Working Log File

"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"10:45:00.9989552 a.m.","synpwrap.exe","1976","Process Start","","SUCCESS","Parent PID: 872"
"10:45:00.9989597 a.m.","synpwrap.exe","1976","Thread Create","","SUCCESS","Thread ID: 2264"
"10:45:01.0314130 a.m.","synpwrap.exe","1976","QueryNameInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Name: \Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe"
"10:45:01.0334354 a.m.","synpwrap.exe","1976","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Image Base: 0x400000, Image Size: 0x26000"
"10:45:01.0353026 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Image Base: 0x7c900000, Image Size: 0xb2000"
"10:45:01.0353492 a.m.","synpwrap.exe","1976","QueryNameInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Name: \Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe"
"10:45:01.0358001 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0423509 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","AllocationSize: 24,576, EndOfFile: 23,912, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.0428366 a.m.","synpwrap.exe","1976","ReadFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","Offset: 0, Length: 23,912"
"10:45:01.0432740 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS",""
"10:45:01.0433654 a.m.","synpwrap.exe","1976","CreateFile","C:","SUCCESS","Desired Access: Read Attributes, Write Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0458297 a.m.","synpwrap.exe","1976","QueryInformationVolume","C:","SUCCESS","VolumeCreationTime: 7/15/2010 3:12:35 a.m., VolumeSerialNumber: 609C-3580, SupportsObjects: True, VolumeLabel: "
"10:45:01.0458919 a.m.","synpwrap.exe","1976","FileSystemControl","C:","SUCCESS","Control: FSCTL_FILE_PREFETCH"
"10:45:01.0459955 a.m.","synpwrap.exe","1976","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0460874 a.m.","synpwrap.exe","1976","QueryDirectory","C:\","SUCCESS","0: .bash_history, 1: 575507a76c6f9ccd70b4255dbd6fe2bd, 2: 7a5432f21b3cefee384e71, 3: AUTOEXEC.BAT, 4: boot.ini, 5: CONFIG.SYS, 6: cygwin, 7: DocReg, 8: Documents and Settings, 9: eula.1028.txt, 10: eula.1031.txt, 11: eula.1033.txt, 12: eula.1036.txt, 13: eula.1040.txt, 14: eula.1041.txt, 15: eula.1042.txt, 16: eula.2052.txt, 17: eula.3082.txt, 18: globdata.ini, 19: install.exe, 20: install.ini, 21: install.res.1028.dll, 22: install.res.1031.dll, 23: install.res.1033.dll, 24: install.res.1036.dll, 25: install.res.1040.dll, 26: install.res.1041.dll, 27: install.res.1042.dll, 28: install.res.2052.dll, 29: install.res.3082.dll, 30: Intel, 31: IO.SYS, 32: lsc_env, 33: lsc_installation_history.txt, 34: MATLAB, 35: MentorGraphics, 36: MSDOS.SYS, 37: MSOCache, 38: NTDETECT.COM, 39: ntldr, 40: pagefile.sys, 41: ProcessMonitor, 42: Program Files, 43: RECYCLER, 44: swsetup, 45: System Volume Information, 46: Tools, 47: vcredist.bmp, 48: VC_RED.cab, 49: VC_RED.MSI, 50: WINDOWS, 51: work"
"10:45:01.0478468 a.m.","synpwrap.exe","1976","QueryDirectory","C:\","NO MORE FILES",""
"10:45:01.0479362 a.m.","synpwrap.exe","1976","CloseFile","C:\","SUCCESS",""
"10:45:01.0482324 a.m.","synpwrap.exe","1976","CreateFile","C:\lsc_env","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0526299 a.m.","synpwrap.exe","1976","QueryDirectory","C:\lsc_env","SUCCESS","0: ., 1: .., 2: activesupport.ini, 3: asd_filelist.txt, 4: lsc_8_0.ini, 5: lsc_8_1.ini"
"10:45:01.0528515 a.m.","synpwrap.exe","1976","QueryDirectory","C:\lsc_env","NO MORE FILES",""
"10:45:01.0530252 a.m.","synpwrap.exe","1976","CloseFile","C:\lsc_env","SUCCESS",""
"10:45:01.0568332 a.m.","synpwrap.exe","1976","CreateFile","C:\MATLAB","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0570181 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB","SUCCESS","0: ., 1: .., 2: lic_standalone.dat, 3: R2010a"
"10:45:01.0586812 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB","NO MORE FILES",""
"10:45:01.0589898 a.m.","synpwrap.exe","1976","CloseFile","C:\MATLAB","SUCCESS",""
"10:45:01.0617073 a.m.","synpwrap.exe","1976","CreateFile","C:\MATLAB\R2010a","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0620217 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB\R2010a","SUCCESS","0: ., 1: .., 2: bin, 3: extern, 4: help, 5: ja, 6: java, 7: lib, 8: license.txt, 9: licenses, 10: MATLAB R2010a.lnk, 11: notebook, 12: patents.txt, 13: rtw, 14: runtime, 15: simulink, 16: stateflow, 17: sys, 18: toolbox, 19: trademarks.txt, 20: uninstall"
"10:45:01.0623410 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB\R2010a","NO MORE FILES",""
"10:45:01.0653015 a.m.","synpwrap.exe","1976","CloseFile","C:\MATLAB\R2010a","SUCCESS",""
"10:45:01.0659203 a.m.","synpwrap.exe","1976","CreateFile","C:\MATLAB\R2010a\runtime","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0688441 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB\R2010a\runtime","SUCCESS","0: ., 1: .., 2: win32"
"10:45:01.0692831 a.m.","synpwrap.exe","1976","QueryDirectory","C:\MATLAB\R2010a\runtime","NO MORE FILES",""
"10:45:01.0696185 a.m.","synpwrap.exe","1976","CloseFile","C:\MATLAB\R2010a\runtime","SUCCESS",""
"10:45:01.0718445 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0720348 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools","SUCCESS","0: ., 1: .., 2: ispTOOLS8_0, 3: ispTOOLS8_1, 4: Java, 5: questasim_6.6b, 6: Xilinx"
"10:45:01.0725399 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools","NO MORE FILES",""
"10:45:01.0744642 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools","SUCCESS",""
"10:45:01.0885185 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ISPTOOLS8_0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0962211 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0","SUCCESS","0: ., 1: .., 2: active-hdl, 3: cae_library, 4: examples, 5: hdle, 6: ispcomp, 7: ispcpld, 8: ispFPGA, 9: ispjtools, 10: ispLeverDSP, 11: ispTracy, 12: license, 13: modelsim, 14: module, 15: orcastra, 16: prod_reg, 17: remotecl.exe, 18: synpbase, 19: wdig"
"10:45:01.0964908 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0","NO MORE FILES",""
"10:45:01.0966963 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_0","SUCCESS",""
"10:45:01.0987432 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_0\ACTIVE-HDL","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.0989664 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\active-hdl","SUCCESS","0: ., 1: .., 2: bin, 3: BOOKS, 4: Dat, 5: Dokument.rtf, 6: Drivers, 7: etc, 8: Evita, 9: Flows, 10: Interfaces, 11: IP CORE, 12: MINGW, 13: NetSetup, 14: PERL, 15: PLI, 16: Samples_82, 17: Script, 18: Simulink, 19: SystemC, 20: Tcl, 21: Template, 22: tools, 23: Uninst.isu, 24: Vlib"
"10:45:01.0996131 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\active-hdl","NO MORE FILES",""
"10:45:01.1006640 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_0\active-hdl","SUCCESS",""
"10:45:01.1011403 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_0\ispcpld","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1033423 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispcpld","SUCCESS","0: ., 1: .., 2: BIN, 3: config, 4: data, 5: generic, 6: macros, 7: manuals, 8: sym_libs, 9: system, 10: tcltk, 11: Tutorial, 12: webhelp"
"10:45:01.1037050 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispcpld","NO MORE FILES",""
"10:45:01.1081858 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_0\ispcpld","SUCCESS",""
"10:45:01.1085688 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_0\ispFPGA","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1088813 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispFPGA","SUCCESS","0: ., 1: .., 2: active-hdl, 3: bin, 4: bom, 5: data, 6: ep5a00, 7: ep5a00s, 8: ep5c00, 9: ep5c00a, 10: ep5g00, 11: ep5g00p, 12: ep5m00, 13: ep5m00s, 14: ispLeverDSP, 15: maco, 16: mg5a00, 17: mg5g00, 18: mj5g00, 19: mj5g00e, 20: or5g00, 21: or5s00, 22: slayer, 23: userware, 24: verilog, 25: vhdl, 26: vhdl_packages"
"10:45:01.1126115 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispFPGA","NO MORE FILES",""
"10:45:01.1128952 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_0\ispFPGA","SUCCESS",""
"10:45:01.1173950 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_0\ispFPGA\bin","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1180260 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispFPGA\bin","SUCCESS","0: ., 1: .., 2: nt"
"10:45:01.1187696 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_0\ispFPGA\bin","NO MORE FILES",""
"10:45:01.1226619 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_0\ispFPGA\bin","SUCCESS",""
"10:45:01.1230095 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ISPTOOLS8_1","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1232262 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1","SUCCESS","0: ., 1: .., 2: active-hdl, 3: cae_library, 4: examples, 5: hdle, 6: ispcomp, 7: ispcpld, 8: ispFPGA, 9: ispjtools, 10: ispLeverDSP, 11: ispTracy, 12: license, 13: modelsim, 14: module, 15: orcastra, 16: prod_reg, 17: remotecl.exe, 18: synpbase, 19: wdig"
"10:45:01.1248789 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1","NO MORE FILES",""
"10:45:01.1250828 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1","SUCCESS",""
"10:45:01.1284730 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ACTIVE-HDL","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1286669 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\active-hdl","SUCCESS","0: ., 1: .., 2: bin, 3: BOOKS, 4: Dat, 5: Drivers, 6: etc, 7: Evita, 8: Flows, 9: Interfaces, 10: IP CORE, 11: MINGW, 12: NetSetup, 13: PERL, 14: PLI, 15: Samples_82, 16: Script, 17: Simulink, 18: SystemC, 19: Tcl, 20: Template, 21: tools, 22: Uninst.isu, 23: Vlib"
"10:45:01.1288895 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\active-hdl","NO MORE FILES",""
"10:45:01.1312452 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\active-hdl","SUCCESS",""
"10:45:01.1318775 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1321539 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld","SUCCESS","0: ., 1: .., 2: BIN, 3: config, 4: data, 5: generic, 6: macros, 7: manuals, 8: sym_libs, 9: tcltk, 10: Tutorial, 11: webhelp"
"10:45:01.1347500 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld","NO MORE FILES",""
"10:45:01.1350092 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld","SUCCESS",""
"10:45:01.1384083 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1387736 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\BIN","SUCCESS","0: ., 1: .., 2: abl2vlg.tcl, 3: about32.dll, 4: ActiveSupport.exe, 5: activesupport.png, 6: ActiveSupport_License.txt, 7: analysislib.dll, 8: archive.exe, 9: Ascin.exe, 10: Ascout.exe, 11: Asyin.exe, 12: Asyout.exe, 13: atl80.dll, 14: auto2html.dll, 15: backannexe.exe, 16: backannotate.dll, 17: blkmod.dll, 18: bttncr32.dll, 19: CheckIni.exe, 20: checkpoint.exe, 21: checktracefile.dll, 22: chipsim.exe, 23: chipsim_cmd.tcl, 24: cleanup.exe, 25: coretop.dll, 26: covcidll.dll, 27: createasdxml.exe, 28: csvfmt.dll, 29: devlist.exe, 30: dpdbrowser.dll, 31: dpdcommon.dll, 32: dpdmain.dll, 33: dpdpkg.dll, 34: dpdpost.dll, 35: dpdpre.dll, 36: dpdutil.dll, 37: dpflprfdrc.dll, 38: dpflutil.dll, 39: dpjblockpath.dll, 40: dpjbrowser.dll, 41: dpjdev.dll, 42: dpjmain.dll, 43: dpjnative.dll, 44: dpjpathtracer.dll, 45: dpjpkg.dll, 46: dpjpost.dll, 47: dpjpre.dll, 48: dpjview.dll, 49: edfin.exe, 50: edifnets.exe, 51: Encryption.dll, 52: Exp.exe, 53: flmainapp.exe, 54: flmainappw.exe, 55: getVendorDll.dll, 56: hdl2jhd.exe, 57: hierbro.exe, 58: HierNav.exe, 59: ichecker.exe, 60: IniEdit.exe, 61: ipexpress.exe, 62: ispautohtml.exe, 63: ispblmod.exe, 64: ispChkPtOptn.exe, 65: ispcopy.bat, 66: ispdfw.exe, 67: ispdsdmn.exe, 68: isptcg.exe, 69: ispTclConsole.exe, 70: ispTclEditor.exe, 71: ispTclRecorder.exe, 72: isptla.exe, 73: ispTrceOptn.exe, 74: istverilog.dll, 75: istvhdl.dll, 76: iUpdate.exe, 77: jcolorlegend.dll, 78: jenvkeeper.dll, 79: jlogicviewjni.dll, 80: jniist.dll, 81: jniPEDialog.dll, 82: jnipemain.dll, 83: jniSheetView.dll, 84: JTAGLServer.exe, 85: latlic.dll, 86: latlink.dll, 87: launchupload.exe, 88: lctprp.dll, 89: lflxutil.dll, 90: libcabinterface.dll, 91: libftcjtag.dll, 92: libisptracydriver.dll, 93: libjtagdriver.dll, 94: libjtaginterface.dll, 95: libjtagserver_client.dll, 96: liblm32driver.dll, 97: liblm32jtagdriver.dll, 98: liblu0300j.dll, 99: libmgr.exe, 100: libntparallelportdriver.dll, 101: librevealdriver.dll, 102: librstat.dll, 103: libusbdriver.dll, 104: lmgrd.exe, 105: lmtools.exe, 106: lmutil.exe, 107: lpc2jhd.exe, 108: lpcgen.tcl, 109: lscispvmusbfx2.hex, 110: lscispvmusbisp.hex, 111: lsdb.dll, 112: lsdbcp.exe, 113: LSHKitLib.dll, 114: lyrmgr.dll, 115: Makesym.exe, 116: mapwrap.exe, 117: memgen.exe, 118: mfc40.dll, 119: mfc42.dll, 120: mfc80.dll, 121: mfc80u.dll, 122: mfcie.exe, 123: mfcm80.dll, 124: mfcm80u.dll, 125: mod_lamc_dyn.dll, 126: mod_mc_dyn.dll, 127: mpartrce.exe, 128: MSGCMPL.EXE, 129: msgr.exe, 130: MsgSys.dll, 131: msvcirt.dll, 132: msvcm80.dll, 133: MSVCP60.DLL, 134: msvcp80.dll, 135: msvcr80.dll, 136: msvcrt.dll, 137: mtigui.exe, 138: multipar.exe, 139: naf2sym.exe, 140: navlink.dll, 141: ncd2eqn.exe, 142: nledfin.dll, 143: NTDIOED.dll, 144: NTEdit.dll, 145: nttapkp.dll, 146: ntwaveh.dll, 147: opwebhlp.exe, 148: ORCAstra_ispVM_IF.dll, 149: ORCAstra_ispVM_IF2.dll, 150: orca_timing.exe, 151: pjreload.exe, 152: pkgIndex.tcl, 153: powerc.exe, 154: powercalc.exe, 155: prfedit.dll, 156: prfwpload.exe, 157: projnav.exe, 158: proj_mgmt.map, 159: PVLOGLIB.dll, 160: QtCore4.dll, 161: QtCored4.dll, 162: QtGui4.dll, 163: QtNetwork4.dll, 164: QtNetworkd4.dll, 165: QtXml4.dll, 166: QtXmld4.dll, 167: revealflow.exe, 168: revealla.exe, 169: revealwrap.exe, 170: router.dll, 171: sch2blf.exe, 172: sch2jhd.exe, 173: sch2tf.exe, 174: Schem.exe, 175: secuload.exe, 176: sxml.dll, 177: Sym.exe, 178: sym2hdl.exe, 179: syndos.exe, 180: synedit.exe, 181: synpgui.exe, 182: synplify.ico, 183: synpwrap.exe, 184: synsvf.exe, 185: synthesis_cmd.tcl, 186: synview.exe, 187: tcldump.dll, 188: TCP2JTAGVC2.exe, 189: tghfile.exe, 190: tkdata.dll, 191: tkmesg.dll, 192: tkwdog110.exe, 193: trcewrap.exe, 194: tstamper.exe, 195: Updatesc.exe, 196: vcredist_x86.exe, 197: vericode.exe, 198: veriwrap.dll, 199: vhd2jhd.exe, 200: vhd2naf.exe, 201: vhddll.dll, 202: vhdl.exe, 203: vlog2jhd.exe, 204: vlogdll.dll, 205: Waves.exe, 206: Wet.exe, 207: winusb.dll, 208: zip.dll"
"10:45:01.1397704 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\BIN","NO MORE FILES",""
"10:45:01.1419303 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN","SUCCESS",""
