Found URL "http://docs.oasisractxlistlistlistlistlistlistlist8^listlistlistlistlistlistlistlistlistlistlistplistlistlistlistlistlistlistlisth^listlistlistlistlistlistlistlistlistlistlistlistlistlistlistlistlistlistlist0listlistlist" - Source: "00000000-00001464.00000000.189841.02D20000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00001464.00000000.189841.02D20000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?secom" - Source: "00000000-00001464.00000000.189841.02E06000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0nf:8" - Source: "00000000-00001464.00000000.189841.02E06000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;nyvt'nmv8" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.9iqmgvw,czctkvv%tovq!tcv-tgv)t" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0120531151137z0/^g(o-cejy" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/sfsca-crl.crl0+%http://crl.startcom.org/sfsca-crl.crl0" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf05)http://cert.startcom.org/intermediate.pdf0" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf0)startcom" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,e" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/product4uc" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000000.189841.074B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00001464.00000001.191760.02D20000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?secom" - Source: "00000000-00001464.00000001.191760.02E06000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0nf:8" - Source: "00000000-00001464.00000001.191760.02E06000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=285555" - Source: "00000000-00001464.00000001.191760.02E06000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;1>=9iqmgvw,czctkvv%tovq!tcv-tgv)t" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0120531151137z0/^g(o-cejy" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/sfsca-crl.crl0+%http://crl.startcom.org/sfsca-crl.crl0" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf05)http://cert.startcom.org/intermediate.pdf0" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf0)startcom" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt06" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0(vyvhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0/r$u,ev$f9]mwyprg?j?" - Source: "00000000-00001464.00000001.191760.074B0000.00000004.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportmdataoft\winfender\ervicewindows" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccodsigpca_08-31-2010.crl0zn0l0j>http://www.microsoft.com/pki/certs/miccodsigpca_08-31-2010.crt0" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0.tq[m*$" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/powershell" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/windows1.3.6.1.4.1.311.3.3.1a+zt20170929123018.134z0washington1redmond1microsoft" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000001.191760.09090000.00000004.mdmp") Found URL "http://www.validationtest.contoso.com/test%d.htmlmpoav_forcedeepscan" - Source: "00000000-00001464.00000001.191760.721A1000.00000020.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00001464.00000002.193679.02D20000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?secom" - Source: "00000000-00001464.00000002.193679.02E06000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0nf:8" - Source: "00000000-00001464.00000002.193679.02E06000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=285555" - Source: "00000000-00001464.00000002.193679.02E06000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;1>=9iqmgvw,czctkvv%tovq!tcv-tgv)t" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0120531151137z0/^g(o-cejy" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/sfsca-crl.crl0+%http://crl.startcom.org/sfsca-crl.crl0" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf05)http://cert.startcom.org/intermediate.pdf0" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf0)startcom" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt06" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0(vyvhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0/r$u,ev$f9]mwyprg?j?" - Source: "00000000-00001464.00000002.193679.074B0000.00000004.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportmdataoft\winfender\ervicewindows" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccodsigpca_08-31-2010.crl0zn0l0j>http://www.microsoft.com/pki/certs/miccodsigpca_08-31-2010.crt0" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0.tq[m*$" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/powershell" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/windows1.3.6.1.4.1.311.3.3.1a+zt20170929123018.134z0washington1redmond1microsoft" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000002.193679.09090000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=74409&enterprise=%ls%dhttps://go.microsoft.com/fwlink/?linkid=74408&enterprise=https://go.microsoft.com/fwlink/?linkid=37020&name=%s&threatid=%u&enterprise=%dpynetsubmitsamplesconsentspynetreportingpclient_public_commodempclient_allowadminelevationacquirepclient_noforcedreboot\?\volume" - Source: "00000000-00001464.00000002.193679.6F341000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=851034&clcid=0x409&httpsigupdate_baseurlforceupdatefrommusignaturedisablenotificationcloudbasedbehaviorblockingsignaturecategoryiddisablescheduledsignatureupdateonbatterysignatureupdatecatchupintervalsignatureslastcheckednissignatureslastupdateddeltaupdatefailurenissignatureversionnissignaturelocation%mpconfig_productappdatapath%\definition" - Source: "00000000-00001464.00000002.193679.6F341000.00000020.