Found URL "http://server/get.asp" - Source: "00000000-00000376.00000000.193730.363E7000.00000002.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/spx.vbs" - Source: "00000000-00000376.00000000.193730.B8830000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/spx.vbsc:\users\public\documents\sys108029\spx.vbs" - Source: "00000000-00000376.00000000.193730.B8830000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/spx.vbsc:\users\public\documents\sys108029\spx.vbsenglish_united" - Source: "00000000-00000376.00000000.193730.B8B60000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=74409&enterprise=%ls%dhttps://go.microsoft.com/fwlink/?linkid=74408&enterprise=https://go.microsoft.com/fwlink/?linkid=37020&name=%s&threatid=%u&enterprise=%dpynetsubmitsamplesconsentspynetreportingpclient_public_commodempclient_allowadminelevationacquirepclient_noforcedreboot\?\volume" - Source: "00000000-00001592.00000000.197888.6B8E8000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=851034&clcid=0x409&httpsigupdate_baseurlforceupdatefrommusignaturedisablenotificationcloudbasedbehaviorblockingsignaturecategoryiddisablescheduledsignatureupdateonbatterysignatureupdatecatchupintervalsignatureslastcheckednissignatureslastupdateddeltaupdatefailurenissignatureversionnissignaturelocation%mpconfig_productappdatapath%\definition" - Source: "00000000-00001592.00000000.197888.6B8E8000.00000002.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportspynetreportinglocationlocalsettingoverridesubmitsamplesconsentdisableblockatfirstseenheartbeatdelayindaysheartbeatsamplingratessloptionsbypassinternetcheckmapslatencyretrytimeoutthreatseveritydefaultactionemptykeyvaluedisableprivacymode%mpconfig_productappdatapath%\telemetryallowuseruiaccessuilockdownnotification_suppresssuppressrebootnotificationsuppresswdonotificationmpconfig_productcodenamempconfig_productpathmpconfig_productappdatapathmpconfig_productuserappdatapathmpconfig_appdataroot12345678-f0f0-4f3f-b1f3-41cd1905616empconfig_reportingguid\msmplics.dllmpconfigut-53e7e780-2330-40c6-94c6-be75e946e933oftware\microsoft\removaltools\mrtguidfalsemp_config_type_szmp_config_type_dwordmp_config_type_multi_szmp_config_type_binarymp_config_type_nonemp_config_origin_nonemp_config_origin_defaultmp_config_origin_preferencesmp_config_origin_mdm_policymp_config_origin_policy*sof**eof*t%uh%um%uspt%uhp%udp%udt%uh2000-01-01t%02u:%02u:%02umpclient_nouseunifiedschedulingenginelocalsystem2100-01-01t00:00:00d:(a;;fa;;;sy)(a;;frfx;;;ls)maintenanceregularmicrosoft\windows\windows" - Source: "00000000-00001592.00000000.197888.6B8E8000.00000002.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtc:\users\public\documents\sys108029\msvcrt.dll" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtwinsta0\default:\windows\system32\ntdll.dll:\windows\system32:\windows\system32;c:\windows\system;c:\windows;le32.dllsvcrt.dll:\windows\system32\kernel32.dll:\windows\system32\apphelp.dll4-35:\windows\system32\kernelbase.dllsessions\1\windows\apiportectionc:\windows\temp\asllog_apphelpdebug_msvcrt.dll_1876.txtc:\windows\temp\asllog_shimengstate_msvcrt.dll_1876.txtc:\windows\temp\asllog_shimdebuglog_msvcrt.dll_1876.txtcrypt32.dll:\windows\system32\crypt32.dllfc42enu.dllfcn42d.dllleaut32.dllsvcirt.dllsvcrt20.dllsvcrt40.dllfc40.dllfc42.dllfcsubs.dllfcd42d.dllfco42d.dllfc42d.dllernel32.dlllackbox.dllwcwsp.dllwcwsp64.dll:\windows\system32\ucrtbase.dllmsasn1.dll:\windows\system32\msasn1.dlloleaut32.dlladvapi32.dll:\windows\system32\normaliz.dllcbb!:\windows\system32\user32.dll52c64b7e%systemroot%\system32\napinsp.dll,-1000%systemroot%\system32\pnrpnsp.dll,-1000%systemroot%\system32\pnrpnsp.dll,-1001%systemroot%\system32\nlasvc.dll,-1000%systemroot%\system32\wshtcpip.dll,-60103%systemroot%\system32\winrnr.dll,-1000:\windows\system32\bcryptprimitives.dll:\windows\system32\win32u.dllurrentcontrolset\services\vmbus\parameters\winsock:\windows\system32\bcrypt.dll8029\ole32.dllc:\users\public\documents\sys108029;c:\windows\system32;c:\windows\system;c:\windows;.;c:\programdata\oracle\java\javapath;c:\windows\system32;c:\windows;c:\windows\system32\wbem;c:\windows\system32\windowspowershell\v1.0\;c:\users\hapubws\appdata\roaming\nvm;c:\program" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txt" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txt07va07va@*vacomputername=desktop-fvvf82aonedrive=c:\users\hapubws\onedrivelogonserver=\\desktop-fvvf82a" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtc:\users\hapubws\application" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtz" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtc:\users\public\documents\sys108029\tmp598.dat3" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txthttps://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txthttps://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtpmya$zya" - Source: "00000000-00001876.00000000.189079.41760000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtc:\users\public\documents\sys108029\tmp598.datenglish_united" - Source: "00000000-00002228.00000000.189588.1AE80000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txt" - Source: "00000000-00002228.00000000.189588.1AEF0000.00000004.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/blaoso/uac399.txtc:\users\public\documents\sys108029\tmp598.datlmemprogramfiles(x86)=c:\program" - Source: "00000000-00002228.00000000.189588.1AEF0000.00000004.mdmp") Found URL "http://https://curl_responseno" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/caextract.