"10:45:01.1425033 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1428716 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS","0: ., 1: .., 2: ahdl2tif.ini, 3: asicrule.txt, 4: baseline.ini, 5: blank.lci, 6: blkmod.cfg, 7: checksum, 8: checksumsvf, 9: cleanup.txt, 10: designplanner.cfg, 11: devalias.map, 12: dummy-file.c, 13: ep5a00.lci, 14: ep5a00s.lci, 15: ep5c00.lci, 16: ep5c00.sds, 17: ep5g00.ini, 18: ep5g00.lci, 19: ep5g00.sds, 20: ep5g00p.lci, 21: ep5g00p.sds, 22: ep5m00.lci, 23: ep5m00.sds, 24: ep5m00s.lci, 25: ep5m00s.sds, 26: fit_rpt.key, 27: hlp_html_index.ini, 28: ispexp.cfg, 29: ispmg.cfg, 30: ispsys.cfg, 31: ispsys.cfg.gdx, 32: ispsys.ini, 33: ispsysu.cfg, 34: ispsys_reveal.ini, 35: lattice-ecp2.fdk, 36: lattice-ecp2.sds, 37: lattice-ecp2m.fdk, 38: lattice-ecp2ms_es_edf.fdk, 39: lattice-ecp2ms_es_vlg.fdk, 40: lattice-ecp2ms_io_edf.fdk, 41: lattice-ecp2ms_io_vhd.fdk, 42: lattice-ecp2ms_io_vlg.fdk, 43: lattice-ecp2ms_jed_t_edf.fdk, 44: lattice-ecp2ms_jed_t_sv.fdk, 45: lattice-ecp2ms_jed_t_vhd.fdk, 46: lattice-ecp2ms_jed_t_vlg.fdk, 47: lattice-ecp2ms_mix.fdk, 48: lattice-ecp2ms_mix_io.fdk, 49: lattice-ecp2ms_mix_reg.fdk, 50: lattice-ecp2ms_reg_edf.fdk, 51: lattice-ecp2ms_reg_sv.fdk, 52: lattice-ecp2ms_reg_vhd.fdk, 53: lattice-ecp2ms_reg_vlg.fdk, 54: lattice-ecp2mu.fdk, 55: lattice-ecp2mu_es.fdk, 56: lattice-ecp2m_edf.fdk, 57: lattice-ecp2m_es.fdk, 58: lattice-ecp2m_es_edf.fdk, 59: lattice-ecp2m_es_io_edf.fdk, 60: lattice-ecp2m_es_io_vhd.fdk, 61: lattice-ecp2m_es_io_vlg.fdk, 62: lattice-ecp2m_es_mix.fdk, 63: lattice-ecp2m_es_mix_io.fdk, 64: lattice-ecp2m_es_mix_reg.fdk, 65: lattice-ecp2m_es_reg_edf.fdk, 66: lattice-ecp2m_es_reg_vhd.fdk, 67: lattice-ecp2m_es_reg_vlg.fdk, 68: lattice-ecp2m_es_vhd.fdk, 69: lattice-ecp2m_es_vlg.fdk, 70: lattice-ecp2m_io_jed_edf.fdk, 71: lattice-ecp2m_io_jed_vhd.fdk, 72: lattice-ecp2m_io_jed_vlg.fdk, 73: lattice-ecp2m_jed_edf.fdk, 74: lattice-ecp2m_jed_sv.fdk, 75: lattice-ecp2m_jed_t_edf.fdk, 76: lattice-ecp2m_jed_t_sv.fdk, 77: lattice-ecp2m_jed_t_vhd.fdk, 78: lattice-ecp2m_jed_t_vlg.fdk, 79: lattice-ecp2m_jed_vhd.fdk, 80: lattice-ecp2m_jed_vlg.fdk, 81: lattice-ecp2m_mix.fdk, 82: lattice-ecp2m_mix_io.fdk, 83: lattice-ecp2m_mix_reg.fdk, 84: lattice-ecp2m_sv.fdk, 85: lattice-ecp2m_vhd.fdk, 86: lattice-ecp2m_vlg.fdk, 87: lattice-ecp2s.sds, 88: lattice-ecp2s_io_edf.fdk, 89: lattice-ecp2s_io_vhd.fdk, 90: lattice-ecp2s_io_vlg.fdk, 91: lattice-ecp2s_jed_t_edf.fdk, 92: lattice-ecp2s_jed_t_sv.fdk, 93: lattice-ecp2s_jed_t_vhd.fdk, 94: lattice-ecp2s_jed_t_vlg.fdk, 95: lattice-ecp2s_mix.fdk, 96: lattice-ecp2s_mix_io.fdk, 97: lattice-ecp2s_mix_reg.fdk, 98: lattice-ecp2s_reg_edf.fdk, 99: lattice-ecp2s_reg_sv.fdk, 100: lattice-ecp2s_reg_vhd.fdk, 101: lattice-ecp2s_reg_vlg.fdk, 102: lattice-ecp2u.fdk, 103: lattice-ecp2_edf.fdk, 104: lattice-ecp2_io_edf.fdk, 105: lattice-ecp2_io_vhd.fdk, 106: lattice-ecp2_io_vlg.fdk, 107: lattice-ecp2_jed_edf.fdk, 108: lattice-ecp2_jed_sv.fdk, 109: lattice-ecp2_jed_t_edf.fdk, 110: lattice-ecp2_jed_t_sv.fdk, 111: lattice-ecp2_jed_t_vhd.fdk, 112: lattice-ecp2_jed_t_vlg.fdk, 113: lattice-ecp2_jed_vhd.fdk, 114: lattice-ecp2_jed_vlg.fdk, 115: lattice-ecp2_mix.fdk, 116: lattice-ecp2_mix_io.fdk, 117: lattice-ecp2_mix_reg.fdk, 118: lattice-ecp2_sv.fdk, 119: lattice-ecp2_vhd.fdk, 120: lattice-ecp2_vlg.fdk, 121: lattice-ecp3.fdk, 122: lattice-ecp3u.fdk, 123: lattice-ecp3_edf.fdk, 124: lattice-ecp3_io_edf.fdk, 125: lattice-ecp3_io_vhd.fdk, 126: lattice-ecp3_io_vlg.fdk, 127: lattice-ecp3_jed_edf.fdk, 128: lattice-ecp3_jed_sv.fdk, 129: lattice-ecp3_jed_t_edf.fdk, 130: lattice-ecp3_jed_t_sv.fdk, 131: lattice-ecp3_jed_t_vhd.fdk, 132: lattice-ecp3_jed_t_vlg.fdk, 133: lattice-ecp3_jed_vhd.fdk, 134: lattice-ecp3_jed_vlg.fdk, 135: lattice-ecp3_mix.fdk, 136: lattice-ecp3_mix_io.fdk, 137: lattice-ecp3_mix_reg.fdk, 138: lattice-ecp3_nj_edf.fdk, 139: lattice-ecp3_nj_mix.fdk, 140: lattice-ecp3_nj_vhd.fdk, 141: lattice-ecp3_nj_vlg.fdk, 142: lattice-ecp3_sv.fdk, 143: lattice-ecp3_vhd.fdk, 144: lattice-ecp3_vlg.fdk, 145: lattice.bmf, 146: lattice.lci, 147: lmap.dat, 148: lpmconf.ini, 149: lscpart.tdb, 150: lsc_8_1.ini, 151: lsc_copyright.txt, 152: lsc_installation_history.txt, 153: machisc.fdk, 154: mg5a00.lci, 155: "
"10:45:01.1441296 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS","0: orca5s_jed_t_sv.fdk, 1: orca5s_jed_t_vhd.fdk, 2: orca5s_jed_t_vlg.fdk, 3: orca5s_jed_vhd.fdk, 4: orca5s_jed_vlg.fdk, 5: orca5s_mix.fdk, 6: orca5s_nor_io_edf.fdk, 7: orca5s_nor_io_vhd.fdk, 8: orca5s_nor_io_vlg.fdk, 9: orca5s_nor_jed_t_edf.fdk, 10: orca5s_nor_jed_t_sv.fdk, 11: orca5s_nor_jed_t_vhd.fdk, 12: orca5s_nor_jed_t_vlg.fdk, 13: orca5s_nor_mix_io.fdk, 14: orca5s_nor_mix_reg.fdk, 15: orca5s_nor_reg_edf.fdk, 16: orca5s_nor_reg_sv.fdk, 17: orca5s_nor_reg_vhd.fdk, 18: orca5s_nor_reg_vlg.fdk, 19: orca5s_nor_t_mix.fdk, 20: orca5s_sv.fdk, 21: orca5s_t_mix.fdk, 22: orca5s_vhd.fdk, 23: orca5s_vlg.fdk, 24: orcagen.fdk, 25: orcaldb.fdk, 26: orcaldb5.fdk, 27: orcaldb5a.fdk, 28: orcaldb5au.fdk, 29: orcaldb5a_edf.fdk, 30: orcaldb5a_io_edf.fdk, 31: orcaldb5a_io_vhd.fdk, 32: orcaldb5a_io_vlg.fdk, 33: orcaldb5a_jed_edf.fdk, 34: orcaldb5a_jed_sv.fdk, 35: orcaldb5a_jed_t_edf.fdk, 36: orcaldb5a_jed_t_sv.fdk, 37: orcaldb5a_jed_t_vhd.fdk, 38: orcaldb5a_jed_t_vlg.fdk, 39: orcaldb5a_jed_vhd.fdk, 40: orcaldb5a_jed_vlg.fdk, 41: orcaldb5a_mix.fdk, 42: orcaldb5a_mix_io.fdk, 43: orcaldb5a_mix_reg.fdk, 44: orcaldb5a_sv.fdk, 45: orcaldb5a_vhd.fdk, 46: orcaldb5a_vlg.fdk, 47: orcaldb5u.fdk, 48: orcaldb5_edf.fdk, 49: orcaldb5_io_edf.fdk, 50: orcaldb5_io_vhd.fdk, 51: orcaldb5_io_vlg.fdk, 52: orcaldb5_jed_edf.fdk, 53: orcaldb5_jed_sv.fdk, 54: orcaldb5_jed_t_edf.fdk, 55: orcaldb5_jed_t_sv.fdk, 56: orcaldb5_jed_t_vhd.fdk, 57: orcaldb5_jed_t_vlg.fdk, 58: orcaldb5_jed_vhd.fdk, 59: orcaldb5_jed_vlg.fdk, 60: orcaldb5_mix.fdk, 61: orcaldb5_mix_io.fdk, 62: orcaldb5_mix_reg.fdk, 63: orcaldb5_sv.fdk, 64: orcaldb5_vhd.fdk, 65: orcaldb5_vlg.fdk, 66: orcau.fdk, 67: orca_edf.fdk, 68: orca_io.fdk, 69: orca_ioe.fdk, 70: orca_iom.fdk, 71: orca_iop.fdk, 72: orca_ios.fdk, 73: orca_vhd.fdk, 74: orca_vlg.fdk, 75: pecehelp.map, 76: planfite.fdk, 77: planoftg.fdk, 78: planoftx.fdk, 79: plan_edf.fdk, 80: plan_pv.fdk, 81: plan_pvhd.fdk, 82: plan_v.fdk, 83: plan_vhd.fdk, 84: plax_edf.fdk, 85: plax_pv.fdk, 86: plax_pvhd.fdk, 87: plax_v.fdk, 88: plax_vhd.fdk, 89: pll.ini, 90: pll45kvg.ini, 91: plsidev.lst, 92: plsi_unix.fdk, 93: pojo.fdk, 94: pojou.fdk, 95: pojo_edf.fdk, 96: pojo_jed_edf.fdk, 97: pojo_jed_mix.fdk, 98: pojo_jed_sv.fdk, 99: pojo_jed_vhd.fdk, 100: pojo_jed_vlg.fdk, 101: pojo_mix.fdk, 102: pojo_sv.fdk, 103: pojo_vhd.fdk, 104: pojo_vlg.fdk, 105: precision, 106: pre_orcaldb.fdk, 107: products.cfg, 108: projnav.ini, 109: reveal_8_1.ini, 110: rtl_synthesis.cfg, 111: rtl_synthesisu.cfg, 112: schmattr.map, 113: scs.ini, 114: setting.cfg, 115: simcp.ini, 116: simcpls.ini, 117: simcpsim.ini, 118: svf, 119: synapps.map, 120: synmenu.cfg, 121: synplify, 122: syntax.lci, 123: synver.ver, 124: tapkeep_visible.reg, 125: tmprim.tdb, 126: toolhelp.map, 127: trcewgt.ini, 128: verilog.ini, 129: verilog.tpl, 130: verilog_pmi.tpl, 131: vhdl.ini, 132: vhdl.tpl, 133: vhdl_pmi.tpl, 134: virtual.fdk, 135: virtual.sds, 136: waves.ini"
"10:45:01.1446220 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\config","NO MORE FILES",""
"10:45:01.1450104 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS",""
"10:45:01.1475913 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispFPGA","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1479420 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispFPGA","SUCCESS","0: ., 1: .., 2: active-hdl, 3: bin, 4: data, 5: ep5a00, 6: ep5a00s, 7: ep5c00, 8: ep5c00a, 9: ep5g00, 10: ep5g00p, 11: ep5m00, 12: ep5m00s, 13: ispLeverDSP, 14: maco, 15: mg5a00, 16: mg5g00, 17: mj5g00, 18: mj5g00e, 19: mj5g00p, 20: or5g00, 21: or5s00, 22: slayer, 23: userware, 24: verilog, 25: vhdl, 26: vhdl_packages, 27: webhelp"
"10:45:01.1497453 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispFPGA","NO MORE FILES",""
"10:45:01.1500447 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispFPGA","SUCCESS",""
"10:45:01.1505404 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispFPGA\bin","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1519765 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispFPGA\bin","SUCCESS","0: ., 1: .., 2: nt"
"10:45:01.1524325 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispFPGA\bin","NO MORE FILES",""
"10:45:01.1528657 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispFPGA\bin","SUCCESS",""
"10:45:01.1545720 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\QUESTASIM_6.6B","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1550549 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\questasim_6.6b","SUCCESS","0: ., 1: .., 2: .default_vopt_flow_on, 3: avm, 4: docs, 5: drivers, 6: examples, 7: floatfixlib, 8: ieee, 9: ieeepure, 10: include, 11: LICENSE, 12: mc2_lib, 13: modelsim.ini, 14: modelsim_lib, 15: ovm-2.0.3, 16: ovm-2.1, 17: ovm-2.1.1, 18: pa_lib, 19: perl_src, 20: qvl_src, 21: rbldlibs.do, 22: rebuild_libs.csh, 23: rebuild_libs.sh, 24: RELEASE_NOTES, 25: RELEASE_NOTES.html, 26: RELEASE_NOTES.txt, 27: std, 28: std_developerskit, 29: sv_std, 30: synopsys, 31: tcl, 32: upf_lib, 33: upf_src, 34: vco, 35: verilog, 36: verilog_src, 37: vhdl_src, 38: vital1995, 39: vital2.2b, 40: vital2000, 41: vm_src, 42: win32, 43: _msidata"
"10:45:01.1560522 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\questasim_6.6b","NO MORE FILES",""
"10:45:01.1562560 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\questasim_6.6b","SUCCESS",""
"10:45:01.1565844 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1591178 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS","SUCCESS","0: ., 1: .., 2: $hf_mig$, 3: $NtServicePackUninstall$, 4: $NtServicePackUninstallIDNMitigationAPIs$, 5: $NtServicePackUninstallNLSDownlevelMapping$, 6: $NtUninstallKB2079403$, 7: $NtUninstallKB2115168$, 8: $NtUninstallKB2121546$, 9: $NtUninstallKB2141007$, 10: $NtUninstallKB2160329$, 11: $NtUninstallKB2229593$, 12: $NtUninstallKB2259922$, 13: $NtUninstallKB2286198$, 14: $NtUninstallKB2347290$, 15: $NtUninstallKB915865$, 16: $NtUninstallKB923561$, 17: $NtUninstallKB946648$, 18: $NtUninstallKB950762$, 19: $NtUninstallKB950974$, 20: $NtUninstallKB951376-v2$, 21: $NtUninstallKB951748$, 22: $NtUninstallKB951978$, 23: $NtUninstallKB952004$, 24: $NtUninstallKB952287$, 25: $NtUninstallKB952954$, 26: $NtUninstallKB954459$, 27: $NtUninstallKB955759$, 28: $NtUninstallKB955839$, 29: $NtUninstallKB956572$, 30: $NtUninstallKB956744$, 31: $NtUninstallKB956802$, 32: $NtUninstallKB956803$, 33: $NtUninstallKB956844$, 34: $NtUninstallKB958644$, 35: $NtUninstallKB958869$, 36: $NtUninstallKB959426$, 37: $NtUninstallKB960803$, 38: $NtUninstallKB960859$, 39: $NtUninstallKB961501$, 40: $NtUninstallKB967715$, 41: $NtUninstallKB968389$, 42: $NtUninstallKB969059$, 43: $NtUninstallKB969947$, 44: $NtUninstallKB970430$, 45: $NtUninstallKB971468$, 46: $NtUninstallKB971557$, 47: $NtUninstallKB971657$, 48: $NtUninstallKB971737$, 49: $NtUninstallKB971961$, 50: $NtUninstallKB972270$, 51: $NtUninstallKB973507$, 52: $NtUninstallKB973815$, 53: $NtUninstallKB973869$, 54: $NtUninstallKB973904$, 55: $NtUninstallKB974112$, 56: $NtUninstallKB974318$, 57: $NtUninstallKB974392$, 58: $NtUninstallKB974571$, 59: $NtUninstallKB975025$, 60: $NtUninstallKB975467$, 61: $NtUninstallKB975558_WM8$, 62: $NtUninstallKB975560$, 63: $NtUninstallKB975561$, 64: $NtUninstallKB975562$, 65: $NtUninstallKB975713$, 66: $NtUninstallKB977165-v2$, 67: $NtUninstallKB977816$, 68: $NtUninstallKB977914$, 69: $NtUninstallKB978037$, 70: $NtUninstallKB978251$, 71: $NtUninstallKB978338$, 72: $NtUninstallKB978542$, 73: $NtUninstallKB978601$, 74: $NtUninstallKB978706$, 75: $NtUninstallKB979309$, 76: $NtUninstallKB979482$, 77: $NtUninstallKB980195$, 78: $NtUninstallKB980218$, 79: $NtUninstallKB980232$, 80: $NtUninstallKB980436$, 81: $NtUninstallKB981322$, 82: $NtUninstallKB981349$, 83: $NtUninstallKB981852$, 84: $NtUninstallKB981997$, 85: $NtUninstallKB982214$, 86: $NtUninstallKB982665$, 87: $NtUninstallKB982802$, 88: $UninstallRDC$, 89: 0.log, 90: 002861_.tmp, 91: 003433_.tmp, 92: 003434_.tmp, 93: addins, 94: AppPatch, 95: assembly, 96: Blue Lace 16.bmp, 97: bootstat.dat, 98: clock.avi, 99: cmsetacl.log, 100: Coffee Bean.bmp, 101: COM+.log, 102: comsetup.log, 103: Config, 104: Connection Wizard, 105: control.ini, 106: CSC, 107: Cursors, 108: Debug, 109: desktop.ini, 110: DEXP5_0.INI, 111: Downloaded Program Files, 112: Driver Cache, 113: DtcInstall.log, 114: DUMP284a.tmp, 115: DUMP293b.tmp, 116: DUMP29b3.tmp, 117: DUMP2a0d.tmp, 118: DUMP2aa3.tmp, 119: DUMP2aa4.tmp, 120: DUMP2be4.tmp, 121: DUMP2bf8.tmp, 122: DUMP2dba.tmp, 123: ehome, 124: explorer.exe, 125: explorer.scf, 126: FaxSetup.log, 127: FeatherTexture.bmp, 128: Fonts, 129: Gone Fishing.bmp, 130: Greenstone.bmp, 131: Help, 132: hh.exe, 133: hpbafd.ini, 134: IDNMitigationAPIs.log, 135: ie7, 136: ie7.log, 137: ie7updates, 138: ie7_main.log, 139: iis6.log, 140: ime, 141: imsins.BAK, 142: imsins.log, 143: inf, 144: Installer, 145: ISMIF32.dll, 146: java, 147: KB2079403.log, 148: KB2115168.log, 149: KB2121546.log, 150: KB2141007.log, 151: KB2160329.log, 152: KB2183461-IE7.log, 153: KB2229593.log, 154: KB2259922.log, 155: KB2286198.log, 156: KB2347290.log, 157: KB892130.log, 158: KB898461.log, 159: KB915865.log, 160: KB923561.log, 161: KB938127-v2-IE7.log, 162: KB946648.log, 163: KB950760.log, 164: KB950762.log, 165: KB950974.log, 166: KB951376-v2.log, 167: KB951748.log, 168: KB951978.log, 169: KB952004.log, 170: KB952069.log, 171: KB952287.log, 172: KB952954.log, 173: KB954155.log, 174: KB954459.log, 175: KB955069.log, 176: KB955759.log, 177: KB955839.log, 178: KB956572.log, 179: KB956744.log, 180: KB956802.log, 181: KB956803.log, 182: KB956844.l"
"10:45:01.1595715 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS","NO MORE FILES",""
"10:45:01.1598002 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS","SUCCESS",""
"10:45:01.1619794 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1622571 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","SUCCESS","0: ., 1: .., 2: $winnt$.inf, 3: 1025, 4: 1028, 5: 1031, 6: 1033, 7: 1037, 8: 1041, 9: 1042, 10: 1054, 11: 12520437.cpx, 12: 12520850.cpx, 13: 2052, 14: 3076, 15: 3com_dmi, 16: 6to4svc.dll, 17: aaaamon.dll, 18: aaclient.dll, 19: access.cpl, 20: acctres.dll, 21: accwiz.exe, 22: acelpdec.ax, 23: acledit.dll, 24: aclui.dll, 25: activeds.dll, 26: activeds.tlb, 27: actmovie.exe, 28: actxprxy.dll, 29: admparse.dll, 30: adptif.dll, 31: adsldp.dll, 32: adsldpc.dll, 33: adsmsext.dll, 34: adsnds.dll, 35: adsnt.dll, 36: adsnw.dll, 37: advapi32.dll, 38: advpack.dll, 39: advpack.dll.mui, 40: ahui.exe, 41: alg.exe, 42: alrsvc.dll, 43: amcompat.tlb, 44: amstream.dll, 45: ansi.sys, 46: apcups.dll, 47: append.exe, 48: apphelp.dll, 49: appmgmts.dll, 50: appmgr.dll, 51: appwiz.cpl, 52: arp.exe, 53: asctrls.ocx, 54: asferror.dll, 55: aspnet_counters.dll, 56: asr_fmt.exe, 57: asr_ldm.exe, 58: asr_pfu.exe, 59: asycfilt.dll, 60: at.exe, 61: ati2cqag.dll, 62: ati2dvaa.dll, 63: ati2dvag.dll, 64: ati3d1ag.dll, 65: ati3duag.dll, 66: ativdaxx.ax, 67: ativmvxx.ax, 68: ativtmxx.dll, 69: ativvaxx.dll, 70: atkctrs.dll, 71: atl.dll, 72: atl71.dll, 73: atmadm.exe, 74: atmfd.dll, 75: atmlib.dll, 76: atmpvcno.dll, 77: atrace.dll, 78: attrib.exe, 79: audiosrv.dll, 80: auditusr.exe, 81: authz.dll, 82: AUTMGR32.EXE, 83: autochk.exe, 84: autoconv.exe, 85: autodisc.dll, 86: AUTOEXEC.NT, 87: autofmt.exe, 88: autolfn.exe, 89: avicap.dll, 90: avicap32.dll, 91: avifil32.dll, 92: avifile.dll, 93: avmeter.dll, 94: avtapi.dll, 95: avwav.dll, 96: azroles.dll, 97: basesrv.dll, 98: batmeter.dll, 99: batt.dll, 100: bcdprov.dll, 101: bcdsrv.dll, 102: bidispl.dll, 103: bios1.rom, 104: bios4.rom, 105: bits, 106: bitsprx2.dll, 107: bitsprx3.dll, 108: bitsprx4.dll, 109: blackbox.dll, 110: blastcln.exe, 111: bootcfg.exe, 112: bootok.exe, 113: bootvid.dll, 114: bootvrfy.exe, 115: bopomofo.uce, 116: browselc.dll, 117: browser.dll, 118: browseui.dll, 119: browsewm.dll, 120: bthci.dll, 121: bthprops.cpl, 122: bthserv.dll, 123: btpanui.dll, 124: cabinet.dll, 125: cabview.dll, 126: cacls.exe, 127: calc.exe, 128: camocx.dll, 129: capesnpn.dll, 130: capicom.dll, 131: cards.dll, 132: CatRoot, 133: CatRoot2, 134: catsrv.dll, 135: catsrvps.dll, 136: catsrvut.dll, 137: ccfgnt.dll, 138: CCM, 139: ccmcore.dll, 140: CcmFramework.h, 141: CcmFramework.ini, 142: ccmperf.dll, 143: ccmsetup, 144: cdfview.dll, 145: cdm.dll, 146: cdmodem.dll, 147: cdosys.dll, 148: cdplayer.exe.manifest, 149: certcli.dll, 150: certmgr.dll, 151: certmgr.msc, 152: cewmdm.dll, 153: cfgbkend.dll, 154: cfgmgr32.dll, 155: charmap.exe, 156: chcp.com, 157: chkdsk.exe, 158: chkntfs.exe, 159: ciadmin.dll, 160: ciadv.msc, 161: cic.dll, 162: cidaemon.exe, 163: ciodm.dll, 164: cipher.exe, 165: cisvc.exe, 166: ckcnv.exe, 167: clb.dll, 168: clbcatex.dll, 169: clbcatq.dll, 170: cleanmgr.exe, 171: cliconf.chm, 172: cliconfg.dll, 173: cliconfg.exe, 174: cliconfg.rll, 175: clipbrd.exe, 176: clipsrv.exe, 177: clusapi.dll, 178: cmcfg32.dll, 179: cmd.exe, 180: cmdial32.dll, 181: cmdl32.exe, 182: cmdlib.wsc, 183: cmmgr32.hlp, 184: cmmon32.exe, 185: cmos.ram, 186: cmpbk32.dll, 187: cmprops.dll, 188: cmsetacl.dll, 189: cmstp.exe, 190: cmutil.dll, 191: cnbjmon.dll, 192: cnetcfg.dll, 193: cnvfat.dll, 194: colbact.dll, 195: Com, 196: comaddin.dll, 197: comcat.dll, 198: comct332.ocx, 199: comctl32.dll, 200: Comctl32.ocx, 201: comdlg32.dll, 202: COMDLG32.OCX, 203: comm.drv, 204: command.com, 205: commdlg.dll, 206: comp.exe, 207: compact.exe, 208: compatui.dll, 209: compmgmt.msc, 210: compobj.dll, 211: compstui.dll, 212: comrepl.dll, 213: comres.dll, 214: comsdupd.exe, 215: comsnap.dll, 216: comsvcs.dll, 217: comuid.dll, 218: config, 219: CONFIG.NT, 220: CONFIG.TMP, 221: confmsp.dll, 222: conime.exe, 223: console.dll, 224: control.exe, 225: convert.exe, 226: corpol.dll, 227: country.sys, 228: credssp.dll, 229: credui.dll, 230: crtdll.dll, 231: crypt32.dll, 232: cryptdlg.dll, 233: cryptdll.dll, 234: cryptext.dll, 235: cryptnet.dll, 236: cryptsvc.dll, 237: cryptui.dll, 238: cscdll.dll, 239: cscript.exe, 240: cscui.dll, 241: csrsrv.dll, 242: csrss.ex"
"10:45:01.1639437 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","SUCCESS","0: dsprpres.dll, 1: dsquery.dll, 2: dssec.dat, 3: dssec.dll, 4: dssenh.dll, 5: dsuiext.dll, 6: dswave.dll, 7: dumprep.exe, 8: duser.dll, 9: dvdplay.exe, 10: dvdupgrd.exe, 11: dwwin.exe, 12: dx7vb.dll, 13: dx8vb.dll, 14: dxdiag.exe, 15: dxdiagn.dll, 16: dxmasf.dll, 17: dxtmsft.dll, 18: dxtrans.dll, 19: dxva2.dll, 20: eapolqec.dll, 21: eapp3hst.dll, 22: eappcfg.dll, 23: eappgnui.dll, 24: eapphost.dll, 25: eappprxy.dll, 26: eapqec.dll, 27: eapsvc.dll, 28: edb500.dll, 29: edit.com, 30: edit.hlp, 31: edlin.exe, 32: efsadu.dll, 33: ega.cpi, 34: els.dll, 35: emptyregdb.dat, 36: en, 37: en-us, 38: encapi.dll, 39: encdec.dll, 40: EqnClass.Dll, 41: ersvc.dll, 42: es.dll, 43: esent.dll, 44: esent97.dll, 45: esentprf.dll, 46: esentprf.hxx, 47: esentprf.ini, 48: esentutl.exe, 49: eudcedit.exe, 50: eula.txt, 51: eventcls.dll, 52: eventcreate.exe, 53: eventlog.dll, 54: eventquery.vbs, 55: eventtriggers.exe, 56: eventvwr.exe, 57: eventvwr.msc, 58: evr.dll, 59: exe2bin.exe, 60: expand.exe, 61: export, 62: expsrv.dll, 63: extmgr.dll, 64: extrac32.exe, 65: exts.dll, 66: fastopen.exe, 67: faultrep.dll, 68: faxpatch.exe, 69: fc.exe, 70: fde.dll, 71: fdeploy.dll, 72: feclient.dll, 73: filemgmt.dll, 74: find.exe, 75: findstr.exe, 76: finger.exe, 77: firewall.cpl, 78: fixmapi.exe, 79: fldrclnr.dll, 80: fltlib.dll, 81: fltmc.exe, 82: FM20.DLL, 83: FM20ENU.DLL, 84: fmifs.dll, 85: FNTCACHE.DAT, 86: fontext.dll, 87: fontsub.dll, 88: fontview.exe, 89: forcedos.exe, 90: format.com, 91: framebuf.dll, 92: FrameworkPerf.dll, 93: freecell.exe, 94: fsmgmt.msc, 95: fsquirt.exe, 96: fsusd.dll, 97: fsutil.exe, 98: ftp.exe, 99: ftsrch.dll, 100: fwcfg.dll, 101: FwsVpn.dll, 102: g711codc.ax, 103: gb2312.uce, 104: gcdef.dll, 105: gdi.exe, 106: gdi32.dll, 107: geo.nls, 108: getmac.exe, 109: getuname.dll, 110: glmf32.dll, 111: glu32.dll, 112: gpedit.dll, 113: gpedit.msc, 114: gpkcsp.dll, 115: gpkrsrc.dll, 116: gpresult.exe, 117: gptext.dll, 118: gpupdate.exe, 119: graftabl.com, 120: graphics.com, 121: graphics.pro, 122: GroupPolicy, 123: grpconv.exe, 124: h323.tsp, 125: h323log.txt, 126: h323msp.dll, 127: hal.dll, 128: hccoin.dll, 129: hdwwiz.cpl, 130: help.exe, 131: hh.exe, 132: hhctrl.ocx, 133: hhsetup.dll, 134: hid.dll, 135: hidcrtp.dll, 136: hidphone.tsp, 137: himem.sys, 138: hlink.dll, 139: hnetcfg.dll, 140: hnetmon.dll, 141: hnetwiz.dll, 142: homepage.inf, 143: hostname.exe, 144: hotplug.dll, 145: hsfcisp2.dll, 146: hticons.dll, 147: html.iec, 148: httpapi.dll, 149: htui.dll, 150: hypertrm.dll, 151: iac25_32.ax, 152: ias, 153: iasacct.dll, 154: iasads.dll, 155: iashlpr.dll, 156: iasnap.dll, 157: iaspolcy.dll, 158: iasrad.dll, 159: iasrecst.dll, 160: iassam.dll, 161: iassdo.dll, 162: iassvcs.dll, 163: icaapi.dll, 164: icardagt.exe, 165: icardie.dll, 166: icardres.dll, 167: icardres.dll.mui, 168: iccvid.dll, 169: icfgnt5.dll, 170: icm32.dll, 171: icmp.dll, 172: icmui.dll, 173: icrav03.rat, 174: icsxml, 175: icwdial.dll, 176: icwphbk.dll, 177: ideograf.uce, 178: idndl.dll, 179: idq.dll, 180: ie4uinit.exe, 181: IE7Eula.rtf, 182: ieakeng.dll, 183: ieaksie.dll, 184: ieakui.dll, 185: ieapfltr.dat, 186: ieapfltr.dll, 187: iedkcs32.dll, 188: ieencode.dll, 189: ieframe.dll, 190: ieframe.dll.mui, 191: iepeers.dll, 192: iernonce.dll, 193: iertutil.dll, 194: iesetup.dll, 195: ieudinit.exe, 196: ieui.dll, 197: ieuinit.inf, 198: iexpress.exe, 199: ifmon.dll, 200: ifsutil.dll, 201: igmpagnt.dll, 202: iissuba.dll, 203: ils.dll, 204: imaadp32.acm, 205: imagehlp.dll, 206: imapi.exe, 207: IME, 208: imeshare.dll, 209: imgutil.dll, 210: imm32.dll, 211: inetcfg.dll, 212: inetcomm.dll, 213: inetcpl.cpl, 214: inetcplc.dll, 215: inetmib1.dll, 216: inetpp.dll, 217: inetppui.dll, 218: inetres.dll, 219: inetsrv, 220: inetwh32.dll, 221: infocardapi.dll, 222: infocardcpl.cpl, 223: infosoft.dll, 224: initpki.dll, 225: INKED.DLL, 226: input.dll, 227: inseng.dll, 228: INSTALL.LOG, 229: instcat.sql, 230: intl.cpl, 231: iologmsg.dll, 232: ipconf.tsp, 233: ipconfig.exe, 234: iphlpapi.dll, 235: ipmontr.dll, 236: ipnathlp.dll, 237: ippromon.dll, 238: iprop.dll, 239: iprtprio.dll, 240: iprtrmgr.d"
"10:45:01.1643523 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","SUCCESS","0: mciole16.dll, 1: mciole32.dll, 2: mciqtz32.dll, 3: mciseq.dll, 4: mciseq.drv, 5: mciwave.dll, 6: mciwave.drv, 7: mdhcp.dll, 8: mdminst.dll, 9: mdmxsdk.dll, 10: mdwmdmsp.dll, 11: mem.exe, 12: mf3216.dll, 13: mfc40.dll, 14: mfc40u.dll, 15: mfc42.dll, 16: MFC42ENU.DLL, 17: mfc42u.dll, 18: MFC71.dll, 19: mfcsubs.dll, 20: mgmtapi.dll, 21: mib.bin, 22: Microsoft, 23: microsoft.managementconsole.dll, 24: midimap.dll, 25: miglibnt.dll, 26: migpwd.exe, 27: mimefilt.dll, 28: mlang.dat, 29: mlang.dll, 30: mll_hp.dll, 31: mll_mtf.dll, 32: mll_qic.dll, 33: mmc.exe, 34: mmcbase.dll, 35: mmcex.dll, 36: mmcfxcommon.dll, 37: mmcndmgr.dll, 38: mmcperf.exe, 39: mmcshext.dll, 40: mmdriver.inf, 41: mmdrv.dll, 42: mmfutil.dll, 43: mmsys.cpl, 44: mmsystem.dll, 45: mmtask.tsk, 46: mmutilse.dll, 47: mnmdd.dll, 48: mnmsrvc.exe, 49: mobsync.dll, 50: mobsync.exe, 51: mode.com, 52: modemui.dll, 53: modex.dll, 54: more.com, 55: moricons.dll, 56: mountvol.exe, 57: mouse.drv, 58: mp43dmod.dll, 59: mp4sdmod.dll, 60: mpeg2data.ax, 61: mpg2splt.ax, 62: mpg4dmod.dll, 63: mpg4ds32.ax, 64: mplay32.exe, 65: mpnotify.exe, 66: mpr.dll, 67: mprapi.dll, 68: mprddm.dll, 69: mprdim.dll, 70: mprmsg.dll, 71: mprui.dll, 72: mqad.dll, 73: mqbkup.exe, 74: mqcertui.dll, 75: mqdscli.dll, 76: mqgentr.dll, 77: mqise.dll, 78: mqlogmgr.dll, 79: mqoa.dll, 80: mqoa.tlb, 81: mqoa10.tlb, 82: mqoa20.tlb, 83: mqperf.dll, 84: mqperf.ini, 85: mqprfsym.h, 86: mqqm.dll, 87: mqrt.dll, 88: mqrtdep.dll, 89: mqsec.dll, 90: mqsnap.dll, 91: mqsvc.exe, 92: mqtgsvc.exe, 93: mqtrig.dll, 94: mqupgrd.dll, 95: mqutil.dll, 96: mrinfo.exe, 97: MRT.exe, 98: msaatext.dll, 99: msacm.dll, 100: msacm32.dll, 101: msacm32.drv, 102: msadds32.ax, 103: msadp32.acm, 104: msafd.dll, 105: msapsspc.dll, 106: msasn1.dll, 107: msaud32.acm, 108: msaudite.dll, 109: mscat32.dll, 110: mscdexnt.exe, 111: mscms.dll, 112: mscomct2.ocx, 113: MSCOMCTL.OCX, 114: MSCOMM32.OCX, 115: msconf.dll, 116: mscoree.dll, 117: mscorier.dll, 118: mscories.dll, 119: mscpx32r.dll, 120: mscpxl32.dll, 121: msctf.dll, 122: msctfime.ime, 123: msctfp.dll, 124: msdadiag.dll, 125: msdart.dll, 126: msdatsrc.tlb, 127: msdmo.dll, 128: MsDtc, 129: msdtc.exe, 130: msdtclog.dll, 131: msdtcprf.h, 132: msdtcprf.ini, 133: msdtcprx.dll, 134: msdtctm.dll, 135: msdtcuiu.dll, 136: msdxm.ocx, 137: msdxmlc.dll, 138: msencode.dll, 139: msexch40.dll, 140: msexcl40.dll, 141: msfeeds.dll, 142: msfeedsbs.dll, 143: msfeedssync.exe, 144: msflxgrd.ocx, 145: msftedit.dll, 146: msg.exe, 147: msg711.acm, 148: msg723.acm, 149: msgina.dll, 150: msgsm32.acm, 151: msgsvc.dll, 152: msh261.drv, 153: msh263.drv, 154: mshearts.exe, 155: mshta.exe, 156: mshtml.dll, 157: mshtml.tlb, 158: mshtmled.dll, 159: mshtmler.dll, 160: msi.dll, 161: msident.dll, 162: msidle.dll, 163: msidntld.dll, 164: msieftp.dll, 165: msiexec.exe, 166: msihnd.dll, 167: msimg32.dll, 168: msimsg.dll, 169: msimtf.dll, 170: MSINET.OCX, 171: msiregmv.exe, 172: msisip.dll, 173: msjet40.dll, 174: msjetoledb40.dll, 175: msjint40.dll, 176: msjter40.dll, 177: msjtes40.dll, 178: mslbui.dll, 179: msls31.dll, 180: msltus40.dll, 181: MSMAPI32.OCX, 182: msnetobj.dll, 183: msnsspc.dll, 184: msobjs.dll, 185: msoeacct.dll, 186: msoert2.dll, 187: msorc32r.dll, 188: msorcl32.dll, 189: mspaint.exe, 190: mspatcha.dll, 191: mspbde40.dll, 192: mspmsnsv.dll, 193: mspmsp.dll, 194: msports.dll, 195: msprivs.dll, 196: msr2c.dll, 197: msr2cenu.dll, 198: msratelc.dll, 199: msrating.dll, 200: msrclr40.dll, 201: msrd2x40.dll, 202: msrd3x40.dll, 203: msrdc.dll, 204: MSRDO20.DLL, 205: msrecr40.dll, 206: msrepl40.dll, 207: msrle32.dll, 208: mssap.dll, 209: msscds32.ax, 210: msscp.dll, 211: msscript.ocx, 212: mssha.dll, 213: msshavmsg.dll, 214: mssign32.dll, 215: mssip32.dll, 216: MSSTDFMT.DLL, 217: MSSTKPRP.DLL, 218: msswch.dll, 219: msswchx.exe, 220: mstask.dll, 221: mstext40.dll, 222: mstime.dll, 223: mstinit.exe, 224: mstlsapi.dll, 225: mstsc.exe, 226: mstscax.dll, 227: msutb.dll, 228: msv1_0.dll, 229: msvbvm50.dll, 230: msvbvm60.dll, 231: msvcirt.dll, 232: msvcp50.dll, 233: msvcp60.dll, 234: msvcp70.dll, 235: msvcp71.dll, 236: msvcr1"
"10:45:01.1653299 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","SUCCESS","0: osuninst.dll, 1: osuninst.exe, 2: p2p.dll, 3: p2pgasvc.dll, 4: p2pgraph.dll, 5: p2pnetsh.dll, 6: p2psvc.dll, 7: packager.exe, 8: pagefileconfig.vbs, 9: panmap.dll, 10: paqsp.dll, 11: pathping.exe, 12: pautoenr.dll, 13: pcl.sep, 14: pdh.dll, 15: pentnt.exe, 16: perfc009.dat, 17: perfci.h, 18: perfci.ini, 19: perfctrs.dll, 20: perfd009.dat, 21: perfdisk.dll, 22: perffilt.h, 23: perffilt.ini, 24: perfh009.dat, 25: perfi009.dat, 26: perfmon.exe, 27: perfmon.msc, 28: perfnet.dll, 29: perfnw.dll, 30: perfos.dll, 31: perfproc.dll, 32: PerfStringBackup.INI, 33: perfts.dll, 34: perfwci.h, 35: perfwci.ini, 36: photometadatahandler.dll, 37: photowiz.dll, 38: pid.dll, 39: pid.inf, 40: pidgen.dll, 41: pifmgr.dll, 42: ping.exe, 43: ping6.exe, 44: pjlmon.dll, 45: plustab.dll, 46: pmspl.dll, 47: pngfilt.dll, 48: pnrpnsp.dll, 49: polstore.dll, 50: powercfg.cpl, 51: powercfg.exe, 52: powrprof.dll, 53: PreInstall, 54: PresentationCFFRasterizerNative_v0300.dll, 55: PresentationHost.exe, 56: PresentationHostProxy.dll, 57: PresentationNative_v0300.dll, 58: prflbmsg.dll, 59: print.exe, 60: printui.dll, 61: prncnfg.vbs, 62: prndrvr.vbs, 63: prnjobs.vbs, 64: prnmngr.vbs, 65: prnport.vbs, 66: prnqctl.vbs, 67: prntvpt.dll, 68: proctexe.ocx, 69: prodspec.ini, 70: profmap.dll, 71: progman.exe, 72: proquota.exe, 73: proxycfg.exe, 74: psapi.dll, 75: psbase.dll, 76: pschdcnt.h, 77: pschdprf.dll, 78: pschdprf.ini, 79: pscript.sep, 80: psnppagn.dll, 81: pstorec.dll, 82: pstorsvc.dll, 83: pubprn.vbs, 84: qagent.dll, 85: qagentrt.dll, 86: qappsrv.exe, 87: qasf.dll, 88: qcap.dll, 89: qcliprov.dll, 90: qdv.dll, 91: qdvd.dll, 92: qedit.dll, 93: qedwipes.dll, 94: qmgr.dll, 95: qmgrprxy.dll, 96: qosname.dll, 97: qprocess.exe, 98: quartz.dll, 99: query.dll, 100: qutil.dll, 101: qwinsta.exe, 102: RACMGR32.EXE, 103: racpldlg.dll, 104: RACREG32.DLL, 105: ras, 106: rasadhlp.dll, 107: rasapi32.dll, 108: rasauto.dll, 109: rasautou.exe, 110: raschap.dll, 111: rasctrnm.h, 112: rasctrs.dll, 113: rasctrs.ini, 114: rasdial.exe, 115: rasdlg.dll, 116: rasman.dll, 117: rasmans.dll, 118: rasmontr.dll, 119: rasmxs.dll, 120: rasphone.exe, 121: rasppp.dll, 122: rasqec.dll, 123: rasrad.dll, 124: rassapi.dll, 125: rasser.dll, 126: rastapi.dll, 127: rastls.dll, 128: RCAgent.exe, 129: rcbdyctl.dll, 130: rcimlby.exe, 131: rcp.exe, 132: rdchost.dll, 133: RDOCURS.DLL, 134: rdpcfgex.dll, 135: rdpclip.exe, 136: rdpdd.dll, 137: rdpsnd.dll, 138: rdpwsx.dll, 139: rdsaddin.exe, 140: rdshost.exe, 141: recover.exe, 142: redir.exe, 143: reg.exe, 144: regapi.dll, 145: regedt32.exe, 146: regini.exe, 147: regsvc.dll, 148: regsvr32.exe, 149: regwiz.exe, 150: regwizc.dll, 151: ReinstallBackups, 152: relog.exe, 153: remotepg.dll, 154: remotesp.tsp, 155: rend.dll, 156: replace.exe, 157: reset.exe, 158: Restore, 159: resutils.dll, 160: rexec.exe, 161: rgb9rast_2.dll, 162: rhttpaa.dll, 163: riched20.dll, 164: riched32.dll, 165: Richtx32.ocx, 166: rnr20.dll, 167: route.exe, 168: routemon.exe, 169: routetab.dll, 170: rpcns4.dll, 171: rpcrt4.dll, 172: rpcss.dll, 173: rsaci.rat, 174: rsaenh.dll, 175: rsfsaps.dll, 176: rsh.exe, 177: rshx32.dll, 178: rsm.exe, 179: rsmps.dll, 180: rsmsink.exe, 181: rsmui.exe, 182: rsnotify.exe, 183: rsop.msc, 184: rsopprov.exe, 185: rsvp.exe, 186: rsvp.ini, 187: rsvpcnts.h, 188: rsvpmsg.dll, 189: rsvpperf.dll, 190: rsvpsp.dll, 191: rtcshare.exe, 192: rtipxmib.dll, 193: rtm.dll, 194: rtutils.dll, 195: runas.exe, 196: rundll32.exe, 197: runonce.exe, 198: rwinsta.exe, 199: rwnh.dll, 200: S32EVNT1.DLL, 201: s3gnb.dll, 202: safrcdlg.dll, 203: safrdm.dll, 204: safrslv.dll, 205: samlib.dll, 206: samsrv.dll, 207: sapi.cpl.manifest, 208: savedump.exe, 209: sbe.dll, 210: sbeio.dll, 211: sc.exe, 212: scarddlg.dll, 213: scardssp.dll, 214: scardsvr.exe, 215: sccbase.dll, 216: sccsccp.dll, 217: scecli.dll, 218: scesrv.dll, 219: schannel.dll, 220: schedsvc.dll, 221: schtasks.exe, 222: sclgntfy.dll, 223: SCP32.DLL, 224: scredir.dll, 225: scripting, 226: scriptpw.dll, 227: scrnsave.scr, 228: scrobj.dll, 229: scrrun.dll, 230: sdbinst.exe, 231: sdhcinst.dll, 232: sdpblb.dll, 233: secedit.exe,"
