From 64d3a359d3a73e0d84af72fe39f7237d65916cf4 Mon Sep 17 00:00:00 2001
From: mr-tz <moritz.raabe@mandiant.com>
Date: Sat, 19 Aug 2023 11:27:55 +0200
Subject: [PATCH] fix example function address

---
 host-interaction/process/inject/free-user-process-memory.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/host-interaction/process/inject/free-user-process-memory.yml b/host-interaction/process/inject/free-user-process-memory.yml
index 8b0baec70..eb5ec915f 100644
--- a/host-interaction/process/inject/free-user-process-memory.yml
+++ b/host-interaction/process/inject/free-user-process-memory.yml
@@ -10,7 +10,7 @@ rule:
     mbc:
       - Memory::Free Memory [C0044]
     examples:
-      - 493167E85E45363D09495D0841C30648:0x404B00
+      - 493167E85E45363D09495D0841C30648:0x404CA0
   features:
     - and:
       - match: attach user process memory