NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2544
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73921000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2544
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73261000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2596
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73921000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2596
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x72e11000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2680
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73921000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:09 a.m.
process_identifier:
2680
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73261000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef4ee3000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
2424832
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000001fd0000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00000000021a0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3f0a000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef44b5000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3871000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3f0b000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
2162688
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000002420000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
8192
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00000000025b0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3872000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3874000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3874000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3874000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef3874000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
655360
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff10000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff20000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
65536
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff00000
allocation_type:
1056768
(MEM_RESERVE|MEM_TOP_DOWN)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fffff00000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe940fa000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe941ac000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe941d6000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe941b0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe9410c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fef2296000
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fefeffd000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe94220000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe94221000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe9411b000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe9414c000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe9411d000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe9410a000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Aug. 8, 2023, 9:02 a.m.
process_identifier:
2732
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000007fe94222000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0