"10:45:01.1671367 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","SUCCESS","0: tscfgwmi.dll, 1: tscon.exe, 2: tscupgrd.exe, 3: tsd32.dll, 4: tsddd.dll, 5: tsdiscon.exe, 6: tsgqec.dll, 7: tskill.exe, 8: tslabels.h, 9: tslabels.ini, 10: tspkg.dll, 11: tsshutdn.exe, 12: tssoft32.acm, 13: TsWpfWrp.exe, 14: twext.dll, 15: txflog.dll, 16: typelib.dll, 17: typeperf.exe, 18: tzchange.exe, 19: TZLog.log, 20: udhisapi.dll, 21: ufat.dll, 22: UIAutomationCore.dll, 23: ulib.dll, 24: umandlg.dll, 25: umdmxfrm.dll, 26: umpnpmgr.dll, 27: unicode.nls, 28: unimdm.tsp, 29: unimdmat.dll, 30: uniplat.dll, 31: unlodctr.exe, 32: untfs.dll, 33: upnp.dll, 34: upnpcont.exe, 35: upnphost.dll, 36: upnpui.dll, 37: ups.exe, 38: ureg.dll, 39: url.dll, 40: urlmon.dll, 41: usbmon.dll, 42: user.exe, 43: user32.dll, 44: userenv.dll, 45: userinit.exe, 46: usmt, 47: usp10.dll, 48: usrcntra.dll, 49: usrcoina.dll, 50: usrdpa.dll, 51: usrdtea.dll, 52: usrfaxa.dll, 53: usrlbva.dll, 54: usrlogon.cmd, 55: usrmlnka.exe, 56: usrprbda.exe, 57: usrrtosa.dll, 58: usrsdpia.dll, 59: usrshuta.exe, 60: usrsvpia.dll, 61: usrv42a.dll, 62: usrv80a.dll, 63: usrvoica.dll, 64: usrvpa.dll, 65: utildll.dll, 66: utilman.exe, 67: uxtheme.dll, 68: v7vga.rom, 69: VB6STKIT.DLL, 70: VBAEN32.OLB, 71: VBAEND32.OLB, 72: vbajet32.dll, 73: VBAME.DLL, 74: vbcoinst.dll, 75: VBHIDComm.ocx, 76: vbicodec.ax, 77: vbisurf.ax, 78: VBoxControl.exe, 79: VBoxD3D8.dll, 80: VBoxD3D9.dll, 81: VBoxDisp.dll, 82: VBoxHook.dll, 83: VBoxMRXNP.dll, 84: VBoxOGL.dll, 85: VBoxOGLarrayspu.dll, 86: VBoxOGLcrutil.dll, 87: VBoxOGLerrorspu.dll, 88: VBoxOGLfeedbackspu.dll, 89: VBoxOGLpackspu.dll, 90: VBoxOGLpassthroughspu.dll, 91: VBoxService.exe, 92: VBoxTray.exe, 93: vbscript.dll, 94: vcdex.dll, 95: vdmdbg.dll, 96: vdmredir.dll, 97: VEN2232.OLB, 98: ver.dll, 99: verclsid.exe, 100: verifier.dll, 101: verifier.exe, 102: version.dll, 103: vfpodbc.dll, 104: vga.dll, 105: vga.drv, 106: vga256.dll, 107: vga64k.dll, 108: vidcap.ax, 109: View Channels.scf, 110: vjoy.dll, 111: vssadmin.exe, 112: vssapi.dll, 113: vssvc.exe, 114: vss_ps.dll, 115: vwipxspx.dll, 116: vwipxspx.exe, 117: w32time.dll, 118: w32tm.exe, 119: w32topl.dll, 120: w3ssl.dll, 121: watchdog.sys, 122: wavemsp.dll, 123: wbcache.deu, 124: wbcache.enu, 125: wbcache.esn, 126: wbcache.fra, 127: wbcache.ita, 128: wbcache.nld, 129: wbcache.sve, 130: wbdbase.deu, 131: wbdbase.enu, 132: wbdbase.esn, 133: wbdbase.fra, 134: wbdbase.ita, 135: wbdbase.nld, 136: wbdbase.sve, 137: wbem, 138: wdigest.dll, 139: wdl.trm, 140: wdmaud.drv, 141: webcheck.dll, 142: webclnt.dll, 143: webfldrs.msi, 144: webhits.dll, 145: webvw.dll, 146: wextract.exe, 147: wfwnet.drv, 148: wiaacmgr.exe, 149: wiadefui.dll, 150: wiadss.dll, 151: wiascr.dll, 152: wiaservc.dll, 153: wiasf.ax, 154: wiashext.dll, 155: wiavideo.dll, 156: wiavusd.dll, 157: wifeman.dll, 158: win.com, 159: win32k.sys, 160: win32spl.dll, 161: win87em.dll, 162: winbrand.dll, 163: winchat.exe, 164: windowscodecs.dll, 165: windowscodecsext.dll, 166: WindowsLogon.manifest, 167: wined3d.dll, 168: winfax.dll, 169: WinFXDocObj.exe, 170: winhelp.hlp, 171: winhlp32.exe, 172: winhttp.dll, 173: wininet.dll, 174: winipsec.dll, 175: winlogon.exe, 176: winmine.exe, 177: winmm.dll, 178: winmsd.exe, 179: winnls.dll, 180: winntbbu.dll, 181: winoldap.mod, 182: winrnr.dll, 183: wins, 184: winscard.dll, 185: winshfhc.dll, 186: winsock.dll, 187: winspool.drv, 188: winspool.exe, 189: winsrv.dll, 190: winsta.dll, 191: winstrm.dll, 192: wintrust.dll, 193: winver.exe, 194: WISPTIS.EXE, 195: wkssvc.dll, 196: wlanapi.dll, 197: wldap32.dll, 198: wlnotify.dll, 199: wmadmod.dll, 200: wmadmoe.dll, 201: wmasf.dll, 202: wmdmlog.dll, 203: wmdmps.dll, 204: wmerrenu.dll, 205: wmerror.dll, 206: wmi.dll, 207: wmidx.dll, 208: wmimgmt.msc, 209: wmiprop.dll, 210: wmiscmgr.dll, 211: WMNetmgr.dll, 212: wmp.dll, 213: wmp.ocx, 214: wmpasf.dll, 215: wmpcd.dll, 216: wmpcore.dll, 217: wmpdxm.dll, 218: wmphoto.dll, 219: wmploc.dll, 220: wmpns.dll, 221: wmpshell.dll, 222: wmpui.dll, 223: wmsdmod.dll, 224: wmsdmoe.dll, 225: wmsdmoe2.dll, 226: wmspdmod.dll, 227: wmspdmoe.dll, 228: wmstream.dll, 229: wmv8ds32.ax, 230: WMVCore.dll, 231: wmvdmod.dll, 232: "
"10:45:01.1676698 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32","NO MORE FILES",""
"10:45:01.1679306 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32","SUCCESS",""
"10:45:01.1692018 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\drivers","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1696210 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32\drivers","SUCCESS","0: ., 1: .., 2: ac97intc.sys, 3: acpi.sys, 4: acpiec.sys, 5: adv01nt5.dll, 6: adv02nt5.dll, 7: adv05nt5.dll, 8: adv07nt5.dll, 9: adv08nt5.dll, 10: adv09nt5.dll, 11: adv11nt5.dll, 12: aec.sys, 13: afd.sys, 14: agp440.sys, 15: agpcpq.sys, 16: alim1541.sys, 17: amdagp.sys, 18: amdk6.sys, 19: amdk7.sys, 20: arp1394.sys, 21: asyncmac.sys, 22: atapi.sys, 23: ati1btxx.sys, 24: ati1mdxx.sys, 25: ati1pdxx.sys, 26: ati1raxx.sys, 27: ati1rvxx.sys, 28: ati1snxx.sys, 29: ati1ttxx.sys, 30: ati1tuxx.sys, 31: ati1xbxx.sys, 32: ati1xsxx.sys, 33: ati2mtaa.sys, 34: ati2mtag.sys, 35: atinbtxx.sys, 36: atinmdxx.sys, 37: atinpdxx.sys, 38: atinraxx.sys, 39: atinrvxx.sys, 40: atinsnxx.sys, 41: atinttxx.sys, 42: atintuxx.sys, 43: atinxbxx.sys, 44: atinxsxx.sys, 45: ativmc20.cod, 46: atmarpc.sys, 47: atmepvc.sys, 48: atmlane.sys, 49: atmuni.sys, 50: atv01nt5.dll, 51: atv02nt5.dll, 52: atv04nt5.dll, 53: atv06nt5.dll, 54: atv10nt5.dll, 55: audstub.sys, 56: battc.sys, 57: beep.sys, 58: bridge.sys, 59: bthenum.sys, 60: bthmodem.sys, 61: bthpan.sys, 62: bthport.sys, 63: bthprint.sys, 64: bthusb.sys, 65: cbidf2k.sys, 66: cdaudio.sys, 67: cdfs.sys, 68: cdrom.sys, 69: ch7xxnt5.dll, 70: cinemst2.sys, 71: classpnp.sys, 72: cmbatt.sys, 73: coh_mon.cat, 74: COH_Mon.inf, 75: COH_Mon.sys, 76: compbatt.sys, 77: cpqdap01.sys, 78: crusoe.sys, 79: cxthsfs2.cty, 80: disdn, 81: disk.sys, 82: diskdump.sys, 83: dmboot.sys, 84: dmio.sys, 85: dmload.sys, 86: dmusic.sys, 87: drmk.sys, 88: drmkaud.sys, 89: dxapi.sys, 90: dxg.sys, 91: dxgthk.sys, 92: etc, 93: fastfat.sys, 94: fdc.sys, 95: fips.sys, 96: flpydisk.sys, 97: fltmgr.sys, 98: fsvga.sys, 99: fs_rec.sys, 100: ftdisk.sys, 101: gagp30kx.sys, 102: gm.dls, 103: gmreadme.txt, 104: hdaudbus.sys, 105: hidbth.sys, 106: hidir.sys, 107: hsfbs2s2.sys, 108: hsfcxts2.sys, 109: hsfdpsp2.sys, 110: http.sys, 111: i8042prt.sys, 112: imapi.sys, 113: intelide.sys, 114: intelppm.sys, 115: ip6fw.sys, 116: ipfltdrv.sys, 117: ipinip.sys, 118: ipnat.sys, 119: ipsec.sys, 120: irbus.sys, 121: irenum.sys, 122: isapnp.sys, 123: kbdclass.sys, 124: kmixer.sys, 125: ks.sys, 126: ksecdd.sys, 127: mcd.sys, 128: mdmxsdk.sys, 129: mf.sys, 130: mnmdd.sys, 131: modem.sys, 132: mouclass.sys, 133: mountmgr.sys, 134: mqac.sys, 135: mrxdav.sys, 136: mrxsmb.sys, 137: msfs.sys, 138: msgpc.sys, 139: mskssrv.sys, 140: mspclock.sys, 141: mspqm.sys, 142: mssmbios.sys, 143: mtlmnt5.sys, 144: mtlstrm.sys, 145: mtxparhm.sys, 146: mup.sys, 147: mutohpen.sys, 148: ndis.sys, 149: ndistapi.sys, 150: ndisuio.sys, 151: ndiswan.sys, 152: ndproxy.sys, 153: netbios.sys, 154: netbt.sys, 155: netwlan5.img, 156: nic1394.sys, 157: nikedrv.sys, 158: nmnt.sys, 159: npfs.sys, 160: ntfs.sys, 161: ntmtlfax.sys, 162: null.sys, 163: nv4_mini.sys, 164: nwlnkflt.sys, 165: nwlnkfwd.sys, 166: nwlnkipx.sys, 167: nwlnknb.sys, 168: nwlnkspx.sys, 169: nwrdr.sys, 170: oprghdlr.sys, 171: p3.sys, 172: parport.sys, 173: partmgr.sys, 174: parvdm.sys, 175: pci.sys, 176: pciidex.sys, 177: pcmcia.sys, 178: pcntpci5.sys, 179: portcls.sys, 180: processr.sys, 181: psched.sys, 182: ptilink.sys, 183: rasacd.sys, 184: rasl2tp.sys, 185: raspppoe.sys, 186: raspptp.sys, 187: raspti.sys, 188: rawwan.sys, 189: rdbss.sys, 190: rdpcdd.sys, 191: rdpdr.sys, 192: rdpwd.sys, 193: recagent.sys, 194: redbook.sys, 195: rfcomm.sys, 196: rio8drv.sys, 197: riodrv.sys, 198: rmcast.sys, 199: rndismp.sys, 200: rndismpx.sys, 201: rootmdm.sys, 202: s3gnbm.sys, 203: scsiport.sys, 204: sdbus.sys, 205: secdrv.sys, 206: serenum.sys, 207: serial.sys, 208: sffdisk.sys, 209: sffp_mmc.sys, 210: sffp_sd.sys, 211: sfloppy.sys, 212: siint5.dll, 213: sisagp.sys, 214: slnt7554.sys, 215: slntamr.sys, 216: slnthal.sys, 217: slwdmsup.sys, 218: smbali.sys, 219: smclib.sys, 220: smsmdm.sys, 221: sonydcam.sys, 222: splitter.sys, 223: sr.sys, 224: srtsp.cat, 225: srtsp.inf, 226: srtsp.sys, 227: srtspl.cat, 228: srtspl.inf, 229: srtspl.sys, 230: srtspx.cat, 231: srtspx.inf, 232: srtspx.sys, 233: srv.sys, 234: stream.sys, 235: swenum.sys, 236: swmidi.sys, 237: symdns.sys, 238: SYMEVENT.CAT, 239: SYMEVENT.INF, 240: SYMEVENT.SYS, 241: symfw.sys, 242"
"10:45:01.1702182 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32\drivers","NO MORE FILES",""
"10:45:01.1730149 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\drivers","SUCCESS",""
"10:45:01.1735745 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\drivers\etc","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1761724 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32\drivers\etc","SUCCESS","0: ., 1: .., 2: hosts, 3: lmhosts.sam, 4: networks, 5: protocol, 6: services"
"10:45:01.1770695 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\system32\drivers\etc","NO MORE FILES",""
"10:45:01.1774966 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\drivers\etc","SUCCESS",""
"10:45:01.1789048 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1791912 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS","SUCCESS","0: ., 1: .., 2: InstallTemp, 3: Manifests, 4: MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e, 5: MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5, 6: Policies, 7: x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7, 8: x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a, 9: x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd, 10: x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841, 11: x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474, 12: x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca, 13: x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989, 14: x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd, 15: x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700, 16: x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c, 17: x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0, 18: x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303, 19: x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e, 20: x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2, 21: x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05, 22: x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723, 23: x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a, 24: x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9, 25: x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375, 26: x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a, 27: x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a, 28: x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1, 29: x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a, 30: x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9, 31: x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83, 32: x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a, 33: x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9, 34: x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63, 35: x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13, 36: x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82, 37: x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c, 38: x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df, 39: x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7, 40: x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95, 41: x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0, 42: x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790, 43: x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492"
"10:45:01.1795432 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS","NO MORE FILES",""
"10:45:01.1823532 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS","SUCCESS",""
"10:45:01.1827418 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.4053_X-WW_E6967989","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1846536 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","0: ., 1: .., 2: msvcm80.dll, 3: msvcp80.dll, 4: msvcr80.dll"
"10:45:01.1849611 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","NO MORE FILES",""
"10:45:01.1852744 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
"10:45:01.1866923 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\X86_MICROSOFT.VC80.MFCLOC_1FC8B3B9A1E18E3B_8.0.50727.4053_X-WW_0CCC058C","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1872056 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS","0: ., 1: .., 2: mfc80CHS.dll, 3: mfc80CHT.dll, 4: mfc80DEU.dll, 5: mfc80ENU.dll, 6: mfc80ESP.dll, 7: mfc80FRA.dll, 8: mfc80ITA.dll, 9: mfc80JPN.dll, 10: mfc80KOR.dll"
"10:45:01.1875215 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","NO MORE FILES",""
"10:45:01.1897619 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS",""
"10:45:01.1903620 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\X86_MICROSOFT.VC80.MFC_1FC8B3B9A1E18E3B_8.0.50727.4053_X-WW_B77CEC8E","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1922322 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","0: ., 1: .., 2: mfc80.dll, 3: mfc80u.dll, 4: mfcm80.dll, 5: mfcm80u.dll"
"10:45:01.1925464 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","NO MORE FILES",""
"10:45:01.1929114 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS",""
"10:45:01.1945191 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.5512_X-WW_35D4CE83","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1950216 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","0: ., 1: .., 2: comctl32.dll"
"10:45:01.1953325 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","NO MORE FILES",""
"10:45:01.1970537 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
"10:45:01.1975394 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.1985151 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ntdll.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.1985490 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","AllocationSize: 716,800, EndOfFile: 714,752, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.1987534 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ntdll.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.1992085 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2049493 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\kernel32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2049885 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS","AllocationSize: 991,232, EndOfFile: 989,696, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2050679 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\kernel32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2056209 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\unicode.nls","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2081841 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\unicode.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2082178 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\unicode.nls","SUCCESS","AllocationSize: 90,112, EndOfFile: 89,588, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2082861 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\unicode.nls","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2087290 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\locale.nls","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2091663 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\locale.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2091997 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\locale.nls","SUCCESS","AllocationSize: 266,240, EndOfFile: 265,948, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2092757 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\locale.nls","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2115612 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\sorttbls.nls","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2119660 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\sorttbls.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2119994 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\sorttbls.nls","SUCCESS","AllocationSize: 24,576, EndOfFile: 23,044, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2120677 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\sorttbls.nls","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2128538 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2139404 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2139743 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","AllocationSize: 49,152, EndOfFile: 49,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2143550 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2149582 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2171843 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2172729 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2173445 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2178895 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2198326 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2198662 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","AllocationSize: 32,768, EndOfFile: 29,696, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2199346 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2205388 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2224218 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2224562 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","AllocationSize: 1,105,920, EndOfFile: 1,105,920, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2225250 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2229802 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2234857 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2235266 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","AllocationSize: 634,880, EndOfFile: 632,656, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2236176 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2407631 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2411757 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2412095 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","AllocationSize: 344,064, EndOfFile: 343,040, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2412781 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2417423 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\gdi32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2436426 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\gdi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2436770 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\gdi32.dll","SUCCESS","AllocationSize: 286,720, EndOfFile: 286,720, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2437458 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\gdi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2442023 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\user32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2454190 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\user32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2454523 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\user32.dll","SUCCESS","AllocationSize: 581,632, EndOfFile: 578,560, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2455055 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\user32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2460406 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2480736 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2481077 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","AllocationSize: 475,136, EndOfFile: 474,112, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2481766 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2487420 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\advapi32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2514692 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\advapi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2515088 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\advapi32.dll","SUCCESS","AllocationSize: 618,496, EndOfFile: 617,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2515828 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\advapi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2520439 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2524405 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2524743 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","AllocationSize: 593,920, EndOfFile: 590,848, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2525427 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2542683 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\secur32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2547558 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\secur32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2548034 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\secur32.dll","SUCCESS","AllocationSize: 57,344, EndOfFile: 56,832, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2548721 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\secur32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2554088 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2575004 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2575348 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","AllocationSize: 32,768, EndOfFile: 32,256, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2576034 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2584610 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2606990 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2607463 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","AllocationSize: 1,622,016, EndOfFile: 1,622,016, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2608567 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2629374 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\netapi32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2633843 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\netapi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2634182 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\netapi32.dll","SUCCESS","AllocationSize: 339,968, EndOfFile: 337,408, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2634870 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\netapi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2639451 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2659161 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2659551 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS","AllocationSize: 24,576, EndOfFile: 22,528, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2660124 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2666200 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2694620 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2695009 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","AllocationSize: 86,016, EndOfFile: 82,432, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2695804 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2700764 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2729598 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2729989 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 19,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2730783 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2736154 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2753604 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2754002 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","AllocationSize: 278,528, EndOfFile: 276,992, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2754803 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2761192 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2784387 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2784724 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","AllocationSize: 618,496, EndOfFile: 617,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2785411 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2790369 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2809686 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2810025 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","AllocationSize: 8,462,336, EndOfFile: 8,462,336, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2810708 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2815260 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ctype.nls","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2827074 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ctype.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2827411 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\ctype.nls","SUCCESS","AllocationSize: 12,288, EndOfFile: 8,386, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2828096 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ctype.nls","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2832670 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2837134 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2837573 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","AllocationSize: 110,592, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2838415 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2864287 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2869617 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2869970 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","AllocationSize: 57,344, EndOfFile: 57,344, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2870682 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2876345 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2898163 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2898503 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2899189 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2904051 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2918489 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2918835 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","AllocationSize: 1,056,768, EndOfFile: 1,054,208, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2919540 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2922233 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WINDOWSSHELL.MANIFEST","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2952316 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2952650 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2954355 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2959131 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2979698 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2980035 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","AllocationSize: 98,304, EndOfFile: 94,720, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2980721 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.2986406 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\sortkey.nls","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.2990585 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\sortkey.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.2990973 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\sortkey.nls","SUCCESS","AllocationSize: 266,240, EndOfFile: 262,148, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.2991966 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\sortkey.nls","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3009834 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\icmp.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3015028 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3015424 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\icmp.dll","SUCCESS","AllocationSize: 4,096, EndOfFile: 3,584, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3016225 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3021177 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3042889 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3043231 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","AllocationSize: 245,760, EndOfFile: 245,248, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3043920 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3048477 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3075780 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3076172 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","AllocationSize: 151,552, EndOfFile: 147,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3076968 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3082734 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3096239 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3096576 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3097287 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3103145 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wldap32.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3133581 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wldap32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3133921 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\wldap32.dll","SUCCESS","AllocationSize: 172,032, EndOfFile: 172,032, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3134609 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wldap32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3149343 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3153269 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3153606 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","AllocationSize: 8,192, EndOfFile: 7,680, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3154288 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3182007 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3187446 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3188345 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","AllocationSize: 4,096, EndOfFile: 799, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3189034 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3193608 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3206805 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3210799 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","AllocationSize: 344,064, EndOfFile: 344,064, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3214695 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3219180 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3242210 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3242548 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 19,456, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3243311 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3249996 a.m.","synpwrap.exe","1976","CreateFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3261086 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\lsc_env\lsc_8_1.ini","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3261422 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","AllocationSize: 4,096, EndOfFile: 1,589, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3262105 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\lsc_env\lsc_8_1.ini","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3458048 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Desired Access: Read Data/List Directory, Read Attributes, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.3501883 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
"10:45:01.3502226 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","AllocationSize: 288, EndOfFile: 281, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.3502914 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.3509061 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS",""
"10:45:01.3513863 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS",""
"10:45:01.3535120 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\unicode.nls","SUCCESS",""
"10:45:01.3550946 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\locale.nls","SUCCESS",""
"10:45:01.3555672 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\sorttbls.nls","SUCCESS",""
"10:45:01.3592082 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS",""
"10:45:01.3597585 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS",""
"10:45:01.3631128 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS",""
"10:45:01.3636646 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS",""
"10:45:01.3658323 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS",""
"10:45:01.3663112 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\msvcrt.dll","SUCCESS",""
"10:45:01.3691985 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\gdi32.dll","SUCCESS",""
"10:45:01.3715735 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\user32.dll","SUCCESS",""
"10:45:01.3719821 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\shlwapi.dll","SUCCESS",""
"10:45:01.3734298 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\advapi32.dll","SUCCESS",""
"10:45:01.3740748 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS",""
"10:45:01.3772247 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\secur32.dll","SUCCESS",""
"10:45:01.3804737 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS",""
"10:45:01.3840774 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS",""
"10:45:01.3845420 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\netapi32.dll","SUCCESS",""
"10:45:01.3870319 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS",""
"10:45:01.3877709 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS",""
"10:45:01.3926915 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS",""
"10:45:01.3934282 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\comdlg32.dll","SUCCESS",""
"10:45:01.3983976 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS",""
"10:45:01.3989497 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\shell32.dll","SUCCESS",""
"10:45:01.4014582 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ctype.nls","SUCCESS",""
"10:45:01.4019503 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
"10:45:01.4042314 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
"10:45:01.4048846 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
"10:45:01.4072628 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
"10:45:01.4075338 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
"10:45:01.4104072 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS",""
"10:45:01.4108003 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\sortkey.nls","SUCCESS",""
"10:45:01.4128749 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\icmp.dll","SUCCESS",""
"10:45:01.4133757 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
"10:45:01.4152676 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS",""
"10:45:01.4156934 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
"10:45:01.4175495 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wldap32.dll","SUCCESS",""
"10:45:01.4179560 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS",""
"10:45:01.4199981 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS",""
"10:45:01.4204098 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS",""
"10:45:01.4239200 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
"10:45:01.4242089 a.m.","synpwrap.exe","1976","CloseFile","C:\lsc_env\lsc_8_1.ini","SUCCESS",""
"10:45:01.4269431 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS",""
"10:45:01.4274814 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4290174 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ntdll.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4291794 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ntdll.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4296428 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4320019 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\kernel32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4321646 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\kernel32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4327110 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4350460 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4351768 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4357226 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4376676 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4378190 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4385304 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4408098 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4409966 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4414514 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4418782 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4420107 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4450275 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4454342 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4455652 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4460182 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4476455 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4514870 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4519120 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\gdi32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4523206 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\gdi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4524492 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\gdi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4550086 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\user32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4554234 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\user32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4558030 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\user32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4562619 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4587757 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4589058 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4593600 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\advapi32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4609825 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\advapi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4611124 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\advapi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4615493 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4637544 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4638845 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4643808 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\secur32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4668515 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\secur32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4669811 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\secur32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4675010 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4679955 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4681246 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4699707 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4704726 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4706058 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4710598 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\netapi32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4740116 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\netapi32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4743942 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\netapi32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4748525 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4775831 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4777127 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4781512 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4793118 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4794414 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4798501 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4822043 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4824100 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4831470 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4835576 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4836872 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4852303 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4856779 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4860859 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4866187 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4895603 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4899914 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4904736 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4930889 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4932185 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4937031 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4951740 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4953093 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4957251 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4977252 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4978611 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.4983240 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.4990523 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.4991919 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5007151 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\icmp.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5011211 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5012500 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5018833 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5045756 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5047064 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5051602 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5075248 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5076550 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5081518 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5094765 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5096073 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5100636 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wldap32.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5132622 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wldap32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5133921 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wldap32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5138476 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5167126 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5168424 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5173211 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5177384 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5178688 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5199081 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Execute/Traverse, Disposition: Open, Options: Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5215004 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5216426 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5218611 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Offset: 27,648, Length: 512, I/O Flags: Non-cached, Paging I/O"
"10:45:01.5226759 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS",""
"10:45:01.5233037 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS",""
"10:45:01.5247907 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS",""
"10:45:01.5253613 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS",""
"10:45:01.5280392 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS",""
"10:45:01.5284961 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS",""
"10:45:01.5301607 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS",""
"10:45:01.5305695 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\msvcrt.dll","SUCCESS",""
"10:45:01.5329870 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\gdi32.dll","SUCCESS",""
"10:45:01.5333929 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\user32.dll","SUCCESS",""
"10:45:01.5356317 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\shlwapi.dll","SUCCESS",""
"10:45:01.5361541 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\advapi32.dll","SUCCESS",""
"10:45:01.5380303 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS",""
"10:45:01.5384620 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\secur32.dll","SUCCESS",""
"10:45:01.5413512 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS",""
"10:45:01.5438443 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS",""
"10:45:01.5442512 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\netapi32.dll","SUCCESS",""
"10:45:01.5456900 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS",""
"10:45:01.5460941 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS",""
"10:45:01.5484170 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS",""
"10:45:01.5488231 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\comdlg32.dll","SUCCESS",""
"10:45:01.5510322 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS",""
"10:45:01.5514252 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\shell32.dll","SUCCESS",""
"10:45:01.5535343 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
"10:45:01.5539439 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
"10:45:01.5561292 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
"10:45:01.5565389 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS",""
"10:45:01.5575642 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\icmp.dll","SUCCESS",""
"10:45:01.5580902 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
"10:45:01.5601406 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS",""
"10:45:01.5605477 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
"10:45:01.5627907 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wldap32.dll","SUCCESS",""
"10:45:01.5634535 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS",""
"10:45:01.5651422 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS",""
"10:45:01.5657728 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