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportspynetreportinglocationlocalsettingoverridesubmitsamplesconsentdisableblockatfirstseenheartbeatdelayindaysheartbeatsamplingratessloptionsbypassinternetcheckmapslatencyretrytimeoutthreatseveritydefaultactionemptykeyvaluedisableprivacymode%mpconfig_productappdatapath%\telemetryallowuseruiaccessuilockdownnotification_suppresssuppressrebootnotificationsuppresswdonotificationmpconfig_productcodenamempconfig_productpathmpconfig_productappdatapathmpconfig_productuserappdatapathmpconfig_appdataroot12345678-f0f0-4f3f-b1f3-41cd1905616empconfig_reportingguid\msmplics.dllpconfigut-53e7e780-2330-40c6-94c6-be75e946e933software\microsoft\removaltools\mrtguidfalsemp_config_type_szmp_config_type_dwordmp_config_type_multi_szmp_config_type_binarymp_config_type_nonemp_config_origin_nonemp_config_origin_defaultmp_config_origin_preferencesmp_config_origin_mdm_policymp_config_origin_policy*sof**eof*t%uh%um%uspt%uhp%udp%udt%uh2000-01-01t%02u:%02u:%02umpclient_nouseunifiedschedulingenginelocalsystem2100-01-01t00:00:00d:(a;;fa;;;sy)(a;;frfx;;;ls)maintenanceregularmicrosoft\windows\windows" - Source: "00000000-00001464.00000002.193679.6F341000.00000020.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00001464.00000003.200972.02D71000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?secom" - Source: "00000000-00001464.00000003.200972.02E06000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0nf:8" - Source: "00000000-00001464.00000003.200972.02E06000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=285555" - Source: "00000000-00001464.00000003.200972.02E06000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113408_zsystem.string," - Source: "00000000-00001464.00000003.200972.04C02000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113415-positionparametersetnamebypath4positionparametersetnamebyliteralpathpspathpositionparametersetnamebyoutputdirectorynooverwritelsystem.resources.resourcereader," - Source: "00000000-00001464.00000003.200972.04C02000.00000002.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;1>=9iqmgvw,czctkvv%tovq!tcv-tgv)t" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0120531151137z0/^g(o-cejy" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/sfsca-crl.crl0+%http://crl.startcom.org/sfsca-crl.crl0" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf05)http://cert.startcom.org/intermediate.pdf0" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf0)startcom" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00001464.00000003.200972.074B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00001464.00000003.200972.074D2000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt06" - Source: "00000000-00001464.00000003.200972.074D2000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000003.200972.07547000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0(vyvhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0/r$u,ev$f9]mwyprg?j?" - Source: "00000000-00001464.00000003.200972.07596000.00000004.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=215849" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=155569" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=109270" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsofttimestamppca.crl0xl0j0hhttp://www.microsoft.com/pki/certs/miccodsigpca_08-31-2010.crt0(]w%" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0ycvded/_&" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0.tq[m*$" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://www.microsoft.com07w7l" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/miccodsigpca2011_2011-07-08.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/miccodsigpca2011_2011-07-08.crt0)" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt03http://www.microsoft.com/pkiops/docs/primarycps.htm0@e_.,>d=xz" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://www.microsoft.com04," - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt02*ed" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00001464.00000003.200972.075D0000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113305supportsshouldprocesssupportstransactionsdefaultparametersetnamebypaththelpuri.https://go.microsoft.com/fwlink/?linkid=113389certificatezsystem.string," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113311system.management.automation.pscredential," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113315microsoft.powershell.executionpolicy," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113394wconvertfromsecurestringdefaultparametersetnamesecurethelpuri.https://go.microsoft.com/fwlink/?linkid=113287_zsystem.string," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113291nisystem.security.securestring," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113307system.management.automation.signature," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113391filecatalogsupportsshouldprocessdefaultparametersetnamebypaththelpuri.https://go.microsoft.com/fwlink/?linkid=786749d_system.io.fileinfo," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=786750system.management.automation.catalogvalidationstatus," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113323system.security.cryptography.x509certificates.x509certificate2," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=394373tdefaultparametersetname" - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=394370system.security.cryptography.pkcs.envelopedcms," - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=394374tdefaultparametersetnamebywineventepositionvaluefrompipelinevaluefrompipelinebypropertynameparametersetnamebypath2" - Source: "00000000-00001464.00000003.200972.08322000.00000002.mdmp") Found URL "http://http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt08.ek@26vtlp0xr!s4zs9_>y" - Source: "00000000-00001464.00000003.200972.08912000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0," - Source: "00000000-00001464.00000003.200972.08927000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0s/mi26n5n6n5r6n5" - Source: "00000000-00001464.00000003.200972.08927000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0kw" - Source: "00000000-00001464.00000003.200972.08983000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000003.200972.08983000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0=ymxk" - Source: "00000000-00001464.00000003.200972.08983000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0," - Source: "00000000-00001464.00000003.200972.08983000.00000004.