Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000064.00000000.171517.2AF20000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000404.00000000.174288.F52A0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000404.00000001.176210.F52A0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000516.00000000.173146.F8A70000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00000888.00000000.172109.034D0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001040.00000000.171360.02ED0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00001200.00000000.171859.032A0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00002220.00000000.169076.03140000.00000004.mdmp") Found URL "https://------content-type:" - Source: "00000000-00003300.00000000.173517.40000000.00000040.mdmp") Found URL "https://t.me/ty5e4qreeqcmozilla/5.0" - Source: "00000000-00003300.00000000.173517.40000000.00000040.mdmp") Found URL "https://steamcommunity.com/profiles/76561199884432485reeqcmozilla/5.0" - Source: "00000000-00003300.00000000.173517.40000000.00000040.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003392.00000000.173466.A6250000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003532.00000000.173696.00BC0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003532.00000001.175615.00BC0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00003532.00000002.177536.00BC0000.00000004.mdmp") Found URL "http://invalid" - Source: "00000000-00004564.00000000.172580.009DD000.00000002.mdmp") Found URL "https://drive.usercontent.google.com/download?id=1ybvidkzgygnfuu2rbjxxcydrzay5rmdy&export=download&authuser=0&confirm=t779674e6655553272624a5858435964727a617935724d6459266578706f727431.2.840.10045.3.1.1ecdp1.2.840.10045.3.1.7ecdp1.2.840.10045.3.1.1@eckp1.2.840.10045.3.1.7ecdp1.2.840.10045.3.1.7@eckp1.2.840.10045.3.1.1ecdp1.2.156.11235.1.1.2.1@eckp1.2.840.10045.3.1.1ecdp1.2.840.10045.3.1.1@eckpq,trq" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://g1.symcb.com/crls/gtglobal.crl0/" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-53902ol!o!yj>9iqmgvw,czcglobalsign" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?ee:j9_($nnew" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.securetrust.com/stca.crl0x:rr[" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://www.certplus.com/crl/class2.crl06p" - Source: "00000000-00004564.00000000.172580.00FE0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004564.00000000.172580.05900000.00000004.mdmp") Found URL "http://www.microsoft.com0rcv" - Source: "00000000-00004564.00000000.172580.05900000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca-:1-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0=3" - Source: "00000000-00004564.00000000.172580.05900000.00000004.mdmp") Found URL "http://cr1.3.36.3.3.2.8.1.1.12@eckp1.3.36.3.3.2.8.1.1.11@eckp1.3.36.3.3.2.8.1.1.11ecdp1.3.36.3.3.2.8.1.1.10ecdp@1.3.36.3.3.2.8.1.1.12ecdp1.3.36.3.3.2.8.1.1.13ecdp;:tp<:t1.3.36.3.3.2.8.1.1.13@eckp1.3.36.3.3.2.8.1.1.14ecdp1.3.36.3.3.2.8.1.1.10@eckp@1.3.36.3.3.2.8.1.1.14@eckpeuhfeu0heuhneu0meu8ceuhleupn$" - Source: "00000000-00004564.00000000.172580.05900000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00004724.00000000.171124.03360000.00000004.mdmp") Found URL "https://drive.usercontent.google.com/download?id=1ybvidkzgygnfuu2rbjxxcydrzay5rmdy&export=download&authuser=0&confirm=thttps://drive.usercontent.google.com/download?id=1ybvidkzgygnfuu2rbjxxcydrzay5rmdy&export=download&authuser=0&confirm=tq=0.1779674e6655553272624a5858435964727a617935724d6459266578706f72743,dt" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://g1.symcb.com/crls/gtglobal.crl0/" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-53902ol!o!yj>9iqmgvw,czc8;sz1.2.840.10045.3.1.1@eckp1.3.132.0.33ecdp1.3.132.0.35ecdp" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?emgvw,czce:j9_($nnew" - Source: "00000000-00004964.00000000.172078.008B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0." - Source: "00000000-00004964.00000000.172078.012E0000.00000002.mdmp") Found URL "https://www.realvnc.com.

