IOC Report
New Order - RCII900718_Contract Drafting.exe

loading gif

Files

File Path
Type
Category
Malicious
New Order - RCII900718_Contract Drafting.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\New Order - RCII900718_Contract Drafting.exe.log
CSV text
dropped
 malicious
C:\Users\user\AppData\Local\Temp\04j58b6g
SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\New Order - RCII900718_Contract Drafting.exe
"C:\Users\user\Desktop\New Order - RCII900718_Contract Drafting.exe"
 malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
 malicious
C:\Program Files (x86)\AUomrIcGckQctbQWdqxqsuxfByONsHfvVvkOjafMplh\ZrTbKDhAWYKJu.exe
"C:\Program Files (x86)\AUomrIcGckQctbQWdqxqsuxfByONsHfvVvkOjafMplh\ZrTbKDhAWYKJu.exe"
malicious
C:\Windows\SysWOW64\sc.exe
"C:\Windows\SysWOW64\sc.exe"
 malicious
C:\Program Files (x86)\AUomrIcGckQctbQWdqxqsuxfByONsHfvVvkOjafMplh\ZrTbKDhAWYKJu.exe
"C:\Program Files (x86)\AUomrIcGckQctbQWdqxqsuxfByONsHfvVvkOjafMplh\ZrTbKDhAWYKJu.exe"
malicious
C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\Firefox.exe"
 malicious

URLs

Name
IP
Malicious
http://www.jalan2.online/xu9o/?Vblddl=Y1SnkQLh9oyCIrW0o0O4vqPemXX8Spt1zoY93P6OWbCvdS06v54NadN0bxhIZaxlyI96f1lIInN9xaPSBVcrMr8DLl9ZyJ18b2nxQ81rZE0uLnMg7aaVIRg=&At=4ZW0
108.181.189.7
 malicious
http://www.bloodbalancecaps.shop/7n6c/?Vblddl=ePeKNPyUeLpNn1ut9QR5+vkaHUGSQvJrwPLb6fKcgQCso5jGZqjP6M9GYYTFao+4npn6icqsLwsi7nEjf66UvTUwrIE2dD1LfojjSGoioIp2xNG+LZcOM+Y=&At=4ZW0
108.179.253.197
 malicious
http://www.avalanchefi.xyz/ctta/?At=4ZW0&Vblddl=73htI/07lnbi6jhjvkNHrlWSa6BSjsKivRRSV4arkt57XDlKC2xJvna+Jje1nWd5k0Z3PS0VVZTw4ek7NFPoag2/xWEWhdCP8yoM02bo7Rk5ZALP8w8OFi4=
13.248.169.48
 malicious
http://www.laohub10.net/dfeq/
23.225.159.42
 malicious
http://www.laohub10.net/dfeq/?Vblddl=gAXULa6m81FP6NaNWEaqYxdrDcJADutaGDMyuCCNna1Q7N6mqkEUlVDne0yRrfV+N8trXlbxkU4RIowztTRv+FQMMrCoDDJ1FGnXoByL22JcZjp7VwlUZtI=&At=4ZW0
23.225.159.42
 malicious
http://www.jalan2.online/xu9o/
108.181.189.7
 malicious
http://www.avalanchefi.xyz/ctta/
13.248.169.48
 malicious
https://ac.ecosia.org/autocomplete?q=
unknown
https://duckduckgo.com/chrome_newtab
unknown
https://duckduckgo.com/ac/?q=
unknown
http://bloodbalancecaps.shop/7n6c/?Vblddl=ePeKNPyUeLpNn1ut9QR5
unknown
https://login.li
unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
http://www.laohub10.net
unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
https://www.ecosia.org/newtab/
unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
unknown
There are 8 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.avalanchefi.xyz
13.248.169.48
 malicious
r0lqcud7.nbnnn.xyz
23.225.159.42
 malicious
jalan2.online
108.181.189.7
 malicious
bloodbalancecaps.shop
108.179.253.197
 malicious
www.02760.wang
unknown
www.jalan2.online
unknown
www.laohub10.net
unknown
www.bloodbalancecaps.shop
unknown

IPs

IP
Domain
Country
Malicious
13.248.169.48
www.avalanchefi.xyz
United States
malicious
23.225.159.42
r0lqcud7.nbnnn.xyz
United States
malicious
108.179.253.197
bloodbalancecaps.shop
United States
malicious
108.181.189.7
jalan2.online
Canada
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
3630000
trusted library allocation
page read and write
 malicious
25C0000
unclassified section
page execute and read and write
 malicious
2F10000
system
page execute and read and write
 malicious
AEB000
heap
page read and write
 malicious
35C0000
trusted library allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
25F0000
unkown
page execute and read and write
 malicious
2B70000
unclassified section
page execute and read and write
 malicious
51AE000
stack
page read and write
64F000
system
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
387E000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
990000
heap
page read and write
300000
unkown
page readonly
34A1000
heap
page read and write
520000
unkown
page read and write
34A1000
heap
page read and write
3302000
heap
page read and write
46C000
stack
page read and write
248A9C60000
system
page execute and read and write
A10000
heap
page read and write
8280000
trusted library allocation
page read and write
34A1000
heap
page read and write
EC0000
trusted library allocation
page read and write
3680000
trusted library allocation
page read and write
60000
unkown
page readonly
34A1000
heap
page read and write