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportmdataoft\winfender\ervicewindows" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccodsigpca_08-31-2010.crl0zn0l0j>http://www.microsoft.com/pki/certs/miccodsigpca_08-31-2010.crt0" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0.tq[m*$" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/powershell" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://www.microsoft.com/windows1.3.6.1.4.1.311.3.3.1a+zt20170929123018.134z0washington1redmond1microsoft" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00001464.00000003.200972.09090000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113278clearcontentdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113282clearitempropertydefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113284_joinpathsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113347_zsystem.string," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113289tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113293get" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113308contentdefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113310itempropertydefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113320itempropertyvaluedefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=389281moveitempropertysupportsshouldprocessdefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113351locationdefaultparametersetnamelocationtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113321system.management.automation.pathinfo," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113397system.management.automation.pathinfo," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113370blocationsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113369zpsdrivesupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113357removepsdrivedefaultparametersetnamenametsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113376psdrivedefaultparametersetnamenametsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113327system.management.automation.psdriveinfo," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113319itemdefaultparametersetnamepathsettsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113353itemsupportsshouldprocessdefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113395removeitemsupportsshouldprocessdefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113373moveitemdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113350renameitemsupportsshouldprocesssupportstransactionsdefaultparametersetnamebypaththelpuri.https://go.microsoft.com/fwlink/?linkid=113382copyitemdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113292clearitemdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113283invokeitemdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113345lpsproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=113329system.management.automation.providerinfo," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113354splitpathdefaultparametersetname" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113404zsystem.string," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113418" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113374renameitempropertydefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113383resolvepathdefaultparametersetnamepathtsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113384contentdefaultparametersetnamepathtsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113392itempropertydefaultparametersetnamepropertyvaluepathsettsupportsshouldprocesssupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=113396processdefaultparametersetnamenamethelpuri.https://go.microsoft.com/fwlink/?linkid=113324tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135277stopprocessdefaultparametersetnamesupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=113412jesystem.diagnostics.process," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135206mstartprocessdefaultparametersetnamedefaultthelpuri.https://go.microsoft.com/fwlink/?linkid=135261servicedefaultparametersetnamedefaultthelpuri.https://go.microsoft.com/fwlink/?linkid=113332tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113414startservicedefaultparametersetnameinputobjecttsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=113406suspendservicedefaultparametersetnameinputobjecttsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=113416resumeservicedefaultparametersetnameinputobjecttsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=113386restartservicedefaultparametersetnameinputobjecttsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=113385servicesupportsshouldprocessdefaultparametersetnamenamethelpuri.https://go.microsoft.com/fwlink/?linkid=113399tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113359testconnectiondefaultparametersetnamedefaultthelpuri.https://go.microsoft.com/fwlink/?linkid=135266tