| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 458752
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x008c0000
- allocation_type:
- 8192
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008f0000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtProtectVirtualMemory |
- process_identifier:
- 2564
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 4096
- protection:
- 64
- base_address:
- 0x79e71000
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0055a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtProtectVirtualMemory |
- process_identifier:
- 2564
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- length:
- 8192
- protection:
- 64
- base_address:
- 0x79e72000
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00552000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00562000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008db000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008d7000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00563000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 8192
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00564000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008ca000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x005ba000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x005b7000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0055b000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008c2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008cc000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0056c000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 327680
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x7ef60000
- allocation_type:
- 1056768
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x7ef60000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x7ef60000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 65536
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x7ef50000
- allocation_type:
- 1056768
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x7ef50000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008d5000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x005b6000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00566000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebe0000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00553000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x008f1000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebe1000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00567000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00568000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x00569000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0f380000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 16384
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebe2000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 16384
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebe6000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebea000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0056a000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 2564
- region_size:
- 4096
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 1
- protection:
- 64
- base_address:
- 0x0ebeb000
- allocation_type:
- 4096
- process_handle:
- 0xffffffff
|
| 2564 |
NtAllocateVirtualMemory |
- process_identifier:
- 3060
- region_size:
- 245760
- stack_dep_bypass:
- 0
- stack_pivoted:
- 0
- heap_dep_bypass:
- 0
- protection:
- 64
- base_address:
- 0x00400000
- allocation_type:
- 12288
- process_handle:
- 0x000001f4
|
