Found URL "http://www.ccleaner.comopen" - Source: "00000000-00000640.00000000.67333.0042C000.00000004.mdmp") Found URL "http://www.google.com" - Source: "00000000-00000640.00000000.67333.034D0000.00000004.mdmp") Found URL "https://www.google.com/intl/en/chrome/browser/welcome.html" - Source: "00000000-00000640.00000000.67333.034D0000.00000004.mdmp") Found URL "http://www.ccleaner.comopen" - Source: "00000000-00000640.00000000.67333.034D0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000640.00000000.67333.034D0000.00000004.mdmp") Found URL "http://nsis.sf.net/nsis_errorerror" - Source: "00000000-00000640.00000001.69254.00409000.00000002.mdmp") Found URL "http://www.digicert.com/cps0j0h02,http://crl3.digicert.com/sha2-assured-ts.crl02,http://crl4.digicert.com/sha2-assured-ts.crl0y0w0$http://ocsp.digicert.com0ochttp://cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0brqtqjxy6z'dwc_" - Source: "00000000-00000640.00000001.69254.00420000.00000004.mdmp") Found URL "http://ocsp.digicert.com0c7http://cacerts.digicert.com/digicertassuredidrootca.crt0z0x0:4http://crl4.digicert.com/digicertassuredidrootca.crl0:4http://crl3.digicert.com/digicertassuredidrootca.crl0oh0f080*0(https://www.digicert.com/cps0," - Source: "00000000-00000640.00000001.69254.00420000.00000004.mdmp") Found URL "http://ocsp.digicert.com0c7http://cacerts.digicert.com/digicertassuredidrootca.crt0z0x0:4http://crl4.digicert.com/digicertassuredidrootca.crl0:4http://crl3.digicert.com/digicertassuredidrootca.crl0pi0g080*0(https://www.digicert.com/cps08ambf$" - Source: "00000000-00000640.00000001.69254.00420000.00000004.mdmp") Found URL "http://crl3.digicert.com/sha2-assured-cs-g1.crl05/http://crl4.digicert.com/sha2-assured-cs-g1.crl0le0c070*0(https://www.digicert.com/cps0x0v0$http://ocsp.digicert.com0nbhttp://cacerts.digicert.com/digicertsha2assuredidcodesigningca.crt0:1wy/bprecuvashell64.dllrecuvashell.dllrecuvashell.dll.newrecuvashell.dll.new->recuvashell.dllbranding.dlllanglang-1031.dlllang-1041.dlllang-1049.dlllang-1053.dlllang-1044.dlllang-1040.dlllang-1043.dlllang-1036.dlllang-1034.dlllang-1045.dlllang-1028.dlllang-1030.dlllang-1035.dlllang-1046.dlllang-1038.dlllang-1029.dlllang-2052.dlllang-1027.dlllang-1037.dlllang-1032.dlllang-1055.dlllang-1025.dlllang-1048.dlllang-1063.dlllang-1052.dlllang-3098.dlllang-2074.dlllang-1051.dlllang-1071.dlllang-5146.dlllang-1026.dlllang-1058.dlllang-1050.dlllang-1066.dlllang-1067.dlllang-1061.dlllang-1079.dlllang-9999.dlllang-1068.dlllang-1060.dlllang-1059.dlllang-1062.dlllang-1057.dlllang-1054.dllrecuva.lnkrecuva.lnkrecuvarecuva\recuva.lnkinternetshortcuthttp://www.ccleaner.com/recuvarecuva\recuva" - Source: "00000000-00001120.00000001.81285.03100000.00000004.mdmp") Found URL "http://www.ccleaner.com/go/app_license?p=2&l=http://www.ccleaner.com/go/app_privacy?p=2&l=kernel32::getcurrentprocess()i.skernel32::iswow64process(is,*i.s)erroronback$displaygooglechromepage$displaygoogletoolbarpage$gotcustomofferok0x408buttonevent.dll1190addeventhandlersoftware\piriform\recuvatemp.keyerror!" - Source: "00000000-00001120.00000001.81285.03100000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001120.00000001.81285.03100000.00000004.mdmp") Found URL "http://nsis.sf.net/nsis_errorerror" - Source: "00000000-00003996.00000000.72217.00409000.00000002.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003996.00000000.72217.02D70000.00000004.mdmp") Found URL "http://crl3.digicert.com/sha2-assured-cs-g1.crl05/http://crl4.digicert.com/sha2-assured-cs-g1.crl0le0c070*0(https://www.digicert.com/cps0x0v0$http://ocsp.digicert.com0nbhttp://cacerts.digicert.com/digicertsha2assuredidcodesigningca.crt0:1wy/bpdefragglershell.dlldefragglershell64.dlldefragglershell64.dll.newdefragglershell64.dll.new->defragglershell64.dlllanglang-1031.dlllang-1041.dlllang-1049.dlllang-1053.dlllang-1044.dlllang-1040.dlllang-2070.dlllang-1043.dlllang-1036.dlllang-1034.dlllang-1045.dlllang-1028.dlllang-1030.dlllang-1035.dlllang-1046.dlllang-1038.dlllang-1029.dlllang-2052.dlllang-1027.dlllang-1037.dlllang-1032.dlllang-1055.dlllang-1025.dlllang-1048.dlllang-1063.dlllang-1052.dlllang-1051.dlllang-1071.dlllang-5146.dlllang-1026.dlllang-1058.dlllang-1050.dlllang-1061.dlllang-1066.dlllang-1067.dlllang-1065.dlllang-1079.dlllang-1060.dlllang-1059.dlllang-9999.dlllang-1062.dlllang-1057.dlldefraggler.lnkdefraggler.lnkdefragglerdefraggler\defraggler.lnkinternetshortcuthttp://www.ccleaner.com/defragglerdefraggler\defraggler" - Source: "00000000-00003996.00000001.74140.02D70000.00000004.mdmp") Found URL "http://www.ccleaner.com/go/app_license?p=3&l=http://www.ccleaner.com/go/app_privacy?p=3&l=kernel32::getcurrentprocess()i.skernel32::iswow64process(is,*i.s)erroronback$displaygooglechromepage$displaygoogletoolbarpage$gotcustomofferok0x408buttonevent.dll1190addeventhandlersoftware\microsoft\windows\currentversion\explorer\mycomputer\defragpathpreviousdefragpathreplacewindowsdefragsoftware\piriform\defragglerinstallpathexecutabletemp.keyfaileduser32.dll::getclassname(i" - Source: "00000000-00003996.00000001.74140.02D70000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003996.00000001.74140.02D70000.00000004.mdmp") Found URL "http://crl3.digicert.com/sha2-assured-cs-g1.crl05/http://crl4.digicert.com/sha2-assured-cs-g1.crl0le0c070*0(https://www.digicert.com/cps0x0v0$http://ocsp.digicert.com0nbhttp://cacerts.digicert.com/digicertsha2assuredidcodesigningca.crt0:1wy/bpdefragglershell.dlldefragglershell64.dlldefragglershell64.dll.newdefragglershell64.dll.new->defragglershell64.dlllanglang-1031.dlllang-1041.dlllang-1049.dlllang-1053.dlllang-1044.dlllang-1040.dlllang-2070.dlllang-1043.dlllang-1036.dlllang-1034.dlllang-1045.dlllang-1028.dlllang-1030.dlllang-1035.dlllang-1046.dlllang-1038.dlllang-1029.dlllang-2052.dlllang-1027.dlllang-1037.dlllang-1032.dlllang-1055.dlllang-1025.dlllang-1048.dlllang-1063.dlllang-1052.dlllang-1051.dlllang-1071.dlllang-5146.dlllang-1026.dlllang-1058.dlllang-1050.dlllang-1061.dlllang-1066.dlllang-1067.dlllang-1065.dlllang-1079.dlllang-1060.dlllang-1059.dlllang-9999.dlllang-1062.dlllang-1057.dlldefraggler.lnkdefraggler.lnkdefragglerdefraggler\defraggler.lnkinternetshortcuthttp://www.ccleaner.com/defragglerdefraggler\defraggler" - Source: "00000000-00003996.00000002.76057.02D70000.00000004.mdmp") Found URL "http://www.ccleaner.com/go/app_license?p=3&l=http://www.ccleaner.com/go/app_privacy?p=3&l=kernel32::getcurrentprocess()i.skernel32::iswow64process(is,*i.s)erroronback$displaygooglechromepage$displaygoogletoolbarpage$gotcustomofferok0x408buttonevent.dll1190addeventhandlersoftware\microsoft\windows\currentversion\explorer\mycomputer\defragpathpreviousdefragpathreplacewindowsdefragsoftware\piriform\defragglerinstallpathexecutabletemp.keyfaileduser32.dll::getclassname(i" - Source: "00000000-00003996.00000002.76057.02D70000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003996.00000002.76057.02D70000.00000004.mdmp") Found URL "https://license.piriform.com/product/v1/installcheck?p=3&v=2.22.995&vx=&l=1033&b=2&o=10w6&g=0&i=1&a=3&e=0&n=dfsetup222_pro.exe&id=300lmemn,nt" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://service.piriform.com/installcheck.aspx?p=3&v=2.22.995&vx=&l=1033&b=2&o=10w6&g=0&i=1&a=3&e=0&n=dfsetup222_pro.exe&id=300@6og^lmemlmemlmem=rr9lmem" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "https://license.piriform.com/product/v1/installcheck?p=3&v=2.22.995&vx=&l=1033&b=2&o=10w6&g=0&i=1&a=3&e=0&n=dfsetup222_pro.exe&id=300qy8downgrd" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.9iqmgvw,czcthawte," - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;se]l+>%y4o0-%i16122u:t" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0internet1verisign," - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?secom" - Source: "00000000-00003996.00000002.76057.05EE0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mn" - Source: "00000000-00006684.00000001.72928.03500000.00000004.mdmp") Found URL "http://ccleaner.tools.avcdn.net/tools/ccleaner/updatecpip6//ccleaner.tools.avcdn.net:80/tools/ccleaner/update/patches.iniutf-16c:\windows\system32\drivers\software\piriform\ccleanerate.ic:\program" - Source: "00000000-00006684.00000001.72928.03500000.00000004.mdmp") Found URL "http://emupdate.avcdn.net/files/emupdate/pong.txtumber_of_processors=2rocessor_revision=4f00ublic=c:\users\publiceadpoolworkomepath=\users\hapubwsystemroot=c:\windowsccupdate.execcupdate.iniegoextender:\windows\system32\kernel.appcore.dll:\windows\system32\wtsapi32.dll2.dxtop-fvvf82acomspec=c:\windows\system32\cmd.exefps_browsersmodulepath=c:\windows\system32\windowspowershell\v1.0\modules\;c:\program" - Source: "00000000-00006684.00000002.74849.03500000.00000004.mdmp") Found URL "http://ccleaner.tools.avcdn.net/tools/ccleaner/update/patches.inihttp://ccleaner.tools.avcdn.net/tools/ccleaner/update/updates.xml145574-clsid\" - Source: "00000000-00006684.00000002.74849.03500000.00000004.mdmp") Found URL "http://ccleaner.tools.avcdn.net/tools/ccleaner/update/ccupdate029.cabc:\users\hapubws\appdata\local\temp\91712640-238d-4156-9f81-1ae4dea0f6be:3f57:ce5desktop-fvvf82a192.168.243.262001:0:34f1:8072:34a0:2fc7:3f57:ce5b+ncalrpc:[oled3da4ca3218eb3df270304993816]t" - Source: "00000000-00006684.00000002.74849.03500000.00000004.mdmp") Found URL "http://ccleaner.tools.avcdn.net/tools/ccleaner/updatecpip60000000clsid\" - Source: "00000000-00006684.00000002.74849.03500000.00000004.mdmp") Found URL "http://nsis.sf.net/nsis_errorerror" - Source: "00000000-00007336.00000000.68249.00409000.00000002.mdmp") Found URL "https://shepherd.ff.avast.com/mozilla/4.0" - Source: "00000000-00007336.00000000.68249.02970000.00000004.mdmp") Found URL "http://www.ccleaner.comopen" - Source: "00000000-00007336.00000000.68249.02970000.00000004.mdmp") Found URL "http://service.piriform.com/installcheck.aspx5.70.7909prefsprivacysharedata1stpartyp\pfbl::sendburgereventsimple(t" - Source: "00000000-00007336.00000000.68249.02970000.00000004.mdmp") Found URL "http://www.ccleaner.com/go/app_releasenotes?p=branding.dlllanglang-1025.dlllang-1026.dlllang-1027.dlllang-1028.dlllang-1029.dlllang-1030.dlllang-1031.dlllang-1032.dlllang-1034.dlllang-1035.dlllang-1036.dlllang-1037.dlllang-1038.dlllang-1040.dlllang-1041.dlllang-1042.dlllang-1043.dlllang-1044.dlllang-1045.dlllang-1046.dlllang-1048.dlllang-1049.dlllang-1050.dlllang-1051.dlllang-1052.dlllang-1053.dlllang-1054.dlllang-1055.dlllang-1056.dlllang-1057.dlllang-1058.dlllang-1059.dlllang-1060.dlllang-1061.dlllang-1062.dlllang-1063.dlllang-1065.dlllang-1066.dlllang-1067.dlllang-1068.dlllang-1079.dlllang-1071.dlllang-1081.dlllang-1086.dlllang-1087.dlllang-1090.dlllang-1092.dlllang-1093.dlllang-1102.dlllang-1104.dlllang-1109.dlllang-1110.dlllang-1155.dlllang-2052.dlllang-2070.dlllang-2074.dlllang-3098.dlllang-5146.dlllang-9999.dllccleaner.lnkccleaner.lnkccleanerccleaner\ccleaner.lnkinternetshortcuthttp://www.ccleaner.com/ccleanerccleaner\ccleaner" - Source: "00000000-00007336.00000000.68249.02970000.00000004.mdmp") Found URL "http://www.ccleaner.com/go/app_license?p=1&l=http://www.ccleaner.com/go/app_privacy?p=1&l=pfbl.dllpfbl::getmidexpfbl::getguidpfbl::getmachineidpfbl::setproducttypepfbl::downloadconfigi" - Source: "00000000-00007336.00000000.68249.02970000.00000004.mdmp") Found URL "http://ocsp.digicert.com0c7http://cacerts.digicert.com/digicertassuredidrootca.crt0z0x0:4http://crl4.digicert.com/digicertassuredidrootca.crl0:4http://crl3.digicert.com/digicertassuredidrootca.crl0oh0f080*0(https://www.digicert.com/cps0," - Source: "00000000-00007336.00000001.70168.00420000.00000004.mdmp") Found URL "http://crl3.digicert.com/sha2-assured-cs-g1.crl05/http://crl4.digicert.com/sha2-assured-cs-g1.crl0le0c070*0(https://www.digicert.com/cps0x0v0$http://ocsp.digicert.com0nbhttp://cacerts.digicert.com/digicertsha2assuredidcodesigningca.crt0:1wy/bpjt=zc\;hrg020200908091011zdigicert" - Source: "00000000-00007336.00000001.70168.00420000.00000004.mdmp") Found URL "https://www.digicert.com/cps0j0h02,http://crl3.digicert.com/sha2-assured-ts.crl02,http://crl4.digicert.com/sha2-assured-ts.crl0y0w0$http://ocsp.digicert.com0ochttp://cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0j/nz9iqmgvw,czcnew" - Source: "00000000-00007336.00000001.70168.065C0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00007336.00000001.70168.065C0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00007336.00000001.70168.065C0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,i$yeli7/k" - Source: "00000000-00007704.00000001.81112.C7AE5000.00000002.mdmp") Found URL "https://www.digicert.com/cps0j0h02,http://crl3.digicert.com/sha2-assured-ts.crl02,http://crl4.digicert.com/sha2-assured-ts.crl0y0w0$http://ocsp.digicert.com0ochttp://cacerts.digicert.com/digicertsha2assuredidtimestampingca.crt0j/nz