2_03191511
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191908 0_2_03191908
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319290D 0_2_0319290D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192533 0_2_03192533
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191D2F 0_2_03191D2F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191120 0_2_03191120
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191D5F 0_2_03191D5F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191950 0_2_03191950
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191172 0_2_03191172
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191977 0_2_03191977
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192964 0_2_03192964
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191D9A 0_2_03191D9A
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192191 0_2_03192191
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192995 0_2_03192995
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192597 0_2_03192597
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191589 0_2_03191589
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031925B7 0_2_031925B7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031919B6 0_2_031919B6
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190DDB 0_2_03190DDB
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031925DC 0_2_031925DC
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031929D7 0_2_031929D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031921D7 0_2_031921D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031929FC 0_2_031929FC
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190DFE 0_2_03190DFE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03190DEF 0_2_03190DEF
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031919EE 0_2_031919EE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031911E6 0_2_031911E6
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319241F 0_2_0319241F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192011 0_2_03192011
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191012 0_2_03191012
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192838 0_2_03192838
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319103E 0_2_0319103E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191437 0_2_03191437
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319242F 0_2_0319242F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191827 0_2_03191827
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319245D 0_2_0319245D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192053 0_2_03192053
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191854 0_2_03191854
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191C4E 0_2_03191C4E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192075 0_2_03192075
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191477 0_2_03191477
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319106F 0_2_0319106F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319009B 0_2_0319009B
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03192896 0_2_03192896
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191C8C 0_2_03191C8C
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191887 0_2_03191887
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031920B8 0_2_031920B8
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031924BB 0_2_031924BB
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031928D1 0_2_031928D1
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031910CB 0_2_031910CB
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03191CCA 0_2_03191CCA
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031924FC 0_2_031924FC
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031920F0 0_2_031920F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580D5B0 5_2_3580D5B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358395C3 5_2_358395C3
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35827571 5_2_35827571
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582F43F 5_2_3582F43F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582F7B0 5_2_3582F7B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357617EC 5_2_357617EC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B5630 5_2_357B5630
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358216CC 5_2_358216CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A516C 5_2_357A516C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577B1B0 5_2_3577B1B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583B16B 5_2_3583B16B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F0CC 5_2_3581F0CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582F0E0 5_2_3582F0E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358270E9 5_2_358270E9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582132D 5_2_3582132D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B739A 5_2_357B739A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D2F0 5_2_3578D2F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578FDC0 5_2_3578FDC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35821D5A 5_2_35821D5A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35827D73 5_2_35827D73
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582FCF2 5_2_3582FCF2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582FFB1 5_2_3582FFB1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582FF09 5_2_3582FF09
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35779950 5_2_35779950
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B950 5_2_3578B950
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35775990 5_2_35775990
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD800 5_2_357DD800
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357738E0 5_2_357738E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357ADBF9 5_2_357ADBF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E5BF0 5_2_357E5BF0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582FB76 5_2_3582FB76
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E3A6C 5_2_357E3A6C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35811AA3 5_2_35811AA3
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DAAC 5_2_3580DAAC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581DAC6 5_2_3581DAC6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35827A46 5_2_35827A46
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582FA49 5_2_3582FA49
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B5AA0 5_2_357B5AA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35830591 5_2_35830591
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35770535 5_2_35770535
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581E4F6 5_2_3581E4F6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35814420 5_2_35814420
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35822446 5_2_35822446
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35770770 5_2_35770770
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35794750 5_2_35794750
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578C6E0 5_2_3578C6E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358241A2 5_2_358241A2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358301AC 5_2_358301AC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358281CC 5_2_358281CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35760100 5_2_35760100
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580A118 5_2_3580A118
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35802000 5_2_35802000
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358303E6 5_2_358303E6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577E3F0 5_2_3577E3F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F02C0 5_2_357F02C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35810274 5_2_35810274
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580CD1F 5_2_3580CD1F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35788DBF 5_2_35788DBF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577EC60 5_2_3577EC60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35810CB5 5_2_35810CB5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35760CF2 5_2_35760CF2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35790F30 5_2_35790F30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B2F28 5_2_357B2F28
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577CFE0 5_2_3577CFE0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35812F30 5_2_35812F30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35762FC8 5_2_35762FC8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EEFA0 5_2_357EEFA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582CE93 5_2_3582CE93
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582EE26 5_2_3582EE26
