NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
1680
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74011000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
1680
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73fe1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2112
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74011000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2112
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73fb1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2180
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74011000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2180
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73fe1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2228
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x74011000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 8:05 a.m.
process_identifier:
2228
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73fb1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef4033000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
1376256
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000000ac0000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000000b90000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3b6a000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3485000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d1000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3b6b000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
1638400
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000000c10000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000000d20000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d2000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d4000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d4000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d4000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef34d4000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
655360
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff20000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
65536
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff00000
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff00000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93d1a000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93dcc000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93df6000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93dd0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93d2c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef1e16000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fefe52d000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93e40000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93e41000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93d3b000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93d6c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 1, 2023, 7:58 a.m.
process_identifier:
2292
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe93d3d000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0