| Time & API |
Arguments |
Status |
Return |
Repeated |
1619637274.429125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
1572864
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00b70000
|
success
|
0 |
0
|
1619637274.429125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00cb0000
|
success
|
0 |
0
|
1619637275.366125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
589824
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00440000
|
success
|
0 |
0
|
1619637275.366125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00490000
|
success
|
0 |
0
|
1619637275.460125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73b91000
|
success
|
0 |
0
|
1619637275.554125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
1769472
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x02410000
|
success
|
0 |
0
|
1619637275.554125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x02580000
|
success
|
0 |
0
|
1619637275.554125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0047a000
|
success
|
0 |
0
|
1619637275.554125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73b92000
|
success
|
0 |
0
|
1619637275.554125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00472000
|
success
|
0 |
0
|
1619637275.835125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00482000
|
success
|
0 |
0
|
1619637275.944125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x004e5000
|
success
|
0 |
0
|
1619637275.944125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x004eb000
|
success
|
0 |
0
|
1619637275.944125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x004e7000
|
success
|
0 |
0
|
1619637276.085125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00483000
|
success
|
0 |
0
|
1619637276.116125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0048c000
|
success
|
0 |
0
|
1619637276.194125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00860000
|
success
|
0 |
0
|
1619637276.210125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00484000
|
success
|
0 |
0
|
1619637276.585125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00485000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00861000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.710125
NtProtectVirtualMemory
|
process_identifier:
912
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x00370000
|
success
|
0 |
0
|
1619637276.772125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00862000
|
success
|
0 |
0
|
1619637277.319125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00486000
|
success
|
0 |
0
|
1619637277.335125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00487000
|
success
|
0 |
0
|
1619637277.351125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00488000
|
success
|
0 |
0
|
1619637277.507125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00489000
|
success
|
0 |
0
|
1619637277.507125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x008a0000
|
success
|
0 |
0
|
1619637277.538125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00863000
|
success
|
0 |
0
|
1619637277.601125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00864000
|
success
|
0 |
0
|
1619637277.601125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x008a1000
|
success
|
0 |
0
|
1619637277.679125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x004d6000
|
success
|
0 |
0
|
1619637277.694125
NtAllocateVirtualMemory
|
process_identifier:
912
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00865000
|
success
|
0 |
0
|