

Heuristic match: "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: s2."

Heuristic match: "GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?c10d2bae1ece6a86 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: " Heuristic match: "GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?147b573eff44e44a HTTP/1.1Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 16:02:20 GMTIf-None-Match: 04e707defb9d21:0User-Agent: Microsoft-CryptoAPI/6.1Hos" "" touched file "C:\Windows\Fonts\tahoma.ttf" "" touched file "C:\Windows\Microsoft.NET\Framework64\v9\p" "" touched file "C:\Windows\assembly\NativeImages_v9_64\System.Core\f5db2f7c181e6f1344c9bc8dbcffce3b\.dll.aux" "" touched file "C:\Windows\assembly\NativeImages_v9_64\System.Drawing\617299d2bd5dcfe094cedface0c39d1c\.dll.aux" "" touched file "C:\Windows\Globalization\Sorting\s" "" touched file "C:\Windows\Microsoft.NET\Framework64\v9\Config\nfig" "" touched file "C:\Windows\Microsoft.NET\Framework64\v9\clr.dll" "" touched file "C:\Windows\Microsoft.NET\Framework64\v7\mscorwks.dll" "" touched file "%WINDIR%\Microsoft.NET\Framework64\v7\clr.dll"
