| Time & API |
Arguments |
Status |
Return |
Repeated |
1619685933.35875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
458752
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x00500000
|
success
|
0 |
0
|
1619685933.35875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00530000
|
success
|
0 |
0
|
1619685934.09375
NtProtectVirtualMemory
|
process_identifier:
3048
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73c51000
|
success
|
0 |
0
|
1619685934.14075
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005ca000
|
success
|
0 |
0
|
1619685934.15575
NtProtectVirtualMemory
|
process_identifier:
3048
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x73c52000
|
success
|
0 |
0
|
1619685934.15575
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005c2000
|
success
|
0 |
0
|
1619685934.51575
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d2000
|
success
|
0 |
0
|
1619685934.57775
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d3000
|
success
|
0 |
0
|
1619685934.59375
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x0060b000
|
success
|
0 |
0
|
1619685934.59375
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00607000
|
success
|
0 |
0
|
1619685934.62475
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005dc000
|
success
|
0 |
0
|
1619685934.70275
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00b30000
|
success
|
0 |
0
|
1619685935.48375
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d4000
|
success
|
0 |
0
|
1619685935.49975
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d5000
|
success
|
0 |
0
|
1619685935.56175
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d6000
|
success
|
0 |
0
|
1619685935.68675
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005ea000
|
success
|
0 |
0
|
1619685935.68675
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005e7000
|
success
|
0 |
0
|
1619685935.70275
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005fa000
|
success
|
0 |
0
|
1619685935.74975
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005cb000
|
success
|
0 |
0
|
1619685935.82775
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005e6000
|
success
|
0 |
0
|
1619685935.84375
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00b31000
|
success
|
0 |
0
|
1619685936.24975
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005f2000
|
success
|
0 |
0
|
1619685936.31175
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00605000
|
success
|
0 |
0
|
1619685969.57775
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00531000
|
success
|
0 |
0
|
1619685969.74975
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005fc000
|
success
|
0 |
0
|
1619685969.82775
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00b33000
|
success
|
0 |
0
|
1619685969.85875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d7000
|
success
|
0 |
0
|
1619685970.03075
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
589824
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
8192
(MEM_RESERVE)
base_address:
0x04bf0000
|
success
|
0 |
0
|
1619685970.03075
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c40000
|
success
|
0 |
0
|
1619685970.04675
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c41000
|
success
|
0 |
0
|
1619685970.09375
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c42000
|
success
|
0 |
0
|
1619685970.10875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c43000
|
success
|
0 |
0
|
1619685970.10875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c44000
|
success
|
0 |
0
|
1619685970.10875
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c46000
|
success
|
0 |
0
|
1619685970.12475
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005d8000
|
success
|
0 |
0
|
1619685970.17175
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00b34000
|
success
|
0 |
0
|
1619685970.17175
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
16384
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c48000
|
success
|
0 |
0
|
1619685970.17175
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
69632
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c4c000
|
success
|
0 |
0
|
1619685970.18675
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x04c5d000
|
success
|
0 |
0
|
1619685970.18675
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x00b35000
|
success
|
0 |
0
|
1619685970.26575
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x048a0000
|
success
|
0 |
0
|
1619685970.26575
NtAllocateVirtualMemory
|
process_identifier:
3048
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
allocation_type:
4096
(MEM_COMMIT)
base_address:
0x005da000
|
success
|
0 |
0
|
1619690885.532501
NtProtectVirtualMemory
|
process_identifier:
3036
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_handle:
0xffffffff
base_address:
0x03ff0000
|
success
|
0 |
0
|