NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dce1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dd3f000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74f41000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75241000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x75111000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73321000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dbf1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dbe1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6dba1000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x06160000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x06160000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x06170000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
June 16, 2021, 10:05 a.m.
process_identifier:
2648
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x06280000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0