| Time & API |
Arguments |
Status |
Return |
Repeated |
1619426978.320315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
1114112
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00740000
|
success
|
0 |
0
|
1619426978.320315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00810000
|
success
|
0 |
0
|
1619426978.632315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
983040
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00630000
|
success
|
0 |
0
|
1619426978.632315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x006e0000
|
success
|
0 |
0
|
1619426978.757315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73e71000
|
success
|
0 |
0
|
1619426978.992315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
2031616
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00b70000
|
success
|
0 |
0
|
1619426978.992315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00d20000
|
success
|
0 |
0
|
1619426978.992315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0052a000
|
success
|
0 |
0
|
1619426978.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73e72000
|
success
|
0 |
0
|
1619426978.992315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00522000
|
success
|
0 |
0
|
1619426979.148315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00542000
|
success
|
0 |
0
|
1619426979.304315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00565000
|
success
|
0 |
0
|
1619426979.320315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0056b000
|
success
|
0 |
0
|
1619426979.320315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00567000
|
success
|
0 |
0
|
1619426979.507315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00543000
|
success
|
0 |
0
|
1619426979.554315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0054c000
|
success
|
0 |
0
|
1619426979.648315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b0000
|
success
|
0 |
0
|
1619426979.851315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00544000
|
success
|
0 |
0
|
1619426979.898315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00545000
|
success
|
0 |
0
|
1619426979.976315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.976315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b1000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426979.992315
NtProtectVirtualMemory
|
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00fc0000
|
success
|
0 |
0
|
1619426980.023315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b2000
|
success
|
0 |
0
|
1619426980.398315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00546000
|
success
|
0 |
0
|
1619426980.414315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00547000
|
success
|
0 |
0
|
1619426980.414315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00548000
|
success
|
0 |
0
|
1619426980.523315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00549000
|
success
|
0 |
0
|
1619426980.523315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007f0000
|
success
|
0 |
0
|
1619426980.554315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b3000
|
success
|
0 |
0
|
1619426980.570315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b4000
|
success
|
0 |
0
|
1619426980.570315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007f1000
|
success
|
0 |
0
|
1619426980.601315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x007b5000
|
success
|
0 |
0
|
1619426980.617315
NtAllocateVirtualMemory
|
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00556000
|
success
|
0 |
0
|