Skip to content

Instantly share code, notes, and snippets.

@hasherezade

hasherezade/params.txt Secret

Last active March 20, 2023 21:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hasherezade/19aee3fedb8f1c0b62c4f62cddf752eb to your computer and use it in GitHub Desktop.
Save hasherezade/19aee3fedb8f1c0b62c4f62cddf752eb to your computer and use it in GitHub Desktop.
Download ZIP
Params for tracing Magniber
Raw
params.txt
ntdll;RtlCreateProcessParametersEx;10
ntdll;RtlInitUnicodeString;2
ntdll;NtAllocateVirtualMemory;6
ntdll;NtQuerySystemInformation;4
ntdll;NtOpenProcess;4
ntdll;NtWriteVirtualMemory;5
ntdll;NtCreateThreadEx;11
ntdll;NtResumeThread;2
ntdll;NtQueryPerformanceCounter;2
ntdll;NtOpenFile;6
ntdll;NtQueryVolumeInformationFile;5
ntdll;NtOpenKey;3
ntdll;NtEnumerateKey;6
ntdll;NtWriteFile;9
ntdll;NtSetValueKey;6
ntdll;NtCreateUserProcess;10
ntdll;NtCreateFile;10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment