NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dce1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dc81000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x65001000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74f41000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75111000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x71f61000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x05870000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x058a0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x058a0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x05a60000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x05a80000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:44 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x732d1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:44 p.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x732d2000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
April 6, 2021, 2:43 p.m.
process_identifier:
2032
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6f492000
process_handle:
0xffffffff
1
0
0