klicken" - Source: "00000000-00004964.00000000.172078.012E0000.00000002.mdmp") Found URL "https://www.realvnc.com.copyright" - Source: "00000000-00004964.00000000.172078.012E0000.00000002.mdmp") Found URL "https://hb-a.services.vnc.com:443/bootstrap/1.2/configuration=https://hb-b.services.vnc.com:443/bootstrap/1.2/configuration=https://hb-c.services.vnc.com:443/bootstrap/1.2/configurationbtp/config-countbtp/initial-discovery-uribtp/max-age-secsabtp/max-backoff-secs!any/signed-data-signaturevendorcfg.certificatescertificatesvnc/pem-certificate-----begin" - Source: "00000000-00004964.00000000.172078.01359000.00000002.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?sha^\:3[" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/aaacertificateservices.crl060http://crl.comodo.net/aaacertificateservices.crl0l7u" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com0rcv" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/certs/miccertrulispca_2009-04-+" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/prorts/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-ya'4ahsm4]" - Source: "00000000-00004964.00000000.172078.056B0000.00000004.mdmp") Found URL "http://176.46.158.23/yclhttp://176.46.158.23/yclc:\users\hapubws\appdata\local\microsoft\windows\inetcache\ie\t1mm1x3a\soft[1]@shell3dll,-218appdatalocaljv8dz34crfw7ueycl.exusersell32.dl-21813appdahapubwsusershapubwsusershapubwsusershapubwsusershapubwsusershapubwsusershapubwsl,-21813hapudjv8dz34cugrfw7ueusers@shell32.dll,-2ppdatausershapubwss\appdata\local[.shellclassinfolocalizedresourcename@%systemroot%\system32\shell32.dll,-21770iconresource%systemroot%\system32\imageres.dll,-112iconfile%systemroot%\system32\shell32.dlliconindex-235windorariesusershapubwsappdataroamingmicrosoftwindowslibraries[.shellclassinfolocalizedresourcename@%systemroot%\system32\shell32.dll,-21798iconresource%systemroot%\system32\imageres.dll,-184usershapubwspictures;oici;fa;;;sy)(a;oici;fa;;;ba)(a;oici;gxgr;;;bu)(a;oici;gxgr;;;wd)c:\windows\temp\asllog_aepic_svchost015.exe_4964.txtusers@shell32.dll,-21813hapubwsappdatalocaltempdjv8dz34cugrfw7ueycl.exeusershapubwsdocuments\?\storage" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://176.46.158.23/success?substr=mixsix&s=three&sub=none2or" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://176.46.158.23/success?substr=mixsix&s=three&sub=none%seekwevydrive.usercontent.google.comuserdomain=desktop-fvvf82auserdnsdomain=desktop-fvvf82auserprofile=c:\users\hapubwsprocessor_architew6432=amd64programw6432=c:\program" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0n+vok4" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/comodorsacertificationauthority.crl0qe0c0;/http://crt.comodoca.com/comodorsaaddtrustca.crt0$http://ocsp.comodoca.com0z" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0e:5%6$" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://g1.symcb.com/crls/gtglobal.crl0/" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-53902ol!o!yj>9iqmgvw,czc8;sz1.2.840.10045.3.1.1@eckp1.3.132.0.33ecdp1.3.132.0.35ecdp" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "https://www.alphassl.com/repository/03,0*0(" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10%cx.g/8" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?emgvw,czce:j9_($nnew" - Source: "00000000-00004964.00000001.174001.008B0000.00000004.mdmp") Found URL "http://crl.usertrust.com/usertrustrsacertificationauthority.crl0vj0h0?3http://crt.usertrust.com/usertrustrsaaddtrustca.crt0%http://ocsp.usertrust.com0.mnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://crl.comodoca.com/aaacertificateservices.crl060http://crl.comodo.net/aaacertificateservices.crl0l7u" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com0rcv" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0+" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://microsoft.com0k" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0t<" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00004964.00000001.174001.056B0000.00000004.mdmp") Found URL "http://invalid" - Source: "00000000-00004964.00000001.174001.059E4000.00000004.mdmp") Found URL "http://invalid" - Source: "00000000-00004964.00000001.174001.10011000.00000002.mdmp") Found URL "http://certs.godaddy.com/repository/1301*go" - Source: "00000000-00005020.00000000.169548.00A30000.00000004.mdmp") Found URL "http://ocsp.godaddy.com/05.0,0*$http://crl.godaddy.com/gdroot-g2.crl0f?0=0;0301%https://certs.godaddy.com/repository/0jcs1" - Source: "00000000-00005020.00000000.169548.00A30000.00000004.mdmp") Found URL "http://www.microsoft.com0rcv" - Source: "00000000-00005020.00000000.169548.00B0D000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0\:oj?rszysgeotrust" - Source: "00000000-00005020.00000000.169548.00B0D000.00000004.