Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);" - Source: "00000000-00004036.00000000.155324.49CC0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);\useu\frahapuowspile:///c:/windows/microsoft.net/framework64/v4.0.30319/l64=ogramw%:\windows\microsoft.net\framework64\v4.0.30319\clr.dll,msil:\windows\system32\windowspowershell\v1.0\powershell.exews\microsoft.netclr.dllhttps://hot13oct.blogspot.com/dudu.docx.pdf);8b8d-2:\windows\system32\ucrtbase_clr0400.dll:\windows\microsoft.net\assembly\gac_msilicrosoft.aspnet.membership.openauth522649:\windows\system32\kernel.appcore.dllams\p:\windows\microsoft.net\assembly\gac_64icrosoft.aspnet.web.optimization.webforms[net.securityprotocoltype]::tls12;2649visionnramewodir=4nlyuselatestclrscanbufferor_clr_writer\msiscanbufferefaultversionc:\windows\microsoft.net\framework64\v4.0.30319040904b0companynamemicrosoft" - Source: "00000000-00004036.00000000.155324.49CC0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0f" - Source: "00000000-00004036.00000000.155324.5EC02000.00000002.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,9iqmgvw,czco!yj" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?e+$=dglobalsign" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;+$=daddtrust" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0lv>d" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);start-sleep-secondszmnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt08.ek@26vtlp0xr!s4zs9_>+$=dho>;crosn1.0,-" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt08.ek@26vtlp0xr!s4s9_>0106" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00004036.00000000.155324.643C0000.00000004.mdmp") Found URL "http://www.microsoft.com/windows1.3.6.1.4.1.311.3.3.1a+zt20170929123018.134z0washington1redmond1microsoft" - Source: "00000000-00004036.00000000.155324.648A0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00004036.00000000.155324.648A0000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00004036.00000000.155324.648A0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);start-sleep-secondsystem.configuration,4.0.0.0,,b03f5f7f11d50a3a:\windows\assembly\nativeimages_v4.0.30319_64indowsphell/v1.0/:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_msil\system.configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.configuration.dll??\c:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll:\windows\microsoft.net\assembly\gac_64\system.transactions\v4.0_4.0.0.0__b77a5c561934e089\system.transactions.dll.configscorlib" - Source: "00000000-00004036.00000000.155324.649A0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);" - Source: "00000000-00004036.00000001.157101.49CC0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);\useu\frahapuowspile:///c:/windows/microsoft.net/framework64/v4.0.30319/l64=ogramw%:\windows\microsoft.net\framework64\v4.0.30319\clr.dll,msil:\windows\system32\windowspowershell\v1.0\powershell.exews\microsoft.netclr.dllhttps://hot13oct.blogspot.com/dudu.docx.pdf);8b8d-2:\windows\system32\ucrtbase_clr0400.dll:\windows\microsoft.net\assembly\gac_msilicrosoft.aspnet.membership.openauth522649:\windows\system32\kernel.appcore.dllams\p:\windows\microsoft.net\assembly\gac_64icrosoft.aspnet.web.optimization.webforms[net.securityprotocoltype]::tls12;2649visionnramewodir=4nlyuselatestclrscanbufferor_clr_writer\efaultversionc:\windows\microsoft.net\framework64\v4.0.30319040904b0companynamemicrosoft" - Source: "00000000-00004036.00000001.157101.49CC0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0f9iqmgvw,czco!yjcallsite.targetlambda_methodlambda_methodlambda_methodlambda_methodlambda_methodlambda_methodlambda_methodlambda_methodcallsite.targetcallsite.targetlambda_methodcallsite.targetcallsite.targett.automationcallsite.targetcallsite.targetlambda_methodcallsite.targetcallsite.targetcallsite.targetcallsite.target" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://ocsp.thawte.com0:080660(0&https://www.thawte.com/cps0700.0,&http://crl.thawte.com/thawtepca-g3.crl0verisignmpki-2-4150w!$?e+$=dglobalsign" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "https://www.globalsign.com/repository/03,0*0(" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://crl.globalsign.net/root.crl0=10/0-!http://ocsp.globalsign.com/rootr10b@dd*v" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl4.