NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
2097152
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x008a0000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00a60000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73f31000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73f32000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
1376256
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00720000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00830000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00432000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00465000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0046b000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00467000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0044c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00600000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
1948
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x022a1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x76971000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74fc1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x003f0000
allocation_type:
12289
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74471000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74451000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x743e1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
region_size:
995328
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x61e00000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:55 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74031000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x7355c000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x7336b000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x732ca000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73c42000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73253000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2104
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72fa1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
786432
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00700000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00780000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72901000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72902000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
1507328
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00c10000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00d40000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x003b2000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00465000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0046b000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00467000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0044c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00680000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2656
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x023a1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x76971000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74fc1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00ac0000
allocation_type:
12289
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74471000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74451000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x743e1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72eb1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72cb1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72c51000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 4, 2024, 9:56 a.m.
process_identifier:
2760
region_size:
2486272
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x10000000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0