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mn9iqmgvw,czcsystem.configurationnnameatiopm/ion1thor]8pn/system.namerz0\thawte," - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?eglobalsign" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;se]l+>%ydigicert" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut2011_2011_03_22.crl0^r0p0nbhttp://www.microsoft.com/pki/certs/microoceraut2011_2011_03_22.crt0vs" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0l*prrosopkkppkkpkkplistlistlistlistnamel*prlistlistpkkppkkpkkplistsystem.directoryservices" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/docs/repository.htmid]2u'b=" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://cert.startcom.org/sfsca-crl.crl0+%http://crl.startcom.org/sfsca-crl.crl0" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf05)http://cert.startcom.org/intermediate.pdf0" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://cert.startcom.org/policy.pdf0)startcom" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://www.microsoft.com0rcv" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00005020.00000000.169548.072F0000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00005640.00000000.172532.2D920000.00000004.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportpolicanageroftware\policies\microsoft\windows" - Source: "00000000-00006188.00000000.170205.02E90000.00000004.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=74409&enterprise=%ls%dhttps://go.microsoft.com/fwlink/?linkid=74408&enterprise=https://go.microsoft.com/fwlink/?linkid=37020&name=%s&threatid=%u&enterprise=%dpynetsubmitsamplesconsentspynetreportingpclient_public_commodempclient_allowadminelevationacquirepclient_noforcedreboot\?\volume" - Source: "00000000-00006188.00000000.170205.72411000.00000020.mdmp") Found URL "https://go.microsoft.com/fwlink/?linkid=851034&clcid=0x409&httpsigupdate_baseurlforceupdatefrommusignaturedisablenotificationcloudbasedbehaviorblockingsignaturecategoryiddisablescheduledsignatureupdateonbatterysignatureupdatecatchupintervalsignatureslastcheckednissignatureslastupdateddeltaupdatefailurenissignatureversionnissignaturelocation%mpconfig_productappdatapath%\definition" - Source: "00000000-00006188.00000000.170205.72411000.00000020.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportspynetreportinglocationlocalsettingoverridesubmitsamplesconsentdisableblockatfirstseenheartbeatdelayindaysheartbeatsamplingratessloptionsbypassinternetcheckmapslatencyretrytimeoutthreatseveritydefaultactionemptykeyvaluedisableprivacymode%mpconfig_productappdatapath%\telemetryallowuseruiaccessuilockdownnotification_suppresssuppressrebootnotificationsuppresswdonotificationmpconfig_productcodenamempconfig_productpathmpconfig_productappdatapathmpconfig_productuserappdatapathmpconfig_appdataroot12345678-f0f0-4f3f-b1f3-41cd1905616empconfig_reportingguid\msmplics.dllpconfigut-53e7e780-2330-40c6-94c6-be75e946e933software\microsoft\removaltools\mrtguidfalsemp_config_type_szmp_config_type_dwordmp_config_type_multi_szmp_config_type_binarymp_config_type_nonemp_config_origin_nonemp_config_origin_defaultmp_config_origin_preferencesmp_config_origin_mdm_policymp_config_origin_policy*sof**eof*t%uh%um%uspt%uhp%udp%udt%uh2000-01-01t%02u:%02u:%02umpclient_nouseunifiedschedulingenginelocalsystem2100-01-01t00:00:00d:(a;;fa;;;sy)(a;;frfx;;;ls)maintenanceregularmicrosoft\windows\windows" - Source: "00000000-00006188.00000000.170205.72411000.00000020.mdmp") Found URL "http://www.validationtest.contoso.com/test%d.htmlmpoav_forcedeepscan" - Source: "00000000-00006188.00000001.172125.724F1000.00000020.mdmp") Found URL "https://wdcp.microsoft.com/wdcp.svc/submitreportpolicanageroftware\policies\microsoft\windows" - Source: "00000000-00006188.00000002.174044.02E90000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00006344.00000000.170608.02F50000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00006380.00000000.173940.D36C0000.00000004.mdmp") Found URL "http://94.154.35.25/di9ku38f/index.php94.154.35.25/di9ku38f/index.php:\vxstream78.16.55.189device\mup\78.16.55.18978.16.55.18978.16.55.18978.16.55.18978.16.55.18978.16.55.189:\share178.16.55.18978.16.55.18978.16.55.18978.16.55.189:\analysis78.16.55.18978.16.55.18978.16.55.18978.16.55.1894.154.35.254.154.35.25ummy://url/4.154.35.2594.154.35.25http://94.154.35.25/di9ku38f/index.phpu38f/index.phpoftware\microsoft\windows\currentversion\internet" - Source: "00000000-00007976.00000000.170621.03420000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007976.00000000.170621.03420000.00000004.mdmp") Found URL "http://178.16.55.189/files/740061926/blgj4g0.exehttp://178.16.55.189/files/740061926/blgj4g0.exec:\users\hapubws\appdata\local\microsoft\windows\inetcache\ie\t1mm1x3a\blgj4g0[1].exeb+ncalrpc:[olec2e8c55b3e67b9b411e76d98dd32]t" - Source: "00000000-00007976.00000001.172540.03420000.00000004.mdmp") Found URL "http://94.154.35.25/di9ku38f/index.phpal\microsoft\windows\inetcache\ie\9sspaw46\v9d9d[1].exeevice\mu\vxstreataterepository\share\share78.16.55.189178.16.55.1898.16.55.78.16.55.18978.16.55.1894.154.35.254.154.35.25ummy://url/4.154.35.2594.154.35.25http://94.154.35.25/di9ku38f/index.phpu38f/index.phpoftware\microsoft\windows\currentversion\internet" - Source: "00000000-00007976.00000001.172540.03420000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007976.00000001.172540.03420000.00000004.mdmp") Found URL "http://178.16.55.189/files/5638395652/yhxbbcu.exehttp://178.16.55.189/files/5638395652/yhxbbcu.exec:\users\hapubws\appdata\local\microsoft\windows\inetcache\ie\lscby323\yhxbbcu[1].exe:\programdata\oracle\java\javapath;c:\windows\system32;c:\windows;c:\windows\system32\wbem;c:\windows\system32\windowspowershell\v1.0\;%nvm_home%;%nvm_symlink%;c:\users\hapubws\appdata\local\programs\python\pytevice\mu\vxstrea78.16.55.189\share\share78.16.55.18978.16.55.18978.16.55.1898.16.55.rpc" - Source: "00000000-00007976.00000002.174462.03420000.00000004.mdmp") Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00007976.00000002.174462.03420000.00000004.mdmp") Found URL "http://www.entrust.net/rpa03'0%0" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://ocsp.entrust.net02+0)0'!http://crl.entrust.net/2048ca.crl0gfv" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://ocsp.entrust.net03'http://aia.entrust.net/ts1-chain256.cer01*0(0&" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://crl.entrust.net/ts1ca.crl0;09070)0'https://www.entrust.net/rpa0$0>oan?7entrust," - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://ocsp.digicert.com0a5http://cacerts.digicert.com/digicerttrustedrootg4.crt0c<0:082http://crl3.digicert.com/digicerttrustedrootg4.crl0:" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://crl3.digicert.com/digicerttrustedg4codesigningrsa4096sha3842021ca1.crl0smhttp://crl4.digicert.com/digicerttrustedg4codesigningrsa4096sha3842021ca1.crl0>705030)0'http://www.digicert.com/cps0http://ocsp.digicert.com0\phttp://cacerts.digicert.com/digicerttrustedg4codesigningrsa4096sha3842021ca1.crt0mkq'0a&" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp") Found URL "http://178.16.55.189/files/5638395652/yhxbbcu.exec:\users\hapubws\appdata\local\temp\10483040101\yhxbbcu.exec:\users\hapubws\appdata\local\temp\10483040101\yhxbbcu.exec:\users\hapubws\appdata\local\temp\10483040101\yhxbbcu.exec:\users\hapubws\appdata\local\temp\10483040101\yhxbbcu.exec:\users\hapubws\appdata\local\temp\10483030101\nw1jmqq.exec:\users\hapubws\appdata\local\temp\10483040101\yhxbbcu.exehttp://178.16.55.189/files/5638395652/yhxbbcu.exeu.exe" - Source: "00000000-00007976.00000002.174462.034FB000.00000004.mdmp")