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0yr;0" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://ocsp.digicert.com0kd0b0@:http://crl3.digicert.com/digicerthighassuranceevrootca.crl0=604020*0(https://www.digicert.com/cps0bt" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://g2.symcb.com0le0c0a60301%http://www.geotrust.com/resources/cps0)symantecpki-1-5690xv" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://s2.symcb.com0^0\0z0r0&http://www.symauth.com/cps0(http://www.symauth.com/rpa00)0'0%http://s1.symcb.com/pca3-g5.crl0symantecpki-1-53303130f$eogtt3;+$=daddtrust" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://crl.usertrust.com/addtrustexternalcaroot.crl05)0'0%http://ocsp.usertrust.com0ql" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://s1.symcb.com/pca3-g5.crl0" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://s2.symcb.com0kd0b0" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://www.symauth.com/cps0(http://www.symauth.com/rpa0)symantecpki-1-53403130x" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "https://www.verisign.com/cps04*0(0&" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "http://crl.verisign.com/pca3.crl0lv>d" - Source: "00000000-00004036.00000001.157101.643C0000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);start-sleep-secondszmnhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004036.00000001.157101.64437000.00000004.mdmp") Found URL "http://www.microsoft.com0'6*l1.3.6.1.4.1.311.10.1250905032048z0/^g(o-cejy" - Source: "00000000-00004036.00000001.157101.64437000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt08.ek@26vtlp0xr!s4zs9_>+$=dho>;crosn1.0,-" - Source: "00000000-00004036.00000001.157101.64437000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt08.ek@26vtlp0xr!s4s9_>0106" - Source: "00000000-00004036.00000001.157101.64437000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0/r$u,ev$f9]mwyprg?j?" - Source: "00000000-00004036.00000001.157101.64485000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0elq6wo/>" - Source: "00000000-00004036.00000001.157101.64485000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mi>ut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00004036.00000001.157101.648CE000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);" - Source: "00000000-00004036.00000001.157101.649A0000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00004036.00000001.157101.64A40000.00000004.mdmp") Found URL "http://microsoft.com0" - Source: "00000000-00004036.00000001.157101.64A40000.00000004.mdmp") Found URL "http://www.microsoft.com/windows0qst*&pj>e" - Source: "00000000-00004036.00000001.157101.64A6A000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt01http://www.microsoft.com/pki/docs/cps/default.htm0@$vkt7" - Source: "00000000-00004036.00000001.157101.64A6A000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/mictimstapca_2010-07-01.crl0zn0l0j>http://www.microsoft.com/pki/certs/mictimstapca_2010-07-01.crt0/r$u,ev$f9]mwyprg?j?" - Source: "00000000-00004036.00000001.157101.64A6A000.00000004.mdmp") Found URL "https://hot13oct.blogspot.com/dudu.docx.pdf);start-sleep-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_tasktimetriggerrepetitionembeddedinstancemsft_taskrepetitionpatternsft_taskrepetitionpatternmsft_tasktriggersft_tasktriggerrandomdelaymsft_tasktimetriggermsft_tasktimetriggerdesktop-fvvf82aconhost.exedraki623root/microsoft/windows/taskschedulerbldrr1-40500_parameterscmdletoutputreturnvalueroot/microsoft/windows/taskschedulerdesktop-fvvf82aroot/microsoft/windows/taskschedulerdesktop-fvvf82ap3650dpt1h14m2026-04-30t07:00:00zpt30mtriggersmsft_scheduledtasksft_scheduledtaskembeddedinstancemsft_tasktriggermsft_tasktriggerembeddedinstancemsft_tasktriggermsft_scheduledtaskmsft_scheduledtaskreadversionmsft_scheduledtasksft_scheduledtaskdynamicproviderscheduledtaskprovmsft_taskprincipalfroot/microsoft/windows/taskschedulerdesktop-fvvf82adisplaynamemsft_taskprincipalsft_taskprincipalgroupidmsft_taskprincipalsft_taskprincipalsft_taskprincipalmsft_taskprincipalroot\microsoft\windows\taskscheduler__parameterslogontypemsft_taskprincipalmsft_taskprincipalreadvaluemapvaluesrunlevelsft_taskprincipalmsft_taskprincipaluseridsft_taskprincipalmsft_taskprincipalmsft_taskprincipal2logontypereadvaluemapvaluesmsft_taskprincipalsft_taskprincipaltasknamesksdraki623p3650dpt1h14mroot/microsoft/windows/taskschedulerdesktop-fvvf82aprocesstokensidtypemsft_taskprincipal2msft_taskprincipal2readvaluemapvaluesrequiredprivilegemsft_taskprincipal2msft_taskprincipal2msft_tasksettingsroot/microsoft/windows/taskschedulerdesktop-fvvf82aallowdemandstartmsft_tasksettingsmsft_tasksettingsallowhardterminatemsft_tasksettingsmsft_tasksettingscompatibilitymsft_tasksettingsmsft_tasksettingsreadvaluemapvaluesdeleteexpiredtaskaftermsft_tasksettingsmsft_tasksettingsdisallowstartifonbatteriesmsft_tasksettingsmsft_tasksettingsenabledmsft_tasksettingsmsft_tasksettingsexecutiontimelimitmsft_tasksettingssft_tasksettingshiddenmsft_tasksettingsmsft_tasksettingsidlesettingsmsft_tasksettingsmsft_tasksettingsembeddedinstancemsft_taskidlesettingssft_taskidlesettingsembeddedinstancemsft_taskidlesettingsmultipleinstancesmsft_tasksettingssft_tasksettingsroot/microsoft/windows/taskschedulermsft_tasksettingsrestartcountmsft_tasksettingsmsft_tasksettingsrestartintervalmsft_tasksettingsmsft_tasksettingsrunonlyifidlemsft_tasksettingsmsft_tasksettingsrunonlyifnetworkavailablesft_tasksettingsmsft_tasksettingsstartwhenavailablemsft_tasksettingsmsft_tasksettings2compatibilityreadvaluemapvaluessft_tasksettingsmsft_tasksettingsidlesettingsembeddedinstancemsft_taskidlesettingssft_taskidlesettingsmsft_tasksettingsmsft_tasksettingsmultipleinstancesreadvaluemapvaluesmsft_tasksettingsmsft_tasksettingsnetworksettingsembeddedinstancemsft_tasknetworksettingsmsft_tasknetworksettingsmsft_tasksettingsstopifgoingonbatteriesdmsft_tasksettingsmsft_tasksettingswaketorunsft_tasksettingsmsft_tasksettingsmsft_scheduledtaskmsft_scheduledtaskreadvaluemapvaluestasknamemsft_scheduledtaskmsft_scheduledtaskreadtaskpathmsft_scheduledtaskmsft_scheduledtaskreadmsft_taskactionroot/microsoft/windows/taskscheduleresktop-fvvf82amsft_taskactionmsft_taskactionreadvaluemapvaluesnetworksettingsmsft_tasksettingsmsft_tasksettingsembeddedinstancemsft_tasknetworksettingssft_tasknetworksettingsembeddedinstancemsft_tasknetworksettingsprioritymsft_tasksettingsimmethodparameterscollectionforcetriggerroot/microsoft/windows/taskschedulerdesktop-fvvf82aroot/microsoft/windows/taskschedulerdesktop-fvvf82ap3650dpt1h14m2026-04-30t07:00:00zpt30mactionroot/microsoft/windows/taskschedulerdesktop-fvvf82aconhost.exe_parametersroot\microsoft\windows\taskschedulercmdletoutputroot/microsoft/windows/taskschedulerdesktop-fvvf82aroot/microsoft/windows/taskscheduleresktop-fvvf82aconhost.exeroot/microsoft/windows/taskschedulerdesktop-fvvf82aauthorhapubwsroot/microsoft/windows/taskscheduleresktop-fvvf82apt72hmsft_taskrepetitionpatternroot/microsoft/windows/taskschedulerdesktop-fvvf82adurationmsft_taskrepetitionpatternmsft_taskrepetitionpatternintervalisamsft_taskrepetitionpatternsft_taskrepetitionpatternstopatdurationendmsft_taskrepetitionpatternmsft_taskrepetitionpatternmsft_scheduledtaskroot/microsoft/windows/taskschedulerdesktop-fvvf82aactionsmsft_scheduledtaskmsft_scheduledtaskembeddedinstancemsft_taskactionmsft_taskactionembeddedinstancemsft_taskactionauthorimmethodparameterscollectionforcetriggeractiontasknameroot/microsoft/windows/taskscheduleresktop-fvvf82aroot/microsoft/windows/taskschedulerdesktop-fvvf82ap3650dt1h14m2026-04-30t07:00:00zt30mroot/microsoft/windows/taskschedulerembeddedinstancemsft_taskprincipalsecuritydescriptor-msft_scheduledtaskmsft_scheduledtasksettingssft_scheduledtaskmsft_scheduledtaskembeddedinstancemsft_tasksettingsmsft_tasksettingsembeddedinstancemsft_tasksettingssourcemsft_scheduledtaskmsft_scheduledtaskstatemsft_taskexecactionargumentsmsft_taskexecactionmsft_taskexecactionexecutemsft_taskexecactionmsft_taskexecactionworkingdirectorymsft_taskexecactionmsft_taskexecactionmsft_scheduledtaskmsft_scheduledtaskdatemsft_scheduledtaskmsft_scheduledtaskdescriptionmsft_scheduledtaskmsft_scheduledtaskdocumentationmsft_scheduledtaskmsft_scheduledtaskprincipalmsft_scheduledtaskmsft_scheduledtaskembeddedinstancedev(msft_taskprincipal2msft_taskprincipals" - Source: "00000000-00004036.00000001.157101.64B1A000.00000004.mdmp") Found URL "http://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/microoceraut_2010-jyqf;?0xdb7j[agysf0d1aoc1402+229879+719555cb-6de2-446c-acba-d90894acd8720m0k0ichttp://www.microsoft.com/pkiops/crl/micwinpropca2011_2011-10-19.crl0au0s0qehttp://www.microsoft.com/pkiops/certs/micwinpropca2011_2011-10-19.crt0fhttp://www.microsoft.com/pki/certs/microoceraut_2010-washington1redmond1microsoft" - Source: "00000000-00004036.00000001.157101.64B1A000.00000004.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-" - Source: "00000000-00004036.00000001.157101.64B1A000.00000004.mdmp")