248ABA11000
trusted library allocation
page read and write
34A1000
heap
page read and write
32E9000
heap
page read and write
555000
unkown
page read and write
531000
unkown
page readonly
37C0000
trusted library allocation
page read and write
2F0000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
21A0000
heap
page read and write
34A1000
heap
page read and write
D7E000
stack
page read and write
34A1000
heap
page read and write
975000
stack
page read and write
35A0000
heap
page read and write
5D7000
unkown
page readonly
248AB680000
trusted library allocation
page read and write
325E000
heap
page read and write
34A1000
heap
page read and write
FD1000
trusted library allocation
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
557000
unkown
page readonly
34A1000
heap
page read and write
5F8000
system
page execute and read and write
3CE2000
unclassified section
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
2AD1000
direct allocation
page execute and read and write
AB8000
heap
page read and write
4BAF000
stack
page read and write
34A1000
heap
page read and write
2FB0000
heap
page read and write
3280000
heap
page read and write
34A1000
heap
page read and write
248A9CC6000
system
page execute and read and write
6C0000
unkown
page read and write
846F000
stack
page read and write
23BC000
unkown
page read and write
541000
unkown
page execute read
3FBC000
unclassified section
page read and write
24F4000
heap
page read and write
32C8000
heap
page read and write
5CC000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
520000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
3250000
heap
page read and write
34A1000
heap
page read and write
730000
unkown
page readonly
32D2000
heap
page read and write
5C9000
unkown
page readonly
818B000
heap
page read and write
6D0000
heap
page read and write
34A1000
heap
page read and write
5EC000
system
page execute and read and write
34A1000
heap
page read and write
B90000
unkown
page readonly
4C0000
unkown
page readonly
A40000
heap
page read and write
81BE000
heap
page read and write
8FC000
stack
page read and write
34A1000
heap
page read and write
440000
unkown
page readonly
570000
unkown
page read and write
7B7000
heap
page read and write
34A1000
heap
page read and write
F30000
heap
page read and write
A8E000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
541000
unkown
page execute read
4D0000
heap
page read and write
2E0000
unkown
page readonly
34A1000
heap
page read and write
3333000
heap
page read and write
37EA000
heap
page read and write
28A0000
heap
page execute and read and write
248A9EA0000
heap
page read and write
21A4000
heap
page read and write
3D43000
trusted library allocation
page read and write
34A1000
heap
page read and write
555000
unkown
page read and write
2500000
unkown
page readonly
34A1000
heap
page read and write
38C0000
trusted library allocation
page read and write
541000
unkown
page execute read
34A1000
heap
page read and write
6750000
trusted library allocation
page read and write
3638000
heap
page read and write
FBE000
stack
page read and write
700000
unkown
page read and write
81D6000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
248AB660000
heap
page read and write
34A1000
heap
page read and write
6D5000
heap
page read and write
34A1000
heap
page read and write
EB4000
trusted library allocation
page read and write
6D0000
heap
page read and write
34A1000
heap
page read and write
54E000
unkown
page readonly
34A1000
heap
page read and write
3990000
direct allocation
page execute and read and write
34A1000
heap
page read and write
5F0000
unkown
page read and write
80000
unkown
page readonly
34A1000
heap
page read and write
332F000
heap
page read and write
557000
unkown
page readonly
2F90000
heap
page read and write
34A1000
heap
page read and write
8270000
trusted library allocation
page read and write
4D0000
heap
page read and write
34A1000
heap
page read and write
36A000
stack
page read and write
34A1000
heap
page read and write
32D7000
heap
page read and write
34A1000
heap
page read and write
248A9CC8000
system
page execute and read and write
4A0000
unkown
page readonly
34A1000
heap
page read and write
8175000
heap
page read and write
3308000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
9E0000
heap
page read and write
4F80000
trusted library section