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://raw.githubusercontent.com/mozilla-firefox/firefox/refs/heads/release/security/nss/lib/ckfw/builtins/certdata.txt" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/libcurl/c/curl_easy_setopt.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/sslcerts.htmlcurl" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/ssl-sessions.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/alt-svc.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/hsts.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://curl.se/docs/http-cookies.html" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://dictionaryperceptionrevolutionfoundationpx;height:successfulsupportersmillenniumhis" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://mathematicsmargin-top:eventually" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://descriptionrelatively" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://applicationslink" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://navigation" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://px;" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://www.world" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://www.years" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://interested" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://familiar" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://was" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "https://ain" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://whether" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://interpreted" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://);" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://addeventlistenerresponsible" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://.jpg" - Source: "00000000-00002240.00000000.194543.3EB33000.00000002.mdmp") Found URL "http://>>" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://dictionaryperceptionrevolutionfoundationpx;height:successfulsupportersmillenniumhis" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://mathematicsmargin-top:eventually" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://descriptionrelatively" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://applicationslink" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://navigation" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://px;" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "https://www.world" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://www.years" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://interested" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://familiar" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "https://was" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "https://ain" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://whether" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://interpreted" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://);" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://addeventlistenerresponsible" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://.jpg" - Source: "00000000-00008144.00000000.194281.09070000.00000004.mdmp") Found URL "http://>>" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://dictionaryperceptionrevolutionfoundationpx;height:successfulsupportersmillenniumhis" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://mathematicsmargin-top:eventually" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://descriptionrelatively" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://applicationslink" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://navigation" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://px;" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "https://www.world" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://www.years" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://interested" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://familiar" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "https://was" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "https://ain" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://whether" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://interpreted" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://);" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://addeventlistenerresponsible" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://.jpg" - Source: "00000000-00008144.00000001.196201.09070000.00000004.mdmp") Found URL "http://" - Source: "00000000-00008144.00000001.196201.795F2000.00000002.mdmp") Found URL "https://baolongwes.oss-ap-southeast-1.aliyuncs.com/spx/ficeo.zipe" - Source: "00000000-00008144.00000002.197420.067B8000.00000004.mdmp") Found URL "https://baolongwes8-ap-southeast-1.aliyuncs.com/spx/ficeo.zc:\users\public\documents\sys46677\tmp18y\machine\software\class@pplications\%1.exey\us873514557p70218355-1207367261-1001\software\microswindows\currentversion\explorer\shell" - Source: "00000000-00008144.00000002.197420.06859000.00000004.mdmp") Found URL "http://s;text-align:centerfont-weight:" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://html4/loose.dtd" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://style=" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://staticsuggested" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://www.a" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://an" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "https://www.recent" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://in" - Source: "00000000-00008144.00000002.197420.090D1000.00000004.mdmp") Found URL "http://www./div>