Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Executing: C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe
- QuerySystemInformation(SystemBasicInformation) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QuerySystemInformation(SystemProcessorInformation) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, ProcessImageInformation) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- GetModuleHandle(ntdll) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- CreateThread() [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- ResumeThread(19840) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- GetModuleHandle(kernel32.dll) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- SetProcessDEPPolicy() [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- OpenProcessToken(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0013FFF0) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, ProcessDefaultHardErrorMode) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00003000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- LdrFindEntryForAddress(0x75DA0000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00002000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00203E6C) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- CreateFile(C:\Users\Quassar\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00130000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- GetModuleHandle(shell32.dll) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00010000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- GetModuleHandle(combase.dll) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, ProcessBasicInformation) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x000E0000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, ProcessWow64Information) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, 52) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00102000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001F0000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001003CE) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000003CE) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00100855) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000855) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0010129B) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0000129B) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001004B7) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- VirtualAllocEx(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000004B7) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- SystemParametersInfo(SPI_GETHIGHCONTRAST, 12) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- FindWindow(Shell_TrayWnd, null) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- GetModuleHandle(shlwapi.dll) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryFullProcessImageName(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, ProcessDeviceMap) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- CreateProcess(null, "C:\Users\Quassar\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp" /SL5="$70A18,3448419,143360,C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe" , null) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- OpenProcessToken(C:\Users\Quassar\Downloads\Programs\XnView-win-small.exe, TOKEN_DUPLICATE, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessBasicInformation) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- LdrFindEntryForAddress(0x61E50000) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- WriteProcessMemory(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, BaseAddress=0x0020B1E8, BufferSize=0x00000004) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- ResumeThread(5160) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- Executing: C:\Users\Quassar\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp
- QuerySystemInformation(SystemBasicInformation) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QuerySystemInformation(SystemProcessorInformation) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessImageInformation) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(ntdll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- CreateThread() [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- ResumeThread(21204) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(kernel32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SetProcessDEPPolicy() [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00002000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- OpenProcessToken(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, TOKEN_QUERY, TOKEN_READ) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0013FFF0) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(oleaut32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(USER32.DLL) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessDefaultHardErrorMode) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(USER32) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00160000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SystemParametersInfo(SPI_GETWHEELSCROLLLINES, 0) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SystemParametersInfo(SPI_GETICONTITLELOGFONT, 92) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SystemParametersInfo(SPI_GETNONCLIENTMETRICS, 0) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SystemParametersInfo(SPI_GETHIGHCONTRAST, 12) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0001ABD0) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000890) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00004000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(shell32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00010000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(combase.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessBasicInformation) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT MEM_RESERVE MEM_TOP_DOWN, PAGE_READWRITE, RegionSize=0x00102000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00120000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001003CE) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000003CE) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x00100855) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000855) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0010129B) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x0000129B) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x001004B7) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x000004B7) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00003000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, 52) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessWow64Information) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_EXECUTE_READWRITE, RegionSize=0x00001000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- LdrFindEntryForAddress(0x764E0000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetKeyboardLayoutList() [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(comctl32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(ole32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- LdrFindEntryForAddress(0x75DA0000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(advapi32.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetKeyState() [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- FindWindow(GROUPYCTRL, null) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- ResumeThread(20996) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00000048) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetProcessImageFileName(C:\Users\Quassar\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(sppc.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QuerySystemInformation(182) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessQuotaLimits) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessVmCounters) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QueryProcessInformation(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, ProcessSessionInformation) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- GetModuleHandle(ntmarta.dll) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_READWRITE, RegionSize=0x0007FFF8) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_RESERVE, PAGE_NOACCESS, RegionSize=0x00800000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- QuerySystemInformation(SystemRecommendedSharedDataAlignment) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SetTimer(0x001009A4, Elapse=0x7FFFFFFF) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- VirtualAllocEx(C:\Sandbox\Quassar\DefaultBox\user\current\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp, MEM_COMMIT, PAGE_READWRITE, RegionSize=0x00005000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- SetTimer(0x001009A4, Elapse=0x00000000) [c:\users\quassar\appdata\local\temp\is-b0blt.tmp\xnview-win-small.tmp]
- DeleteFile(C:\Users\Quassar\AppData\Local\Temp\is-B0BLT.tmp\XnView-win-small.tmp) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- ExitProcess(3221227010) [c:\users\quassar\downloads\programs\xnview-win-small.exe]
- TerminateProcess() [c:\users\quassar\downloads\programs\xnview-win-small.exe]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement