| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 77824
- protection:
- 64
- base_address:
- 0x00301000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x00317000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x00318000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 32768
- protection:
- 64
- base_address:
- 0x00321000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x0032a000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x0032b000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 442368
- protection:
- 64
- base_address:
- 0x0ac11000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x0ac81000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x0ac82000
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 24576
- protection:
- 64
- base_address:
- 0x0ac83000
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 1572864
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x0c4f0000
- allocation_type:
- 8192
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c630000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x79e71000
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x006fa000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 8192
- protection:
- 64
- base_address:
- 0x79e72000
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x006f2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00812000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x7ddf4000
- process_handle:
- 0x000001a4
|
| 2440 |
NtProtectVirtualMemory |
- process_identifier:
- 2500
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x7dd74000
- process_handle:
- 0x000001a8
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0084b000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00847000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00813000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 8192
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00814000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0082a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00827000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0083a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x006fb000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 720896
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x0c710000
- allocation_type:
- 8192
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c780000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c781000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c782000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c783000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c784000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c785000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00832000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00845000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 16384
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c786000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2440 |
NtAllocateVirtualMemory |
- process_identifier:
- 2500
- region_size:
- 28672
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0c78a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
