Time & API | Arguments | Status | Return |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x76e2d000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x76e2d000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x76e28000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x76e28000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x7711d000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x7711d000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77127000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77127000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77118000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77118000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :8192 protection :64 base_address :0x77116000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :8192 protection :32 base_address :0x77116000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77117000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77117000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77118000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77118000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77117000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77117000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :32 base_address :0x77121000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x02099000 process_handle :0xffffffff | 1 | 0 |
2018-07-28 16:30:57 NtProtectVirtualMemory | process_identifier :2668 stack_dep_bypass :0 stack_pivoted :0 heap_dep_bypass :0 length :4096 protection :64 base_address :0x77124000 process_handle :0xffffffff | 1 | 0 |