"10:45:01.5659844 a.m.","synpwrap.exe","1976","CloseFile","C:","SUCCESS",""
"10:45:01.5684036 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe","NAME NOT FOUND","Desired Access: Read"
"10:45:01.5690774 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5714806 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\kernel32.dll","SUCCESS","Image Base: 0x7c800000, Image Size: 0xf6000"
"10:45:01.5732084 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
"10:45:01.5733072 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:01.5733603 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
"10:45:01.5734008 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe","NAME NOT FOUND","Desired Access: Read"
"10:45:01.5771087 a.m.","synpwrap.exe","1976","FileSystemControl","C:\Tools\ispTOOLS8_1","SUCCESS","Control: FSCTL_IS_VOLUME_MOUNTED"
"10:45:01.5776737 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","CreationTime: 11/24/2010 4:28:08 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:05:00 a.m., ChangeTime: 1/17/2011 10:55:04 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: A"
"10:45:01.5781931 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","CreationTime: 11/24/2010 4:28:08 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:05:00 a.m., ChangeTime: 1/17/2011 10:55:04 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: A"
"10:45:01.5787462 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.5810161 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.5811473 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.5812403 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\SafeBoot\Option","NAME NOT FOUND","Desired Access: Query Value, Set Value"
"10:45:01.5812890 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","SUCCESS","Desired Access: Query Value"
"10:45:01.5813705 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\TransparentEnabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:01.5814207 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers","SUCCESS",""
"10:45:01.5815155 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","NAME NOT FOUND","Desired Access: Query Value"
"10:45:01.5819584 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS",""
"10:45:01.5855555 a.m.","synpwrap.exe","1976","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Image Base: 0x10000000, Image Size: 0x7000"
"10:45:01.5857565 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.5858517 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.5858918 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.5859809 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.5860341 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.5860832 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.5902176 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\NTTAPKP.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.5904684 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.5905698 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.5906101 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.5908444 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.5908870 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.5909294 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.5913404 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\NTTAPKP.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.6271436 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:03:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 29,696, FileAttributes: A"
"10:45:01.6276465 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:03:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 29,696, FileAttributes: A"
"10:45:01.6281845 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.6333040 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.6334395 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.6338930 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS",""
"10:45:01.6362171 a.m.","synpwrap.exe","1976","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Image Base: 0x350000, Image Size: 0xb000"
"10:45:01.6366092 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.6372164 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.6376263 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.6380672 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.6386525 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.6411538 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.6412869 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.6416501 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS",""
"10:45:01.6451854 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Image Base: 0x781d0000, Image Size: 0x110000"
"10:45:01.6454339 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.6458737 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.6463575 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.6466807 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.6510978 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.6528963 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.6530287 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.6533886 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS",""
"10:45:01.6622344 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Image Base: 0x78130000, Image Size: 0x9b000"
"10:45:01.6643271 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","Image Base: 0x77c10000, Image Size: 0x58000"
"10:45:01.6670173 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\gdi32.dll","SUCCESS","Image Base: 0x77f10000, Image Size: 0x49000"
"10:45:01.6751750 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\user32.dll","SUCCESS","Image Base: 0x7e410000, Image Size: 0x91000"
"10:45:01.6775498 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","Image Base: 0x77f60000, Image Size: 0x76000"
"10:45:01.6795456 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\advapi32.dll","SUCCESS","Image Base: 0x77dd0000, Image Size: 0x9b000"
"10:45:01.6875429 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","Image Base: 0x77e70000, Image Size: 0x93000"
"10:45:01.6898229 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\secur32.dll","SUCCESS","Image Base: 0x77fe0000, Image Size: 0x11000"
"10:45:01.6912763 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:04:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 32,256, FileAttributes: A"
"10:45:01.6917759 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:04:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 32,256, FileAttributes: A"
"10:45:01.7033675 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.7038593 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.7039905 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.7044707 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS",""
"10:45:01.7147468 a.m.","synpwrap.exe","1976","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Image Base: 0x360000, Image Size: 0xc000"
"10:45:01.7150562 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.7151409 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.7151763 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.7152835 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.7153346 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.7153771 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.7205965 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.7210716 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.7493907 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.7498722 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.7566761 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.7570367 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.7571292 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.7575317 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.7579827 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.7583261 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.7713679 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","CreationTime: 11/24/2010 4:28:03 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 5/27/2010 7:27:14 a.m., ChangeTime: 1/17/2011 10:55:02 a.m., AllocationSize: 1,622,016, EndOfFile: 1,622,016, FileAttributes: A"
"10:45:01.7718507 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","CreationTime: 11/24/2010 4:28:03 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 5/27/2010 7:27:14 a.m., ChangeTime: 1/17/2011 10:55:02 a.m., AllocationSize: 1,622,016, EndOfFile: 1,622,016, FileAttributes: A"
"10:45:01.7724595 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.7796629 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.7798575 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.7803116 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS",""
"10:45:01.7824297 a.m.","synpwrap.exe","1976","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Image Base: 0x430000, Image Size: 0x1e2000"
"10:45:01.7846707 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.7847610 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.7847966 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.7848735 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.7849204 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.7849626 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.7853914 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.7858538 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.7980518 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\netapi32.dll","SUCCESS","Image Base: 0x5b860000, Image Size: 0x55000"
"10:45:01.7986398 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WSOCK32.dll","NAME NOT FOUND",""
"10:45:01.7991933 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\wsock32.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 24,576, EndOfFile: 22,528, FileAttributes: ANCI"
"10:45:01.8054834 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.8058874 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.8060186 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.8065435 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS",""
"10:45:01.8148177 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Image Base: 0x71ad0000, Image Size: 0x9000"
"10:45:01.8155768 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WS2_32.dll","NAME NOT FOUND",""
"10:45:01.8160273 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","CreationTime: 7/29/2010 9:11:47 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 86,016, EndOfFile: 82,432, FileAttributes: ANCI"
"10:45:01.8232733 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.8239679 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.8241002 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.8244674 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS",""
"10:45:01.8325872 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Image Base: 0x71ab0000, Image Size: 0x17000"
"10:45:01.8332997 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WS2HELP.dll","NAME NOT FOUND",""
"10:45:01.8337057 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\ws2help.dll","SUCCESS","CreationTime: 7/29/2010 9:11:47 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 19,968, FileAttributes: ANCI"
"10:45:01.8564523 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.8570447 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.8572004 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.8577352 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS",""
"10:45:01.8673144 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Image Base: 0x71aa0000, Image Size: 0x8000"
"10:45:01.8697059 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","Image Base: 0x763b0000, Image Size: 0x49000"
"10:45:01.8760847 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Image Base: 0x5d090000, Image Size: 0x9a000"
"10:45:01.8781248 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\shell32.dll","SUCCESS","Image Base: 0x7c9c0000, Image Size: 0x817000"
"10:45:01.8782916 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.8802446 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.8806909 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.8874632 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.8877799 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
"10:45:01.8878925 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:01.8879544 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
"10:45:01.8880568 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.8889227 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSVCR80.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.8890333 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager","SUCCESS","Desired Access: Query Value"
"10:45:01.8893180 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\SafeDllSearchMode","NAME NOT FOUND","Length: 16"
"10:45:01.8893801 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Control\Session Manager","SUCCESS",""
"10:45:01.8899006 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","CreationTime: 7/12/2009 1:12:06 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 7/12/2009 1:12:06 a.m., ChangeTime: 1/17/2011 11:37:20 a.m., AllocationSize: 634,880, EndOfFile: 632,656, FileAttributes: ANCI"
"10:45:01.8899650 a.m.","synpwrap.exe","1976","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.8948147 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS","SUCCESS","Filter: WINDOWS, 1: WINDOWS"
"10:45:01.8948924 a.m.","synpwrap.exe","1976","CloseFile","C:\","SUCCESS",""
"10:45:01.8952676 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9000761 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS","SUCCESS","Filter: WinSxS, 1: WinSxS"
"10:45:01.9002667 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS","SUCCESS",""
"10:45:01.9046577 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9050393 a.m.","synpwrap.exe","1976","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll","SUCCESS","Filter: MSVCR80.dll, 1: msvcr80.dll"
"10:45:01.9053161 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
"10:45:01.9113988 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\USER32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9118482 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
"10:45:01.9122653 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9178075 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.9178410 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","AllocationSize: 110,592, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.9179097 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.9182722 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
"10:45:01.9190697 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
"10:45:01.9225645 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9229677 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.9230011 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","AllocationSize: 110,592, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.9230693 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.9234322 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
"10:45:01.9269704 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