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135209ndisablecomputerrestoresupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=135207qcheckpointcomputerhelpuri.https://go.microsoft.com/fwlink/?linkid=135197scomputerrestorepointdefaultparametersetnamehelpuri.https://go.microsoft.com/fwlink/?linkid=135215b=system.management.managementobject" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135253tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135263tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135254computersupportsshouldprocessdefaultparametersetnamedomainthelpuri.https://go.microsoft.com/fwlink/?linkid=135194tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135246tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=219990tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=137749tresetcomputermachinepasswordsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=135252ncomputerinfohelpuri.https://go.microsoft.com/fwlink/?linkid=799466timezonedefaultparametersetnamenamethelpuri.https://go.microsoft.com/fwlink/?linkid=799468timezonesupportsshouldprocessdefaultparametersetnamenamethelpuri.https://go.microsoft.com/fwlink/?linkid=799469clearrecyclebinsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=524082tusystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=526220get" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=526219zsystem.string," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=2199823.microsoft.powershell.commands.controlpanelitemshowcontrolpanelitemdefaultparametersetnameregularnamethelpuri.https://go.microsoft.com/fwlink/?linkid=219983eventlogdefaultparametersetnamelognamethelpuri.https://go.microsoft.com/fwlink/?linkid=113314tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135198tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135281tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135227tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135257tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135235tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135248tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113337tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113346tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113381tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135245tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=113402tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135220system.management.automation.pstransaction," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=135262kcompletetransactionsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=135200gundotransactionsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=135268etransactionsupportstransactionshelpuri.https://go.microsoft.com/fwlink/?linkid=135271ywebserviceproxydefaultparametersetnamenocredentialsthelpuri.https://go.microsoft.com/fwlink/?linkid=135238hotfixdefaultparametersetnamedefaultthelpuri.https://go.microsoft.com/fwlink/?linkid=135217tusystem.management.automation.remotingcapability," - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "http://msdn.microsoft.com/en-us/library/yfsftwz6.aspx" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "http://www.w3.org/2001/xmlschema" - Source: "00000000-00001464.00000003.200972.09D12000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227961microsoft.management.infrastructure.ciminstance," - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227966microsoft.management.infrastructure.cimsession," - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227967" - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227969microsoft.management.infrastructure.options.cimsessionoptions," - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227968@3system.resources.tools.stronglytypedresourcebuilder4.0.0.0cimassociatedinstancedefaultparametersetnamecomputersetthelpuri.https://go.microsoft.com/fwlink/?linkid=227958pcimclassdefaultparametersetnamecomputersetthelpuri.https://go.microsoft.com/fwlink/?linkid=227959microsoft.management.infrastructure.cimclass," - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=227965ciminstancedefaultparametersetnameclassnamecomputersettsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=227963removeciminstancesupportsshouldprocessdefaultparametersetnameciminstancecomputersetthelpuri.https://go.microsoft.com/fwlink/?linkid=227964ciminstancesupportsshouldprocessdefaultparametersetnameciminstancecomputersetthelpuri.https://go.microsoft.com/fwlink/?linkid=227962pexportbinarymiloghelpuri.https://go.microsoft.com/fwlink/?linkid=301310pimportbinarymiloghelpuri.https://go.microsoft.com/fwlink/?linkid=301309registercimindicationeventdefaultparametersetnameclassnamecomputersetthelpuri.https://go.microsoft.com/fwlink/?linkid=227960o" - Source: "00000000-00001464.00000003.200972.0A272000.00000002.mdmp") Found URL "http://www.w3.org/xml/1998/namespacexmlnshttp://www.w3.org/2000/xmlns/[cdata[doctypeline" - Source: "00000000-00001464.00000003.200972.6EA01000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268816qstopwebcommitdelayhelpuri.https://go.microsoft.com/fwlink/?linkid=268824vwebconfigurationlockhelpuri.https://go.microsoft.com/fwlink/?linkid=268833removewebconfigurationlockhelpuri.https://go.microsoft.com/fwlink/?linkid=268859tusystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268770tusystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268832removewebconfigurationlocationsystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268858tsupportsshouldprocessrenamewebconfigurationlocationsystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268866tsupportsshouldprocesswebconfigurationhelpuri.https://go.microsoft.com/fwlink/?linkid=268830uselectwebconfigurationhelpuri.https://go.microsoft.com/fwlink/?linkid=268870webconfigurationdefaultparametersetnameinputpsobjecttsupportsshouldprocesshelpuri.https://go.microsoft.com/fwlink/?linkid=268872tusystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268817zwebconfigurationpropertyhelpuri.https://go.microsoft.com/fwlink/?linkid=268834webconfigurationsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268763webconfigurationpropertysupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268814webconfigurationpropertydefaultparametersetnameinputpsobjecttsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268873removewebconfigurationpropertysupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268860owebconfigfilehelpuri.https://go.microsoft.com/fwlink/?linkid=268829mwebfilepathhelpuri.https://go.microsoft.com/fwlink/?linkid=268835iwebsitehelpuri.https://go.microsoft.com/fwlink/?linkid=268852pwebapplicationhelpuri.https://go.microsoft.com/fwlink/?linkid=268845uwebvirtualdirectoryhelpuri.https://go.microsoft.com/fwlink/?linkid=268853lwebapppoolhelpuri.https://go.microsoft.com/fwlink/?linkid=268846removewebapppoolsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268855lwebftpsitehelpuri.https://go.microsoft.com/fwlink/?linkid=268848lwebbindinghelpuri.https://go.microsoft.com/fwlink/?linkid=268847webbindingdefaultparametersetnameinputbindingpropertiestsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268871removewebbindingdefaultparametersetnameinputbindingpropertiestsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268856iwebsitehelpuri.https://go.microsoft.com/fwlink/?linkid=268841removewebsitesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268864removewebapplicationsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268854pwebapplicationhelpuri.https://go.microsoft.com/fwlink/?linkid=268826uwebvirtualdirectoryhelpuri.https://go.microsoft.com/fwlink/?linkid=268844removewebvirtualdirectorysupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268865lwebrequesthelpuri.https://go.microsoft.com/fwlink/?linkid=268840nwebappdomainhelpuri.https://go.microsoft.com/fwlink/?linkid=268825nwebsitestatehelpuri.https://go.microsoft.com/fwlink/?linkid=268842qwebapppoolstatehelpuri.https://go.microsoft.com/fwlink/?linkid=268827kstartwebsitehelpuri.https://go.microsoft.com/fwlink/?linkid=268879nstartwebapppoolhelpuri.https://go.microsoft.com/fwlink/?linkid=268877prestartwebapppoolhelpuri.https://go.microsoft.com/fwlink/?linkid=268867jstopwebsitehelpuri.https://go.microsoft.com/fwlink/?linkid=268882mstopwebapppoolhelpuri.https://go.microsoft.com/fwlink/?linkid=268880qwebglobalmodulehelpuri.https://go.microsoft.com/fwlink/?linkid=268849rwebmanagedmodulehelpuri.https://go.microsoft.com/fwlink/?linkid=268851" - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268822lwebhandlerhelpuri.https://go.microsoft.com/fwlink/?linkid=268850webglobalmodulesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268874webmanagedmodulesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268876webhandlersupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268875disablewebglobalmodulesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268820removewebglobalmodulesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268861removewebmanagedmodulesupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268863removewebhandlersupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268862qwebglobalmodulehelpuri.https://go.microsoft.com/fwlink/?linkid=268836rwebmanagedmodulehelpuri.https://go.microsoft.com/fwlink/?linkid=268839lwebhandlerhelpuri.https://go.microsoft.com/fwlink/?linkid=268837lwebbindinghelpuri.https://go.microsoft.com/fwlink/?linkid=268828xwebconfigurationbackuphelpuri.https://go.microsoft.com/fwlink/?linkid=268831removewebconfigurationbackupsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268857ubackupwebconfigurationhelpuri.https://go.microsoft.com/fwlink/?linkid=268815restorewebconfigurationsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268869" - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268819venablewebrequesttracinghelpuri.https://go.microsoft.com/fwlink/?linkid=268823disablewebrequesttracingsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268821clearwebrequesttracingsettingssupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268818clearwebrequesttracingsettingsupportsshouldprocesssystem.management.automation.confirmimpact," - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=268818nweburldefaultparametersetnameinputpspaththelpuri.https://go.microsoft.com/fwlink/?linkid=268843webadministration3system.resources.tools.stronglytypedresourcebuilder2.0.0.0startwebitemhelpuri.https://go.microsoft.com/fwlink/?linkid=268878jstopwebitemhelpuri.https://go.microsoft.com/fwlink/?linkid=268881mrestartwebitemhelpuri.https://go.microsoft.com/fwlink/?linkid=268868nwebitemstatehelpuri.https://go.microsoft.com/fwlink/?linkid=268838xwebcentralcertproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=269640xwebcentralcertproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=269641bset" - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=269645zclearwebcentralcertproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=269642\disablewebcentralcertproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=269643[enablewebcentralcertproviderhelpuri.https://go.microsoft.com/fwlink/?linkid=2696446positionvaluefrompipelinebypropertynamevaluefrompipelinebypropertynamepositionpositionvaluefrompipelinebypropertyname" - Source: "00000000-00001464.00000003.200972.6EBAE000.00000020.mdmp") Found URL "http://https://file://software\microsoft\appv\clientinstallpathforceremovenoremovedeleteclientmicrosoft\appv\publishingd:(a;;fa;;;ba)(a;;fa;;;sy)