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35782E90 5_2_35782E90
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35786962 5_2_35786962
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583A9A6 5_2_3583A9A6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357729A0 5_2_357729A0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35772840 5_2_35772840
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577A840 5_2_3577A840
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579E8F0 5_2_3579E8F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35826BD7 5_2_35826BD7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582AB40 5_2_3582AB40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576EA80 5_2_3576EA80
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166211F 5_2_0166211F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016621D7 5_2_016621D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662191 5_2_01662191
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662075 5_2_01662075
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662053 5_2_01662053
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662011 5_2_01662011
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016620F0 5_2_016620F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016620B8 5_2_016620B8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166009B 5_2_0166009B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662312 5_2_01662312
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016623C2 5_2_016623C2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016623A8 5_2_016623A8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662389 5_2_01662389
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662261 5_2_01662261
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662278 5_2_01662278
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166222D 5_2_0166222D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166022B 5_2_0166022B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016622E0 5_2_016622E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016622B0 5_2_016622B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662533 5_2_01662533
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016625DC 5_2_016625DC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016625B7 5_2_016625B7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662597 5_2_01662597
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166245D 5_2_0166245D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166242F 5_2_0166242F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166241F 5_2_0166241F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016624FC 5_2_016624FC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016624BB 5_2_016624BB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166276E 5_2_0166276E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016627FE 5_2_016627FE
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016627C6 5_2_016627C6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662797 5_2_01662797
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662647 5_2_01662647
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662613 5_2_01662613
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016626E9 5_2_016626E9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016626A8 5_2_016626A8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662681 5_2_01662681
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662964 5_2_01662964
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166290D 5_2_0166290D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016629FC 5_2_016629FC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016629D7 5_2_016629D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662995 5_2_01662995
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662838 5_2_01662838
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016628D1 5_2_016628D1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662896 5_2_01662896
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662A77 5_2_01662A77
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662A52 5_2_01662A52
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01662AF9 5_2_01662AF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660DEF 5_2_01660DEF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660DFE 5_2_01660DFE
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660DDB 5_2_01660DDB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660F64 5_2_01660F64
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660F44 5_2_01660F44
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660FD8 5_2_01660FD8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660FA1 5_2_01660FA1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660E68 5_2_01660E68
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660E3B 5_2_01660E3B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660EE4 5_2_01660EE4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01660EB7 5_2_01660EB7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01661172 5_2_01661172
Found potential string decryption / allocating functions
Source: C:\Users\user\Desktop\Micra.exe Code function: String function: 357DEA12 appears 66 times
Source: C:\Users\user\Desktop\Micra.exe Code function: String function: 357B7E54 appears 96 times
Source: C:\Users\user\Desktop\Micra.exe Code function: String function: 3575B970 appears 201 times
Source: C:\Users\user\Desktop\Micra.exe Code function: String function: 357EF290 appears 84 times
PE / OLE file has an invalid certificate
Source: Micra.exe Static PE information: invalid certificate
Sample file is different than original file name gathered from version info
Source: Micra.exe, 00000005.00000002.4039419079.000000003585D000.00000040.00001000.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs Micra.exe
Source: Micra.exe, 00000005.00000003.3977470529.00000000356AA000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs Micra.exe
Source: Micra.exe, 00000005.00000003.3974687432.00000000354EA000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamentdll.dllj% vs Micra.exe
Uses 32bit PE files
Source: Micra.exe Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
Yara signature match
Source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Formbook_1112e116 reference_sample = 6246f3b89f0e4913abd88ae535ae3597865270f58201dc7f8ec0c87f15ff370a, os = windows, severity = x86, creation_date = 2021-06-14, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Formbook, fingerprint = b8b88451ad8c66b54e21455d835a5d435e52173c86e9b813ffab09451aff7134, id = 1112e116-dee0-4818-a41f-ca5c1c41b4b8, last_modified = 2021-08-23
Source: classification engine Classification label: mal92.troj.evad.winEXE@3/12@2/2
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004031BB EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,GetModuleHandleA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,OleUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 0_2_004031BB
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_00404460 GetDlgItem,SetWindowTextA,SHBrowseForFolderA,CoTaskMemFree,lstrcmpiA,lstrcatA,SetDlgItemTextA,GetDiskFreeSpaceA,MulDiv,SetDlgItemTextA, 0_2_00404460
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004020CB CoCreateInstance,MultiByteToWideChar, 0_2_004020CB
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Users\user\entomostraca Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Users\user\AppData\Local\Temp\nsi283C.tmp Jump to behavior
Source: Micra.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\Micra.exe File read: C:\Users\desktop.ini Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: Micra.exe ReversingLabs: Detection: 16%
Source: C:\Users\user\Desktop\Micra.exe File read: C:\Users\user\Desktop\Micra.exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\Micra.exe "C:\Users\user\Desktop\Micra.exe"
Source: C:\Users\user\Desktop\Micra.exe Process created: C:\Users\user\Desktop\Micra.exe "C:\Users\user\Desktop\Micra.exe"
Source: C:\Users\user\Desktop\Micra.exe Process created: C:\Users\user\Desktop\Micra.exe "C:\Users\user\Desktop\Micra.exe" Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: oleacc.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: shfolder.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32 Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe File written: C:\Windows\Resources\nringsmiddelet.ini Jump to behavior
Source: Micra.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: mshtml.pdb source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp
Source: Binary string: wntdll.pdbUGP source: Micra.exe, 00000005.00000002.4039419079.0000000035730000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4039419079.00000000358CE000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974687432.00000000353C7000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3977470529.000000003557D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: wntdll.pdb source: Micra.exe, Micra.exe, 00000005.00000002.4039419079.0000000035730000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4039419079.00000000358CE000.00000040.00001000.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3974687432.00000000353C7000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3977470529.000000003557D000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: mshtml.pdbUGP source: Micra.exe, 00000005.00000001.3420489258.0000000000649000.00000020.00000001.01000000.00000007.sdmp

Data Obfuscation
barindex
Yara detected GuLoader
Source: Yara match File source: 00000000.00000002.3421465563.000000000336C000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_10001A5D GlobalAlloc,lstrcpyA,lstrcpyA,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,LdrInitializeThunk,LdrInitializeThunk,lstrcpyA,GetModuleHandleA,LoadLibraryA,GetProcAddress,lstrlenA, 0_2_10001A5D
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_10002D20 push eax; ret 0_2_10002D4E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03197367 push 2C85D16Ah; ret 0_2_03197375
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031933D0 push ds; ret 0_2_031933F2
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031943ED push ebp; ret 0_2_0319440D
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319460A push es; ret 0_2_03194615
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03195630 pushad ; ret 0_2_03195632
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03195241 push esp; retf 0_2_0319526E
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319427E push ss; ret 0_2_03194296
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03193272 push ds; ret 0_2_0319327C
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03195A87 push esi; retf 0_2_03195AD7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031962BD push ss; ret 0_2_031962BE
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031936BE push ds; ret 0_2_031936E1
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031962A0 push ebx; ret 0_2_031962AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03195AC3 push esi; retf 0_2_03195AD7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03194111 push eax; ret 0_2_03194189
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03193122 push ds; ret 0_2_03193123
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319314D pushfd ; iretd 0_2_0319316B
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319357E push ds; ret 0_2_0319357F
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03193961 push es; retf 0_2_03193962
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_031935A8 pushfd ; iretd 0_2_031935C6
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_0319343D pushfd ; iretd 0_2_03193451
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_03193845 push ds; ret 0_2_03193846
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35731368 push eax; iretd 5_2_35731369
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35731FEC push eax; iretd 5_2_35731FED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3573225F pushad ; ret 5_2_357327F9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35734219 pushad ; retn 000Dh 5_2_35734275
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357609AD push ecx; mov dword ptr [esp], ecx 5_2_357609B6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35732851 push eax; iretd 5_2_35732858
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_01664111 push eax; ret 5_2_01664189
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_016643ED push ebp; ret 5_2_0166440D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_0166427E push ss; ret 5_2_01664296
Drops PE files
Source: C:\Users\user\Desktop\Micra.exe File created: C:\Users\user\AppData\Local\Temp\nsb308A.tmp\System.dll Jump to dropped file
Source: C:\Users\user\Desktop\Micra.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Switches to a custom stack to bypass stack traces
Source: C:\Users\user\Desktop\Micra.exe API/Special instruction interceptor: Address: 3BCC2A3
Source: C:\Users\user\Desktop\Micra.exe API/Special instruction interceptor: Address: 209C2A3
Tries to detect virtualization through RDTSC time measurements
Source: C:\Users\user\Desktop\Micra.exe RDTSC instruction interceptor: First address: 3BA1470 second address: 3BA1470 instructions: 0x00000000 rdtsc 0x00000002 cmp ebx, ecx 0x00000004 jc 00007F733C51F5F6h 0x00000006 test ebx, eax 0x00000008 inc ebp 0x00000009 cmp ah, ch 0x0000000b inc ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Micra.exe RDTSC instruction interceptor: First address: 2071470 second address: 2071470 instructions: 0x00000000 rdtsc 0x00000002 cmp ebx, ecx 0x00000004 jc 00007F733D299B56h 0x00000006 test ebx, eax 0x00000008 inc ebp 0x00000009 cmp ah, ch 0x0000000b inc ebx 0x0000000c rdtsc
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD1C0 rdtsc 5_2_357DD1C0
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Desktop\Micra.exe Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsb308A.tmp\System.dll Jump to dropped file
Found large amount of non-executed APIs
Source: C:\Users\user\Desktop\Micra.exe API coverage: 0.2 %
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\Desktop\Micra.exe TID: 3960 Thread sleep time: -30000s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_00406232 FindFirstFileA,FindClose, 0_2_00406232
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004056F7 GetTempPathA,DeleteFileA,lstrcatA,lstrcatA,lstrlenA,FindFirstFileA,FindNextFileA,FindClose, 0_2_004056F7
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004026F8 FindFirstFileA, 0_2_004026F8
Source: Micra.exe, 00000005.00000002.4015685670.00000000056BA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975020010.00000000056BA000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW
Source: Micra.exe, 00000005.00000002.4015685670.00000000056BA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975020010.00000000056BA000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000002.4015639022.000000000567D000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975329371.000000000567C000.00000004.00000020.00020000.00000000.sdmp, Micra.exe, 00000005.00000003.3975075122.000000000567C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW
Source: C:\Users\user\Desktop\Micra.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\Micra.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\Micra.exe Process information queried: ProcessInformation Jump to behavior
Checks if the current process is being debugged
Source: C:\Users\user\Desktop\Micra.exe Process queried: DebugPort Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Process queried: DebugPort Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Process queried: DebugPort Jump to behavior
Contains functionality for execution timing, often used to detect debuggers
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD1C0 rdtsc 5_2_357DD1C0
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_00402D48 GetTempPathA,GetTickCount,GetModuleFileNameA,LdrInitializeThunk,GetFileSize,GlobalAlloc,SetFilePointer, 0_2_00402D48
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_10001A5D GlobalAlloc,lstrcpyA,lstrcpyA,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,GlobalFree,LdrInitializeThunk,LdrInitializeThunk,lstrcpyA,GetModuleHandleA,LoadLibraryA,GetProcAddress,lstrlenA, 0_2_10001A5D
Contains functionality to read the PEB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579B570 mov eax, dword ptr fs:[00000030h] 5_2_3579B570
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579B570 mov eax, dword ptr fs:[00000030h] 5_2_3579B570
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B562 mov eax, dword ptr fs:[00000030h] 5_2_3575B562
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358335B6 mov eax, dword ptr fs:[00000030h] 5_2_358335B6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F5BE mov eax, dword ptr fs:[00000030h] 5_2_3581F5BE
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D534 mov eax, dword ptr fs:[00000030h] 5_2_3576D534
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579D530 mov eax, dword ptr fs:[00000030h] 5_2_3579D530
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579D530 mov eax, dword ptr fs:[00000030h] 5_2_3579D530
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358355C9 mov eax, dword ptr fs:[00000030h] 5_2_358355C9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358335D7 mov eax, dword ptr fs:[00000030h] 5_2_358335D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358335D7 mov eax, dword ptr fs:[00000030h] 5_2_358335D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358335D7 mov eax, dword ptr fs:[00000030h] 5_2_358335D7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35797505 mov eax, dword ptr fs:[00000030h] 5_2_35797505
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35797505 mov ecx, dword ptr fs:[00000030h] 5_2_35797505
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815F4 mov eax, dword ptr fs:[00000030h] 5_2_357815F4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357895DA mov eax, dword ptr fs:[00000030h] 5_2_357895DA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD5D0 mov eax, dword ptr fs:[00000030h] 5_2_357DD5D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD5D0 mov ecx, dword ptr fs:[00000030h] 5_2_357DD5D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581B52F mov eax, dword ptr fs:[00000030h] 5_2_3581B52F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835537 mov eax, dword ptr fs:[00000030h] 5_2_35835537
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357955C0 mov eax, dword ptr fs:[00000030h] 5_2_357955C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F35BA mov eax, dword ptr fs:[00000030h] 5_2_357F35BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F35BA mov eax, dword ptr fs:[00000030h] 5_2_357F35BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F35BA mov eax, dword ptr fs:[00000030h] 5_2_357F35BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F35BA mov eax, dword ptr fs:[00000030h] 5_2_357F35BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357FD5B0 mov eax, dword ptr fs:[00000030h] 5_2_357FD5B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357FD5B0 mov eax, dword ptr fs:[00000030h] 5_2_357FD5B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B550 mov eax, dword ptr fs:[00000030h] 5_2_3580B550
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B550 mov eax, dword ptr fs:[00000030h] 5_2_3580B550
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B550 mov eax, dword ptr fs:[00000030h] 5_2_3580B550
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815A9 mov eax, dword ptr fs:[00000030h] 5_2_357815A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815A9 mov eax, dword ptr fs:[00000030h] 5_2_357815A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815A9 mov eax, dword ptr fs:[00000030h] 5_2_357815A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815A9 mov eax, dword ptr fs:[00000030h] 5_2_357815A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357815A9 mov eax, dword ptr fs:[00000030h] 5_2_357815A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575758F mov eax, dword ptr fs:[00000030h] 5_2_3575758F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575758F mov eax, dword ptr fs:[00000030h] 5_2_3575758F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575758F mov eax, dword ptr fs:[00000030h] 5_2_3575758F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 mov eax, dword ptr fs:[00000030h] 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 mov eax, dword ptr fs:[00000030h] 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 mov eax, dword ptr fs:[00000030h] 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 mov eax, dword ptr fs:[00000030h] 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761460 mov eax, dword ptr fs:[00000030h] 5_2_35761460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F460 mov eax, dword ptr fs:[00000030h] 5_2_3577F460
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358074B0 mov eax, dword ptr fs:[00000030h] 5_2_358074B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B440 mov eax, dword ptr fs:[00000030h] 5_2_3576B440
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358354DB mov eax, dword ptr fs:[00000030h] 5_2_358354DB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E7410 mov eax, dword ptr fs:[00000030h] 5_2_357E7410
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578340D mov eax, dword ptr fs:[00000030h] 5_2_3578340D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357574B0 mov eax, dword ptr fs:[00000030h] 5_2_357574B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357574B0 mov eax, dword ptr fs:[00000030h] 5_2_357574B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357934B0 mov eax, dword ptr fs:[00000030h] 5_2_357934B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B450 mov eax, dword ptr fs:[00000030h] 5_2_3580B450
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B450 mov eax, dword ptr fs:[00000030h] 5_2_3580B450
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B450 mov eax, dword ptr fs:[00000030h] 5_2_3580B450
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B450 mov eax, dword ptr fs:[00000030h] 5_2_3580B450
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F453 mov eax, dword ptr fs:[00000030h] 5_2_3581F453
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35769486 mov eax, dword ptr fs:[00000030h] 5_2_35769486
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35769486 mov eax, dword ptr fs:[00000030h] 5_2_35769486
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B480 mov eax, dword ptr fs:[00000030h] 5_2_3575B480
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583547F mov eax, dword ptr fs:[00000030h] 5_2_3583547F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F78A mov eax, dword ptr fs:[00000030h] 5_2_3581F78A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B765 mov eax, dword ptr fs:[00000030h] 5_2_3575B765
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B765 mov eax, dword ptr fs:[00000030h] 5_2_3575B765
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B765 mov eax, dword ptr fs:[00000030h] 5_2_3575B765
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B765 mov eax, dword ptr fs:[00000030h] 5_2_3575B765
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581D7B0 mov eax, dword ptr fs:[00000030h] 5_2_3581D7B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581D7B0 mov eax, dword ptr fs:[00000030h] 5_2_3581D7B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358337B6 mov eax, dword ptr fs:[00000030h] 5_2_358337B6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35773740 mov eax, dword ptr fs:[00000030h] 5_2_35773740
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35773740 mov eax, dword ptr fs:[00000030h] 5_2_35773740
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35773740 mov eax, dword ptr fs:[00000030h] 5_2_35773740
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759730 mov eax, dword ptr fs:[00000030h] 5_2_35759730
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759730 mov eax, dword ptr fs:[00000030h] 5_2_35759730
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35795734 mov eax, dword ptr fs:[00000030h] 5_2_35795734
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763720 mov eax, dword ptr fs:[00000030h] 5_2_35763720
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F720 mov eax, dword ptr fs:[00000030h] 5_2_3577F720
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F720 mov eax, dword ptr fs:[00000030h] 5_2_3577F720
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577F720 mov eax, dword ptr fs:[00000030h] 5_2_3577F720
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579F71F mov eax, dword ptr fs:[00000030h] 5_2_3579F71F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579F71F mov eax, dword ptr fs:[00000030h] 5_2_3579F71F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35765702 mov eax, dword ptr fs:[00000030h] 5_2_35765702
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35765702 mov eax, dword ptr fs:[00000030h] 5_2_35765702
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767703 mov eax, dword ptr fs:[00000030h] 5_2_35767703
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576D7E0 mov ecx, dword ptr fs:[00000030h] 5_2_3576D7E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357617EC mov eax, dword ptr fs:[00000030h] 5_2_357617EC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357617EC mov eax, dword ptr fs:[00000030h] 5_2_357617EC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357617EC mov eax, dword ptr fs:[00000030h] 5_2_357617EC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F72E mov eax, dword ptr fs:[00000030h] 5_2_3581F72E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357657C0 mov eax, dword ptr fs:[00000030h] 5_2_357657C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357657C0 mov eax, dword ptr fs:[00000030h] 5_2_357657C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357657C0 mov eax, dword ptr fs:[00000030h] 5_2_357657C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583B73C mov eax, dword ptr fs:[00000030h] 5_2_3583B73C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583B73C mov eax, dword ptr fs:[00000030h] 5_2_3583B73C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583B73C mov eax, dword ptr fs:[00000030h] 5_2_3583B73C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583B73C mov eax, dword ptr fs:[00000030h] 5_2_3583B73C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D7B0 mov eax, dword ptr fs:[00000030h] 5_2_3578D7B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35833749 mov eax, dword ptr fs:[00000030h] 5_2_35833749
