API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 4th, 2020
228
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 19.58 KB | None | 0 0
raw download clone embed print report
  1. Executing: C:\Users\Quassar\Downloads\XnView-win-small.exe
  2. QuerySystemInformation(SystemBasicInformation) [c:\users\quassar\downloads\xnview-win-small.exe]
  3. QuerySystemInformation(SystemProcessorInformation) [c:\users\quassar\downloads\xnview-win-small.exe]
  4. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, ProcessImageInformation) [c:\users\quassar\downloads\xnview-win-small.exe]
  5. GetModuleHandle(ntdll) [c:\users\quassar\downloads\xnview-win-small.exe]
  6. CreateThread() [c:\users\quassar\downloads\xnview-win-small.exe]
  7. ResumeThread(19240) [c:\users\quassar\downloads\xnview-win-small.exe]
  8. GetModuleHandle(kernel32.dll) [c:\users\quassar\downloads\xnview-win-small.exe]
  9. SetProcessDEPPolicy() [c:\users\quassar\downloads\xnview-win-small.exe]
  10. OpenProcessToken(C:\Users\Quassar\Downloads\XnView-win-small.exe, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\downloads\xnview-win-small.exe]
  11. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0013FFF0) [c:\users\quassar\downloads\xnview-win-small.exe]
  12. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, ProcessDefaultHardErrorMode) [c:\users\quassar\downloads\xnview-win-small.exe]
  13. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\downloads\xnview-win-small.exe]
  14. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00003000) [c:\users\quassar\downloads\xnview-win-small.exe]
  15. LdrFindEntryForAddress(0x75DA0000) [c:\users\quassar\downloads\xnview-win-small.exe]
  16. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00203E6C) [c:\users\quassar\downloads\xnview-win-small.exe]
  17. CreateFile(C:\Users\Quassar\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp) [c:\users\quassar\downloads\xnview-win-small.exe]
  18. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00130000) [c:\users\quassar\downloads\xnview-win-small.exe]
  19. GetModuleHandle(shell32.dll) [c:\users\quassar\downloads\xnview-win-small.exe]
  20. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00002000) [c:\users\quassar\downloads\xnview-win-small.exe]
  21. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00010000) [c:\users\quassar\downloads\xnview-win-small.exe]
  22. GetModuleHandle(combase.dll) [c:\users\quassar\downloads\xnview-win-small.exe]
  23. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, ProcessBasicInformation) [c:\users\quassar\downloads\xnview-win-small.exe]
  24. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00100000) [c:\users\quassar\downloads\xnview-win-small.exe]
  25. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, ProcessWow64Information) [c:\users\quassar\downloads\xnview-win-small.exe]
  26. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, 52) [c:\users\quassar\downloads\xnview-win-small.exe]
  27. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00102000) [c:\users\quassar\downloads\xnview-win-small.exe]
  28. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00040000) [c:\users\quassar\downloads\xnview-win-small.exe]
  29. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001003CE) [c:\users\quassar\downloads\xnview-win-small.exe]
  30. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000003CE) [c:\users\quassar\downloads\xnview-win-small.exe]
  31. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00100855) [c:\users\quassar\downloads\xnview-win-small.exe]
  32. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000855) [c:\users\quassar\downloads\xnview-win-small.exe]
  33. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0010129B) [c:\users\quassar\downloads\xnview-win-small.exe]
  34. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0000129B) [c:\users\quassar\downloads\xnview-win-small.exe]
  35. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001004B7) [c:\users\quassar\downloads\xnview-win-small.exe]
  36. VirtualAllocEx(C:\Users\Quassar\Downloads\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000004B7) [c:\users\quassar\downloads\xnview-win-small.exe]
  37. SystemParametersInfo(SPI_GETHIGHCONTRAST, 12) [c:\users\quassar\downloads\xnview-win-small.exe]
  38. FindWindow(Shell_TrayWnd, null) [c:\users\quassar\downloads\xnview-win-small.exe]
  39. GetModuleHandle(shlwapi.dll) [c:\users\quassar\downloads\xnview-win-small.exe]
  40. QueryFullProcessImageName(C:\Users\Quassar\Downloads\XnView-win-small.exe) [c:\users\quassar\downloads\xnview-win-small.exe]
  41. QueryProcessInformation(C:\Users\Quassar\Downloads\XnView-win-small.exe, ProcessDeviceMap) [c:\users\quassar\downloads\xnview-win-small.exe]
  42. CreateProcess(null, "C:\Users\Quassar\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp" /SL5="$240A1A,3448419,143360,C:\Users\Quassar\Downloads\XnView-win-small.exe" , null) [c:\users\quassar\downloads\xnview-win-small.exe]
  43. OpenProcessToken(C:\Users\Quassar\Downloads\XnView-win-small.exe, TOKEN_DUPLICATE, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\downloads\xnview-win-small.exe]
  44. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessBasicInformation) [c:\users\quassar\downloads\xnview-win-small.exe]
  45. LdrFindEntryForAddress(0x61E50000) [c:\users\quassar\downloads\xnview-win-small.exe]
  46. WriteProcessMemory(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, BaseAddress=0x0020F1E8, BufferSize=0x00000004) [c:\users\quassar\downloads\xnview-win-small.exe]
  47. ResumeThread(5912) [c:\users\quassar\downloads\xnview-win-small.exe]
  48. Executing: C:\Users\Quassar\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp
  49. QuerySystemInformation(SystemBasicInformation) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  50. QuerySystemInformation(SystemProcessorInformation) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  51. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessImageInformation) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  52. GetModuleHandle(ntdll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  53. CreateThread() [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  54. ResumeThread(15040) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  55. GetModuleHandle(kernel32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  56. SetProcessDEPPolicy() [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  57. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00002000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  58. OpenProcessToken(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  59. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0013FFF0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  60. GetModuleHandle(oleaut32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  61. GetModuleHandle(USER32.DLL) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  62. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessDefaultHardErrorMode) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  63. GetModuleHandle(USER32) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  64. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00150000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  65. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  66. SystemParametersInfo(SPI_GETWHEELSCROLLLINES, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  67. SystemParametersInfo(SPI_GETICONTITLELOGFONT, 92) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  68. SystemParametersInfo(SPI_GETNONCLIENTMETRICS, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  69. SystemParametersInfo(SPI_GETHIGHCONTRAST, 12) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  70. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0001ABD0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  71. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000890) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  72. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00004000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  73. GetModuleHandle(shell32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  74. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00010000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  75. GetModuleHandle(combase.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  76. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessBasicInformation) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  77. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00102000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  78. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00200000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  79. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001003CE) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  80. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000003CE) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  81. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00100855) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  82. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000855) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  83. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0010129B) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  84. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0000129B) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  85. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001004B7) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  86. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000004B7) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  87. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00003000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  88. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, 52) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  89. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessWow64Information) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  90. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_EXECUTE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  91. LdrFindEntryForAddress(0x764E0000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  92. GetKeyboardLayoutList() [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  93. GetModuleHandle(comctl32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  94. GetModuleHandle(ole32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  95. LdrFindEntryForAddress(0x75DA0000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  96. GetModuleHandle(advapi32.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  97. GetKeyState() [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  98. FindWindow(GROUPYCTRL, null) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  99. ResumeThread(20376) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  100. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000048) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  101. GetProcessImageFileName(C:\Users\Quassar\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  102. GetModuleHandle(sppc.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  103. QuerySystemInformation(182) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  104. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessQuotaLimits) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  105. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessVmCounters) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  106. QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, ProcessSessionInformation) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  107. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0007FFF8) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  108. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00003E6C) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  109. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00200000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  110. SystemParametersInfo(SPI_GETWORKAREA, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  111. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00005000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  112. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00006000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  113. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00015000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  114. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00008000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  115. LdrFindEntryForAddress(0x68A70000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  116. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0001A000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  117. GetWindowTextLength() [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  118. SystemParametersInfo(SPI_GETWHEELSCROLLCHARS, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  119. SystemParametersInfo(SPI_GETDRAGFULLWINDOWS, 4) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  120. SystemParametersInfo(SPI_GETUIEFFECTS, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  121. SystemParametersInfo(SPI_GETCLIENTAREAANIMATION, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  122. SystemParametersInfo(SPI_GETMENUDROPALIGNMENT, 0) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  123. SetTimer(0x00000000, Elapse=0x000003E8) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  124. GetModuleHandle(ntmarta.dll) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  125. VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-EJR1A.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_NOACCESS, RegionSize=0x00800000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  126. QuerySystemInformation(SystemRecommendedSharedDataAlignment) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  127. SetTimer(0x00110730, Elapse=0x7FFFFFFF) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
  128. SetTimer(0x00110730, Elapse=0x00000000) [c:\users\quassar\appdata\local\temp\is-ejr1a.tmp\xnview-win-small.tmp]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!