page read and write
248ABA0D000
trusted library allocation
page read and write
34A1000
heap
page read and write
750000
heap
page read and write
4925DFE000
stack
page read and write
9F0000
heap
page read and write
32D7000
heap
page read and write
EEB000
trusted library allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
540000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
883F000
stack
page read and write
3257000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
7AC000
stack
page read and write
34A1000
heap
page read and write
3620000
heap
page read and write
248ABA21000
trusted library allocation
page read and write
842E000
stack
page read and write
B00000
heap
page read and write
7B0000
heap
page read and write
34A1000
heap
page read and write
21A0000
heap
page read and write
450000
heap
page read and write
A50000
heap
page read and write
23C0000
heap
page read and write
531000
unkown
page readonly
248ABBCE000
trusted library allocation
page read and write
819E000
heap
page read and write
C40000
unkown
page readonly
391C000
stack
page read and write
34A1000
heap
page read and write
8B0000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
248ABA0F000
trusted library allocation
page read and write
AAD000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
29BF2000
system
page read and write
2FB4000
heap
page read and write
2ED8000
stack
page read and write
4B0000
unkown
page readonly
248AB900000
trusted library allocation
page read and write
34A1000
heap
page read and write
2FA0000
heap
page read and write
49255FE000
stack
page read and write
32E9000
heap
page read and write
8181000
heap
page read and write
34A1000
heap
page read and write
81C7000
heap
page read and write
34A1000
heap
page read and write
248ABBBE000
trusted library allocation
page read and write
34A1000
heap
page read and write
A90000
direct allocation
page read and write
4924DFB000
stack
page read and write
21B0000
unkown
page readonly
3315000
heap
page read and write
5D3000
system
page execute and read and write
29ECC000
system
page read and write
34A1000
heap
page read and write
3260000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
730000
unkown
page readonly
A00000
heap
page read and write
4A0000
unkown
page readonly
3260000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
430000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
4AAC000
stack
page read and write
ED7000
trusted library allocation
page execute and read and write
29D0C000
system
page read and write
60000
unkown
page readonly
248A9E6A000
heap
page read and write
760000
unkown
page read and write
8F0000
heap
page read and write
930000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
2A2B4000
system
page read and write
84B0000
heap
page read and write
28B1000
trusted library allocation
page read and write
34A1000
heap
page read and write
46C8000
unclassified section
page read and write
37C0000
trusted library allocation
page read and write
2E0000
unkown
page readonly
248ABB01000
trusted library allocation
page read and write
A7E000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
7B7000
heap
page read and write
7DD000
heap
page read and write
530000
unkown
page read and write
F20000
unkown
page readonly
5C4000
unkown
page readonly
3E00000
trusted library allocation
page read and write
2C88000
unkown
page read and write
3AD8000
trusted library allocation
page read and write
C3C000
heap
page read and write
34A1000
heap
page read and write
397D000
trusted library allocation
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
325A000
heap
page read and write
34A1000
heap
page read and write
540000
unkown
page readonly
34A1000
heap
page read and write
297C000
unkown
page execute and read and write
34A1000
heap
page read and write
2FB4000
heap
page read and write
3ABD000
direct allocation
page execute and read and write
541000
unkown
page execute read
34A0000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
3913000
heap
page read and write
81CB000
heap
page read and write
A70000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
3C5D000
direct allocation
page execute and read and write
70000
unkown
page readonly
760000
unkown
page read and write
43A4000
unclassified section
page read and write
46C000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
395D000
stack