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575F7BA mov eax, dword ptr fs:[00000030h] 5_2_3575F7BA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EF7AF mov eax, dword ptr fs:[00000030h] 5_2_357EF7AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EF7AF mov eax, dword ptr fs:[00000030h] 5_2_357EF7AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EF7AF mov eax, dword ptr fs:[00000030h] 5_2_357EF7AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EF7AF mov eax, dword ptr fs:[00000030h] 5_2_357EF7AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EF7AF mov eax, dword ptr fs:[00000030h] 5_2_357EF7AF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E97A9 mov eax, dword ptr fs:[00000030h] 5_2_357E97A9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580375F mov eax, dword ptr fs:[00000030h] 5_2_3580375F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580375F mov eax, dword ptr fs:[00000030h] 5_2_3580375F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580375F mov eax, dword ptr fs:[00000030h] 5_2_3580375F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580375F mov eax, dword ptr fs:[00000030h] 5_2_3580375F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580375F mov eax, dword ptr fs:[00000030h] 5_2_3580375F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35799660 mov eax, dword ptr fs:[00000030h] 5_2_35799660
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35799660 mov eax, dword ptr fs:[00000030h] 5_2_35799660
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357FD660 mov eax, dword ptr fs:[00000030h] 5_2_357FD660
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F6C7 mov eax, dword ptr fs:[00000030h] 5_2_3581F6C7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358216CC mov eax, dword ptr fs:[00000030h] 5_2_358216CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358216CC mov eax, dword ptr fs:[00000030h] 5_2_358216CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358216CC mov eax, dword ptr fs:[00000030h] 5_2_358216CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358216CC mov eax, dword ptr fs:[00000030h] 5_2_358216CC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763616 mov eax, dword ptr fs:[00000030h] 5_2_35763616
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763616 mov eax, dword ptr fs:[00000030h] 5_2_35763616
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581D6F0 mov eax, dword ptr fs:[00000030h] 5_2_3581D6F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579F603 mov eax, dword ptr fs:[00000030h] 5_2_3579F603
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35791607 mov eax, dword ptr fs:[00000030h] 5_2_35791607
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D6E0 mov eax, dword ptr fs:[00000030h] 5_2_3578D6E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D6E0 mov eax, dword ptr fs:[00000030h] 5_2_3578D6E0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835636 mov eax, dword ptr fs:[00000030h] 5_2_35835636
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357916CF mov eax, dword ptr fs:[00000030h] 5_2_357916CF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576B6C0 mov eax, dword ptr fs:[00000030h] 5_2_3576B6C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357576B2 mov eax, dword ptr fs:[00000030h] 5_2_357576B2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357576B2 mov eax, dword ptr fs:[00000030h] 5_2_357576B2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357576B2 mov eax, dword ptr fs:[00000030h] 5_2_357576B2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575D6AA mov eax, dword ptr fs:[00000030h] 5_2_3575D6AA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575D6AA mov eax, dword ptr fs:[00000030h] 5_2_3575D6AA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35815180 mov eax, dword ptr fs:[00000030h] 5_2_35815180
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35815180 mov eax, dword ptr fs:[00000030h] 5_2_35815180
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F9179 mov eax, dword ptr fs:[00000030h] 5_2_357F9179
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767152 mov eax, dword ptr fs:[00000030h] 5_2_35767152
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358111A4 mov eax, dword ptr fs:[00000030h] 5_2_358111A4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358111A4 mov eax, dword ptr fs:[00000030h] 5_2_358111A4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358111A4 mov eax, dword ptr fs:[00000030h] 5_2_358111A4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358111A4 mov eax, dword ptr fs:[00000030h] 5_2_358111A4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759148 mov eax, dword ptr fs:[00000030h] 5_2_35759148
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759148 mov eax, dword ptr fs:[00000030h] 5_2_35759148
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759148 mov eax, dword ptr fs:[00000030h] 5_2_35759148
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759148 mov eax, dword ptr fs:[00000030h] 5_2_35759148
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F3140 mov eax, dword ptr fs:[00000030h] 5_2_357F3140
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F3140 mov eax, dword ptr fs:[00000030h] 5_2_357F3140
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F3140 mov eax, dword ptr fs:[00000030h] 5_2_357F3140
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B136 mov eax, dword ptr fs:[00000030h] 5_2_3575B136
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B136 mov eax, dword ptr fs:[00000030h] 5_2_3575B136
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B136 mov eax, dword ptr fs:[00000030h] 5_2_3575B136
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B136 mov eax, dword ptr fs:[00000030h] 5_2_3575B136
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358351CB mov eax, dword ptr fs:[00000030h] 5_2_358351CB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358331E1 mov eax, dword ptr fs:[00000030h] 5_2_358331E1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358071F9 mov esi, dword ptr fs:[00000030h] 5_2_358071F9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357851EF mov eax, dword ptr fs:[00000030h] 5_2_357851EF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357651ED mov eax, dword ptr fs:[00000030h] 5_2_357651ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35837120 mov eax, dword ptr fs:[00000030h] 5_2_35837120
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579D1D0 mov eax, dword ptr fs:[00000030h] 5_2_3579D1D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579D1D0 mov ecx, dword ptr fs:[00000030h] 5_2_3579D1D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577B1B0 mov eax, dword ptr fs:[00000030h] 5_2_3577B1B0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835152 mov eax, dword ptr fs:[00000030h] 5_2_35835152
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B7190 mov eax, dword ptr fs:[00000030h] 5_2_357B7190
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD070 mov ecx, dword ptr fs:[00000030h] 5_2_357DD070
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E106E mov eax, dword ptr fs:[00000030h] 5_2_357E106E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B052 mov eax, dword ptr fs:[00000030h] 5_2_3578B052
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358350D9 mov eax, dword ptr fs:[00000030h] 5_2_358350D9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357850E4 mov eax, dword ptr fs:[00000030h] 5_2_357850E4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357850E4 mov ecx, dword ptr fs:[00000030h] 5_2_357850E4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357890DB mov eax, dword ptr fs:[00000030h] 5_2_357890DB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582903E mov eax, dword ptr fs:[00000030h] 5_2_3582903E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582903E mov eax, dword ptr fs:[00000030h] 5_2_3582903E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582903E mov eax, dword ptr fs:[00000030h] 5_2_3582903E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582903E mov eax, dword ptr fs:[00000030h] 5_2_3582903E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD0C0 mov eax, dword ptr fs:[00000030h] 5_2_357DD0C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DD0C0 mov eax, dword ptr fs:[00000030h] 5_2_357DD0C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35765096 mov eax, dword ptr fs:[00000030h] 5_2_35765096
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835060 mov eax, dword ptr fs:[00000030h] 5_2_35835060
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579909C mov eax, dword ptr fs:[00000030h] 5_2_3579909C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D090 mov eax, dword ptr fs:[00000030h] 5_2_3578D090
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D090 mov eax, dword ptr fs:[00000030h] 5_2_3578D090
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357ED080 mov eax, dword ptr fs:[00000030h] 5_2_357ED080
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357ED080 mov eax, dword ptr fs:[00000030h] 5_2_357ED080
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767370 mov eax, dword ptr fs:[00000030h] 5_2_35767370
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767370 mov eax, dword ptr fs:[00000030h] 5_2_35767370
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767370 mov eax, dword ptr fs:[00000030h] 5_2_35767370
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583539D mov eax, dword ptr fs:[00000030h] 5_2_3583539D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759353 mov eax, dword ptr fs:[00000030h] 5_2_35759353
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759353 mov eax, dword ptr fs:[00000030h] 5_2_35759353
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358013B9 mov eax, dword ptr fs:[00000030h] 5_2_358013B9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358013B9 mov eax, dword ptr fs:[00000030h] 5_2_358013B9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358013B9 mov eax, dword ptr fs:[00000030h] 5_2_358013B9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757330 mov eax, dword ptr fs:[00000030h] 5_2_35757330
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581B3D0 mov ecx, dword ptr fs:[00000030h] 5_2_3581B3D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578F32A mov eax, dword ptr fs:[00000030h] 5_2_3578F32A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F3E6 mov eax, dword ptr fs:[00000030h] 5_2_3581F3E6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E930B mov eax, dword ptr fs:[00000030h] 5_2_357E930B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E930B mov eax, dword ptr fs:[00000030h] 5_2_357E930B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E930B mov eax, dword ptr fs:[00000030h] 5_2_357E930B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358353FC mov eax, dword ptr fs:[00000030h] 5_2_358353FC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582132D mov eax, dword ptr fs:[00000030h] 5_2_3582132D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582132D mov eax, dword ptr fs:[00000030h] 5_2_3582132D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835341 mov eax, dword ptr fs:[00000030h] 5_2_35835341
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357933A0 mov eax, dword ptr fs:[00000030h] 5_2_357933A0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357933A0 mov eax, dword ptr fs:[00000030h] 5_2_357933A0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357833A5 mov eax, dword ptr fs:[00000030h] 5_2_357833A5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B739A mov eax, dword ptr fs:[00000030h] 5_2_357B739A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357B739A mov eax, dword ptr fs:[00000030h] 5_2_357B739A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F367 mov eax, dword ptr fs:[00000030h] 5_2_3581F367
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35803370 mov eax, dword ptr fs:[00000030h] 5_2_35803370
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835283 mov eax, dword ptr fs:[00000030h] 5_2_35835283
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A1270 mov eax, dword ptr fs:[00000030h] 5_2_357A1270
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A1270 mov eax, dword ptr fs:[00000030h] 5_2_357A1270
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35789274 mov eax, dword ptr fs:[00000030h] 5_2_35789274
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579724D mov eax, dword ptr fs:[00000030h] 5_2_3579724D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759240 mov eax, dword ptr fs:[00000030h] 5_2_35759240
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759240 mov eax, dword ptr fs:[00000030h] 5_2_35759240
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358352E2 mov eax, dword ptr fs:[00000030h] 5_2_358352E2
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_358112ED mov eax, dword ptr fs:[00000030h] 5_2_358112ED
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B2F0 mov eax, dword ptr fs:[00000030h] 5_2_3580B2F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580B2F0 mov eax, dword ptr fs:[00000030h] 5_2_3580B2F0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35797208 mov eax, dword ptr fs:[00000030h] 5_2_35797208
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35797208 mov eax, dword ptr fs:[00000030h] 5_2_35797208
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581F2F8 mov eax, dword ptr fs:[00000030h] 5_2_3581F2F8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357592FF mov eax, dword ptr fs:[00000030h] 5_2_357592FF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835227 mov eax, dword ptr fs:[00000030h] 5_2_35835227
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B2D3 mov eax, dword ptr fs:[00000030h] 5_2_3575B2D3
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B2D3 mov eax, dword ptr fs:[00000030h] 5_2_3575B2D3
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575B2D3 mov eax, dword ptr fs:[00000030h] 5_2_3575B2D3
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578F2D0 mov eax, dword ptr fs:[00000030h] 5_2_3578F2D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578F2D0 mov eax, dword ptr fs:[00000030h] 5_2_3578F2D0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357692C5 mov eax, dword ptr fs:[00000030h] 5_2_357692C5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357692C5 mov eax, dword ptr fs:[00000030h] 5_2_357692C5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578B2C0 mov eax, dword ptr fs:[00000030h] 5_2_3578B2C0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E92BC mov eax, dword ptr fs:[00000030h] 5_2_357E92BC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E92BC mov eax, dword ptr fs:[00000030h] 5_2_357E92BC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E92BC mov ecx, dword ptr fs:[00000030h] 5_2_357E92BC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E92BC mov ecx, dword ptr fs:[00000030h] 5_2_357E92BC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581B256 mov eax, dword ptr fs:[00000030h] 5_2_3581B256
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581B256 mov eax, dword ptr fs:[00000030h] 5_2_3581B256
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F72A0 mov eax, dword ptr fs:[00000030h] 5_2_357F72A0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F72A0 mov eax, dword ptr fs:[00000030h] 5_2_357F72A0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579329E mov eax, dword ptr fs:[00000030h] 5_2_3579329E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579329E mov eax, dword ptr fs:[00000030h] 5_2_3579329E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767D75 mov eax, dword ptr fs:[00000030h] 5_2_35767D75
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35767D75 mov eax, dword ptr fs:[00000030h] 5_2_35767D75
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757D41 mov eax, dword ptr fs:[00000030h] 5_2_35757D41
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BD4E mov eax, dword ptr fs:[00000030h] 5_2_3579BD4E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BD4E mov eax, dword ptr fs:[00000030h] 5_2_3579BD4E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDD47 mov eax, dword ptr fs:[00000030h] 5_2_357EDD47
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582DDC6 mov eax, dword ptr fs:[00000030h] 5_2_3582DDC6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581DDC7 mov eax, dword ptr fs:[00000030h] 5_2_3581DDC7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EFD2A mov eax, dword ptr fs:[00000030h] 5_2_357EFD2A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EFD2A mov eax, dword ptr fs:[00000030h] 5_2_357EFD2A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35773D20 mov eax, dword ptr fs:[00000030h] 5_2_35773D20
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35773D00 mov eax, dword ptr fs:[00000030h] 5_2_35773D00
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763DD0 mov eax, dword ptr fs:[00000030h] 5_2_35763DD0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763DD0 mov eax, dword ptr fs:[00000030h] 5_2_35763DD0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDDC0 mov eax, dword ptr fs:[00000030h] 5_2_357EDDC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577DDB1 mov eax, dword ptr fs:[00000030h] 5_2_3577DDB1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577DDB1 mov eax, dword ptr fs:[00000030h] 5_2_3577DDB1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3577DDB1 mov eax, dword ptr fs:[00000030h] 5_2_3577DDB1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDDB1 mov eax, dword ptr fs:[00000030h] 5_2_357EDDB1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835D50 mov eax, dword ptr fs:[00000030h] 5_2_35835D50
