Time & API |
Arguments |
Status |
Return |
Repeated |
1727544860.222519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef31e1000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.316519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345e000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.316519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345e000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.378519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.378519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.378519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.378519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345f000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3460000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3460000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3460000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3460000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3460000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3461000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3461000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3461000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef3461000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.394519
NtProtectVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fef345e000
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.784519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00032000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fffff10000
region_size:
589824
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fffff10000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fffff10000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fffff00000
region_size:
65536
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007fffff00000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.816519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000ea000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.831519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00022000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00033000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000fa000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00122000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000fd000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544860.972519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff0003c000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544861.050519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00170000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544861.175519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00034000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544861.191519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000eb000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544861.269519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000e2000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544862.566519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff000e3000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.847519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00171000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.941519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff0004f000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.941519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00172000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff0003a000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00084000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544914.956519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00053000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544915.175519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff00023000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|
1727544915.191519
NtAllocateVirtualMemory
|
process_handle:
0xffffffffffffffff
base_address:
0x000007ff001c0000
region_size:
4096
allocation_type:
4096
(MEM_COMMIT)
protection:
64
(PAGE_EXECUTE_READWRITE)
process_identifier:
1332
|
success
|
0 |
0
|