page read and write
34A1000
heap
page read and write
F10000
trusted library allocation
page execute and read and write
34A1000
heap
page read and write
3CD2000
direct allocation
page execute and read and write
34A1000
heap
page read and write
B8F000
stack
page read and write
4536000
unclassified section
page read and write
248ABA00000
trusted library allocation
page read and write
34A1000
heap
page read and write
A97000
heap
page read and write
5F0000
unkown
page read and write
3339000
heap
page read and write
34A1000
heap
page read and write
3329000
heap
page read and write
81C2000
heap
page read and write
8191000
heap
page read and write
32D2000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
C2A000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
32DC000
heap
page read and write
87C000
stack
page read and write
248A9E8F000
heap
page read and write
248AB810000
heap
page read and write
21B0000
unkown
page readonly
24CF000
stack
page read and write
3DA2000
unclassified section
page read and write
300000
unkown
page readonly
1ED000
stack
page read and write
38B1000
trusted library allocation
page read and write
34A1000
heap
page read and write
A4E000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
2EFC000
unclassified section
page execute and read and write
34A1000
heap
page read and write
420000
unkown
page readonly
3294000
heap
page read and write
570000
unkown
page read and write
32F3000
heap
page read and write
3720000
trusted library allocation
page execute and read and write
7CF000
heap
page read and write
34A1000
heap
page read and write
2964000
unkown
page read and write
F20000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
81B7000
heap
page read and write
5DC000
system
page execute and read and write
34A1000
heap
page read and write
2E9B000
stack
page read and write
34A1000
heap
page read and write
2FAC000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
54E000
unkown
page readonly
C20000
heap
page read and write
530000
unkown
page read and write
B90000
unkown
page readonly
2FB4000
heap
page read and write
A9C000
heap
page read and write
52AE000
stack
page read and write
54E000
unkown
page readonly
3BC9000
trusted library allocation
page read and write
2820000
direct allocation
page execute and read and write
5CE000
stack
page read and write
562000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
2362000
unkown
page read and write
83EF000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
294D000
direct allocation
page execute and read and write
34A1000
heap
page read and write
570000
system
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
3C61000
direct allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
257C000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
29BE000
direct allocation
page execute and read and write
48B8000
trusted library allocation
page read and write
9C8000
heap
page read and write
5D0000
unkown
page readonly
51E000
stack
page read and write
32C4000
heap
page read and write
34A1000
heap
page read and write
331F000
heap
page read and write
2B68000
direct allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
750000
heap
page read and write
4DC0000
heap
page execute and read and write
37C0000
trusted library allocation
page read and write
34A1000
heap
page read and write
257C000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
4B0000
unkown
page readonly
1ED000
stack
page read and write
35A0000
trusted library allocation
page read and write
383D000
stack
page read and write
C40000
unkown
page readonly
5D0000
unkown
page readonly
3AB9000
direct allocation
page execute and read and write
430000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
54E000
unkown
page readonly
34A1000
heap
page read and write
557000
unkown
page readonly
22A2000
unkown
page read and write
34A1000
heap
page read and write
248A9E92000
heap
page read and write
248ABBC4000
trusted library allocation
page read and write
F20000
trusted library allocation
page read and write
80000
unkown
page readonly
4BEE000
stack
page read and write
24F0000
heap
page read and write
248ABBA6000
trusted library allocation
page read and write
2AE6000
direct allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
325F000
heap
page read and write
420000
unkown
page readonly
34A1000
heap
page read and write
83AE000
stack
