NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6a5ed000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x6a1fe000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a3a000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x04a39000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4e000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4e000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08a4d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2332
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x08d0d000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2804
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x101e2000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Nov. 24, 2021, 12:21 p.m.
process_identifier:
2804
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
8192
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x1004a000
process_handle:
0xffffffff
1
0
0