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835D50 mov eax, dword ptr fs:[00000030h] 5_2_35835D50
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35799DAF mov eax, dword ptr fs:[00000030h] 5_2_35799DAF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35821D5A mov eax, dword ptr fs:[00000030h] 5_2_35821D5A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35821D5A mov eax, dword ptr fs:[00000030h] 5_2_35821D5A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35821D5A mov eax, dword ptr fs:[00000030h] 5_2_35821D5A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35821D5A mov eax, dword ptr fs:[00000030h] 5_2_35821D5A
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F5DA0 mov eax, dword ptr fs:[00000030h] 5_2_357F5DA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F5DA0 mov eax, dword ptr fs:[00000030h] 5_2_357F5DA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F5DA0 mov eax, dword ptr fs:[00000030h] 5_2_357F5DA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357F5DA0 mov ecx, dword ptr fs:[00000030h] 5_2_357F5DA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759D96 mov eax, dword ptr fs:[00000030h] 5_2_35759D96
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759D96 mov eax, dword ptr fs:[00000030h] 5_2_35759D96
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35759D96 mov ecx, dword ptr fs:[00000030h] 5_2_35759D96
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35819D70 mov eax, dword ptr fs:[00000030h] 5_2_35819D70
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35819D70 mov eax, dword ptr fs:[00000030h] 5_2_35819D70
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575FD80 mov eax, dword ptr fs:[00000030h] 5_2_3575FD80
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35791C7C mov eax, dword ptr fs:[00000030h] 5_2_35791C7C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771C60 mov eax, dword ptr fs:[00000030h] 5_2_35771C60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FCAB mov eax, dword ptr fs:[00000030h] 5_2_3581FCAB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757C40 mov eax, dword ptr fs:[00000030h] 5_2_35757C40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757C40 mov ecx, dword ptr fs:[00000030h] 5_2_35757C40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757C40 mov eax, dword ptr fs:[00000030h] 5_2_35757C40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757C40 mov eax, dword ptr fs:[00000030h] 5_2_35757C40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580FCDF mov eax, dword ptr fs:[00000030h] 5_2_3580FCDF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580FCDF mov eax, dword ptr fs:[00000030h] 5_2_3580FCDF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580FCDF mov eax, dword ptr fs:[00000030h] 5_2_3580FCDF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EBC10 mov eax, dword ptr fs:[00000030h] 5_2_357EBC10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EBC10 mov eax, dword ptr fs:[00000030h] 5_2_357EBC10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EBC10 mov ecx, dword ptr fs:[00000030h] 5_2_357EBC10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35801CF9 mov eax, dword ptr fs:[00000030h] 5_2_35801CF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35801CF9 mov eax, dword ptr fs:[00000030h] 5_2_35801CF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35801CF9 mov eax, dword ptr fs:[00000030h] 5_2_35801CF9
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583BC01 mov eax, dword ptr fs:[00000030h] 5_2_3583BC01
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3583BC01 mov eax, dword ptr fs:[00000030h] 5_2_3583BC01
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582DC27 mov eax, dword ptr fs:[00000030h] 5_2_3582DC27
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582DC27 mov eax, dword ptr fs:[00000030h] 5_2_3582DC27
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582DC27 mov eax, dword ptr fs:[00000030h] 5_2_3582DC27
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E3CDB mov eax, dword ptr fs:[00000030h] 5_2_357E3CDB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E3CDB mov eax, dword ptr fs:[00000030h] 5_2_357E3CDB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E3CDB mov eax, dword ptr fs:[00000030h] 5_2_357E3CDB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771CC7 mov eax, dword ptr fs:[00000030h] 5_2_35771CC7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771CC7 mov eax, dword ptr fs:[00000030h] 5_2_35771CC7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35795CC0 mov eax, dword ptr fs:[00000030h] 5_2_35795CC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35795CC0 mov eax, dword ptr fs:[00000030h] 5_2_35795CC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35831C3C mov eax, dword ptr fs:[00000030h] 5_2_35831C3C
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581FC4F mov eax, dword ptr fs:[00000030h] 5_2_3581FC4F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575DCA0 mov eax, dword ptr fs:[00000030h] 5_2_3575DCA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BCA0 mov eax, dword ptr fs:[00000030h] 5_2_3579BCA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BCA0 mov eax, dword ptr fs:[00000030h] 5_2_3579BCA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BCA0 mov ecx, dword ptr fs:[00000030h] 5_2_3579BCA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BCA0 mov eax, dword ptr fs:[00000030h] 5_2_3579BCA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763C84 mov eax, dword ptr fs:[00000030h] 5_2_35763C84
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763C84 mov eax, dword ptr fs:[00000030h] 5_2_35763C84
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763C84 mov eax, dword ptr fs:[00000030h] 5_2_35763C84
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763C84 mov eax, dword ptr fs:[00000030h] 5_2_35763C84
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35803F90 mov eax, dword ptr fs:[00000030h] 5_2_35803F90
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35803F90 mov eax, dword ptr fs:[00000030h] 5_2_35803F90
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578BF60 mov eax, dword ptr fs:[00000030h] 5_2_3578BF60
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761F50 mov eax, dword ptr fs:[00000030h] 5_2_35761F50
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35797F51 mov eax, dword ptr fs:[00000030h] 5_2_35797F51
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357DFF42 mov eax, dword ptr fs:[00000030h] 5_2_357DFF42
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581BFC0 mov ecx, dword ptr fs:[00000030h] 5_2_3581BFC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581BFC0 mov eax, dword ptr fs:[00000030h] 5_2_3581BFC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35833FC0 mov eax, dword ptr fs:[00000030h] 5_2_35833FC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E1F13 mov eax, dword ptr fs:[00000030h] 5_2_357E1F13
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDF10 mov eax, dword ptr fs:[00000030h] 5_2_357EDF10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BFEC mov eax, dword ptr fs:[00000030h] 5_2_3579BFEC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BFEC mov eax, dword ptr fs:[00000030h] 5_2_3579BFEC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BFEC mov eax, dword ptr fs:[00000030h] 5_2_3579BFEC
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575BFD0 mov eax, dword ptr fs:[00000030h] 5_2_3575BFD0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E3FD7 mov eax, dword ptr fs:[00000030h] 5_2_357E3FD7
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581DF2F mov eax, dword ptr fs:[00000030h] 5_2_3581DF2F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35791FCD mov eax, dword ptr fs:[00000030h] 5_2_35791FCD
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35791FCD mov eax, dword ptr fs:[00000030h] 5_2_35791FCD
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35791FCD mov eax, dword ptr fs:[00000030h] 5_2_35791FCD
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763FC0 mov eax, dword ptr fs:[00000030h] 5_2_35763FC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35807F3E mov eax, dword ptr fs:[00000030h] 5_2_35807F3E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357A1FB8 mov eax, dword ptr fs:[00000030h] 5_2_357A1FB8
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BFB0 mov eax, dword ptr fs:[00000030h] 5_2_3579BFB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov eax, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov eax, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov eax, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov ecx, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35771F92 mov eax, dword ptr fs:[00000030h] 5_2_35771F92
