NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73e01000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73de1000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73c51000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73481000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73c31000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73c21000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73c01000
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73431000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
region_size:
1966080
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x03cd0000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x03e70000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
length:
4096
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x73422000
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
region_size:
1638400
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x03cd0000
allocation_type:
8192
(MEM_RESERVE)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:18 a.m.
process_identifier:
1572
region_size:
4096
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x03e20000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:11 a.m.
process_identifier:
1236
region_size:
65536
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x00000000041e0000
allocation_type:
4096
(MEM_COMMIT)
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:11 a.m.
process_identifier:
2304
region_size:
286720
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000001c20000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0
NtProtectVirtualMemory
Sept. 21, 2024, 9:11 a.m.
process_identifier:
2304
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
1
length:
299008
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x000000026e7a1000
process_handle:
0xffffffffffffffff
1
0
0
NtAllocateVirtualMemory
Sept. 21, 2024, 9:11 a.m.
process_identifier:
2304
region_size:
253952
stack_dep_bypass:
0
stack_pivoted:
0
heap_dep_bypass:
0
protection:
64
(PAGE_EXECUTE_READWRITE)
base_address:
0x0000000001d10000
allocation_type:
12288
(MEM_COMMIT|MEM_RESERVE)
process_handle:
0xffffffffffffffff
1
0
0