page read and write
EC4000
trusted library allocation
page read and write
34A1000
heap
page read and write
D3F000
stack
page read and write
34A1000
heap
page read and write
2AED000
direct allocation
page execute and read and write
248A9E7C000
heap
page read and write
34A1000
heap
page read and write
819B000
heap
page read and write
32DC000
heap
page read and write
3BC6000
trusted library allocation
page read and write
248AB680000
trusted library allocation
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
29CB2000
system
page read and write
34A1000
heap
page read and write
24F4000
heap
page read and write
34A1000
heap
page read and write
555000
unkown
page read and write
375B000
heap
page read and write
4C0000
unkown
page readonly
34A1000
heap
page read and write
32B8000
heap
page read and write
FF0000
heap
page read and write
34A1000
heap
page read and write
EE7000
trusted library allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
440000
unkown
page readonly
EA000
stack
page read and write
34A1000
heap
page read and write
8B0000
unkown
page readonly
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
289F000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
6B1000
unkown
page readonly
248A9E92000
heap
page read and write
FE0000
trusted library section
page read and write
24F0000
heap
page read and write
7B0000
heap
page read and write
34A1000
heap
page read and write
2E89000
unclassified section
page execute and read and write
34A1000
heap
page read and write
EA0000
trusted library allocation
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
540000
unkown
page readonly
25BF000
stack
page read and write
4F7E000
stack
page read and write
6F0000
unkown
page read and write
34A1000
heap
page read and write
555000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
4A4E000
stack
page read and write
34A1000
heap
page read and write
218E000
stack
page read and write
997000
heap
page read and write
4E7E000
stack
page read and write
34A1000
heap
page read and write
2949000
direct allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
2F0000
unkown
page readonly
EDA000
trusted library allocation
page execute and read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
6C0000
unkown
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
4CEF000
stack
page read and write
248A9E60000
heap
page read and write
3255000
heap
page read and write
997000
heap
page read and write
2FB4000
heap
page read and write
557000
unkown
page readonly
81AA000
heap
page read and write
34A1000
heap
page read and write
540000
unkown
page readonly
EB3000
trusted library allocation
page execute and read and write
3DFC000
unclassified section
page read and write
5FA000
system
page execute and read and write
990000
heap
page read and write
2AF6000
unkown
page read and write
49EC000
unclassified section
page read and write
36A000
stack
page read and write
34A1000
heap
page read and write
F7E000
stack
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
E7E000
stack
page read and write
34A1000
heap
page read and write
3ACC000
trusted library allocation
page read and write
34A1000
heap
page read and write
49265FE000
stack
page read and write
248AB680000
trusted library allocation
page read and write
34A1000
heap
page read and write
70000
unkown
page readonly
3917000
heap
page read and write
84AE000
stack
page read and write
8F0000
heap
page read and write
21A4000
heap
page read and write
EA000
stack
page read and write
ABE000
heap
page read and write
23C0000
heap
page read and write
248A9E8B000
heap
page read and write
AF0000
heap
page read and write
8196000
heap
page read and write
32FF000
heap
page read and write
34A1000
heap
page read and write
34A1000
heap
page read and write
3988000
heap
page read and write
2500000
unkown
page readonly
450000
heap
page read and write
560000
unkown
page readonly
34A1000
heap
page read and write
28ED000
trusted library allocation
page read and write
2909000
unkown
page execute and read and write
248A9D60000
heap
page read and write
34A1000
heap
page read and write
248ABA03000
trusted library allocation
page read and write
34A1000
heap
page read and write
22A2000
unkown
page read and write
3B2E000
direct allocation
page execute and read and write
6B1000
unkown
page readonly
There are 566 hidden memdumps, click here to show them.