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575FF90 mov edi, dword ptr fs:[00000030h] 5_2_3575FF90
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575BE78 mov ecx, dword ptr fs:[00000030h] 5_2_3575BE78
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BE51 mov eax, dword ptr fs:[00000030h] 5_2_3579BE51
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BE51 mov eax, dword ptr fs:[00000030h] 5_2_3579BE51
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DEB0 mov eax, dword ptr fs:[00000030h] 5_2_3580DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DEB0 mov ecx, dword ptr fs:[00000030h] 5_2_3580DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DEB0 mov eax, dword ptr fs:[00000030h] 5_2_3580DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DEB0 mov eax, dword ptr fs:[00000030h] 5_2_3580DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3580DEB0 mov eax, dword ptr fs:[00000030h] 5_2_3580DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581DEB0 mov eax, dword ptr fs:[00000030h] 5_2_3581DEB0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35775E40 mov eax, dword ptr fs:[00000030h] 5_2_35775E40
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761E30 mov eax, dword ptr fs:[00000030h] 5_2_35761E30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35761E30 mov eax, dword ptr fs:[00000030h] 5_2_35761E30
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35819EDF mov eax, dword ptr fs:[00000030h] 5_2_35819EDF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35819EDF mov eax, dword ptr fs:[00000030h] 5_2_35819EDF
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582BEE6 mov eax, dword ptr fs:[00000030h] 5_2_3582BEE6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582BEE6 mov eax, dword ptr fs:[00000030h] 5_2_3582BEE6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582BEE6 mov eax, dword ptr fs:[00000030h] 5_2_3582BEE6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3582BEE6 mov eax, dword ptr fs:[00000030h] 5_2_3582BEE6
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575DE10 mov eax, dword ptr fs:[00000030h] 5_2_3575DE10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579BE17 mov eax, dword ptr fs:[00000030h] 5_2_3579BE17
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763EF4 mov eax, dword ptr fs:[00000030h] 5_2_35763EF4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763EF4 mov eax, dword ptr fs:[00000030h] 5_2_35763EF4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763EF4 mov eax, dword ptr fs:[00000030h] 5_2_35763EF4
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35793EEB mov ecx, dword ptr fs:[00000030h] 5_2_35793EEB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35793EEB mov eax, dword ptr fs:[00000030h] 5_2_35793EEB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35793EEB mov eax, dword ptr fs:[00000030h] 5_2_35793EEB
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35833E10 mov eax, dword ptr fs:[00000030h] 5_2_35833E10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35833E10 mov eax, dword ptr fs:[00000030h] 5_2_35833E10
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35763EE1 mov eax, dword ptr fs:[00000030h] 5_2_35763EE1
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835E37 mov eax, dword ptr fs:[00000030h] 5_2_35835E37
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835E37 mov eax, dword ptr fs:[00000030h] 5_2_35835E37
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35835E37 mov eax, dword ptr fs:[00000030h] 5_2_35835E37
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3575BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3575BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3576BEC0 mov eax, dword ptr fs:[00000030h] 5_2_3576BEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578FEC0 mov eax, dword ptr fs:[00000030h] 5_2_3578FEC0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EFEC5 mov eax, dword ptr fs:[00000030h] 5_2_357EFEC5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581DE46 mov eax, dword ptr fs:[00000030h] 5_2_3581DE46
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575DEA5 mov eax, dword ptr fs:[00000030h] 5_2_3575DEA5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575DEA5 mov ecx, dword ptr fs:[00000030h] 5_2_3575DEA5
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDEAA mov eax, dword ptr fs:[00000030h] 5_2_357EDEAA
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3575FEA0 mov eax, dword ptr fs:[00000030h] 5_2_3575FEA0
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35809E56 mov ecx, dword ptr fs:[00000030h] 5_2_35809E56
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EDE9B mov eax, dword ptr fs:[00000030h] 5_2_357EDE9B
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35793E8F mov eax, dword ptr fs:[00000030h] 5_2_35793E8F
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3578D978 mov eax, dword ptr fs:[00000030h] 5_2_3578D978
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579B970 mov eax, dword ptr fs:[00000030h] 5_2_3579B970
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579B970 mov eax, dword ptr fs:[00000030h] 5_2_3579B970
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579B970 mov eax, dword ptr fs:[00000030h] 5_2_3579B970
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581598D mov eax, dword ptr fs:[00000030h] 5_2_3581598D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581598D mov eax, dword ptr fs:[00000030h] 5_2_3581598D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3581598D mov eax, dword ptr fs:[00000030h] 5_2_3581598D
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35757967 mov eax, dword ptr fs:[00000030h] 5_2_35757967
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579196E mov eax, dword ptr fs:[00000030h] 5_2_3579196E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_3579196E mov eax, dword ptr fs:[00000030h] 5_2_3579196E
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35787962 mov eax, dword ptr fs:[00000030h] 5_2_35787962
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357E5960 mov eax, dword ptr fs:[00000030h] 5_2_357E5960
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35779950 mov eax, dword ptr fs:[00000030h] 5_2_35779950
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_35779950 mov eax, dword ptr fs:[00000030h] 5_2_35779950
Source: C:\Users\user\Desktop\Micra.exe Code function: 5_2_357EB953 mov eax, dword ptr fs:[00000030h] 5_2_357EB953
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\Desktop\Micra.exe Process created: C:\Users\user\Desktop\Micra.exe "C:\Users\user\Desktop\Micra.exe" Jump to behavior
Source: C:\Users\user\Desktop\Micra.exe Code function: 0_2_004031BB EntryPoint,SetErrorMode,GetVersion,lstrlenA,#17,OleInitialize,SHGetFileInfoA,GetCommandLineA,GetModuleHandleA,CharNextA,GetTempPathA,GetTempPathA,GetWindowsDirectoryA,lstrcatA,GetTempPathA,lstrcatA,SetEnvironmentVariableA,SetEnvironmentVariableA,SetEnvironmentVariableA,DeleteFileA,OleUninitialize,ExitProcess,lstrcatA,lstrcatA,lstrcatA,lstrcmpiA,SetCurrentDirectoryA,DeleteFileA,CopyFileA,CloseHandle,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,ExitWindowsEx,ExitProcess, 0_2_004031BB

Stealing of Sensitive Information
barindex
Yara detected FormBook
Source: Yara match File source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality
barindex
Yara detected FormBook
Source: Yara match File source: 00000005.00000002.4039386089.00000000353C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1545328 Sample: Micra.exe Startdate: 30/10/2024 Architecture: WINDOWS Score: 92 16 drive.usercontent.google.com 2->16 18 drive.google.com 2->18 24 Malicious sample detected (through community Yara rule) 2->24 26 Antivirus / Scanner detection for submitted sample 2->26 28 Multi AV Scanner detection for submitted file 2->28 30 3 other signatures 2->30 7 Micra.exe 159 2->7         started        signatures3 process4 file5 14 C:\Users\user\AppData\Local\...\System.dll, PE32 7->14 dropped 32 Tries to detect virtualization through RDTSC time measurements 7->32 34 Switches to a custom stack to bypass stack traces 7->34 11 Micra.exe 6 7->11         started        signatures6 process7 dnsIp8 20 drive.google.com 142.250.184.206, 443, 50002 GOOGLEUS United States 11->20 22 drive.usercontent.google.com 142.250.185.65, 443, 50003 GOOGLEUS United States 11->22
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
142.250.184.206
 drive.google.com United States
15169 GOOGLEUS false
142.250.185.65
 drive.usercontent.google.com United States
15169 GOOGLEUS false

Contacted Domains

Name IP Active
drive.google.com 142.250.184.206 true
drive.usercontent.google.com 142.250.185.65 true