NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dce1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dbe1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6db21000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6db21000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74f41000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75241000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75111000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73321000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6da21000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6da11000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d9d1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d9c1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d981000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d941000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d921000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d8e1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75401000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d8c1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x074e0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x074e0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x074f0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
1972
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x07500000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
2720
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d5f1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:17 p.m.
process_identifier:
2560
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d591000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
16384
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d636000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x007a0000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x007b0000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
region_size:
131072
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00900000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d531000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 1, 2021, 5:18 p.m.
process_identifier:
2560
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6d4e1000
process_handle:
0xffffffff
1
0
0