"10:45:01.9275610 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9295797 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.9297316 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.9305173 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
"10:45:01.9327771 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\imm32.dll","SUCCESS","Image Base: 0x76390000, Image Size: 0x1d000"
"10:45:01.9329768 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9335716 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
"10:45:01.9336314 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9336689 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9337035 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9337383 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Secur32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9337752 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9338096 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ADVAPI32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9338448 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9338895 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MFC80.DLL","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9339252 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TKDATA.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9340506 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tkmesg.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9340881 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NTTAPKP.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9341235 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NETAPI32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9341588 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9341936 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2_32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9342286 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WSOCK32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9342633 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\COMCTL32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9342983 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHELL32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9343329 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comdlg32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9343675 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lflxutil.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9348720 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
"10:45:01.9349119 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\Error Message Instrument","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9350068 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS","Desired Access: Read"
"10:45:01.9350988 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"
"10:45:01.9351502 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS",""
"10:45:01.9354787 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32","SUCCESS","Desired Access: Read"
"10:45:01.9355652 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32\synpwrap","NAME NOT FOUND","Length: 172"
"10:45:01.9356114 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32","SUCCESS",""
"10:45:01.9356366 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility","SUCCESS","Desired Access: Read"
"10:45:01.9357178 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility\synpwrap","NAME NOT FOUND","Length: 172"
"10:45:01.9357609 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility","SUCCESS",""
"10:45:01.9359064 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows","SUCCESS","Desired Access: Read"
"10:45:01.9360445 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:01.9380404 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows","SUCCESS",""
"10:45:01.9382005 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
"10:45:01.9382980 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:01.9383296 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSUserEnabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:01.9383782 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
"10:45:01.9384082 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SUCCESS","Desired Access: Read"
"10:45:01.9384888 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LeakTrack","NAME NOT FOUND","Length: 144"
"10:45:01.9385438 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SUCCESS",""
"10:45:01.9385674 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9386448 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9387172 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Performance","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:45:01.9389195 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9390061 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9390405 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.9392215 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.9392676 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.9393100 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.9396625 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.9435943 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9436938 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9437924 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.9438865 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.9439355 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.9439847 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.9443776 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.3.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.9444911 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9445873 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9446267 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.9447899 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.9448573 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.9465567 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.9468841 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.9470712 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9471677 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9472136 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.9473004 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.9473425 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.9473847 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.9474589 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:01.9475402 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:01.9475736 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:01.9496519 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:01.9496942 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:01.9497386 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:01.9500747 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.1000.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.9504415 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.1000.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:01.9726775 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:01.9731602 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:01.9735161 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:01.9738449 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9772613 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9776665 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.9777015 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","AllocationSize: 57,344, EndOfFile: 57,344, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:01.9777729 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.9781720 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
"10:45:01.9817205 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:01.9856569 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:01.9860465 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:01.9864805 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
"10:45:01.9887786 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Image Base: 0x5d360000, Image Size: 0xe000"
"10:45:02.0009364 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0014234 a.m.","synpwrap.exe","1976","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.0018210 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.0102322 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
"10:45:02.0114373 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.0140168 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
"10:45:02.0146982 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0173448 a.m.","synpwrap.exe","1976","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.0177843 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.0186412 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
"10:45:02.0191068 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.0195132 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
"10:45:02.0254430 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.0255295 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:02.0255652 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:02.0256423 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:02.0256883 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:02.0257307 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:02.0298211 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0302492 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
"10:45:02.0302832 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","AllocationSize: 618,496, EndOfFile: 617,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.0303522 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.0337759 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\COMCTL32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:02.0341978 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\COMCTL32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:02.0351338 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS",""
"10:45:02.0371441 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Read"
"10:45:02.0372611 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:02.0373354 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\SmoothScroll","NAME NOT FOUND","Length: 144"
"10:45:02.0377854 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:02.0388361 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:02.0392622 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\Setup","SUCCESS","Desired Access: Query Value"
"10:45:02.0393417 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.0393904 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:45:02.0394896 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.0395700 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:02.0396041 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:02.0396932 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:02.0397421 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:02.0397914 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:02.0402185 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0407081 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
"10:45:02.0407424 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","AllocationSize: 8,462,336, EndOfFile: 8,462,336, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.0408115 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.0418958 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\SHELL32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:02.0422900 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\SHELL32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:02.0711649 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\shell32.dll","SUCCESS",""
"10:45:02.0732024 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
"10:45:02.0735959 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
"10:45:02.0740461 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","CreationTime: 7/14/2010 7:48:47 p.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 7/29/2010 1:19:08 p.m., ChangeTime: 8/30/2010 4:30:43 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
"10:45:02.0743777 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0758761 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.0763112 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.0763461 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","AllocationSize: 1,056,768, EndOfFile: 1,054,208, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.0764172 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.0768039 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
"10:45:02.1008560 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1051256 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.1052661 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.1056295 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
"10:45:02.1077742 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Image Base: 0x773d0000, Image Size: 0x103000"
"10:45:02.1083626 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.1084680 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.1085691 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"10:45:02.1086097 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:02.1087038 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
"10:45:02.1180364 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:02.1180804 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:02.1183306 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 7/28/2010 4:37:36 p.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 7/28/2010 4:37:36 p.m., ChangeTime: 1/17/2011 11:37:15 a.m., AllocationSize: 4,096, EndOfFile: 749, FileAttributes: RHANCI"
"10:45:02.1185159 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1219273 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.1219611 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1220302 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.1222057 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
"10:45:02.1227720 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 7/28/2010 4:37:36 p.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 7/28/2010 4:37:36 p.m., ChangeTime: 1/17/2011 11:37:15 a.m., AllocationSize: 4,096, EndOfFile: 749, FileAttributes: RHANCI"
"10:45:02.1274599 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1276961 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
"10:45:02.1277294 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1277980 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.1279735 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
"10:45:02.1304102 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1331473 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
"10:45:02.1331638 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1333061 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.1335317 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1337522 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\WindowsShell.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
"10:45:02.1524495 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
"10:45:02.1552998 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Read"
"10:45:02.1554272 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"10:45:02.1555032 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Control Panel\Desktop\SmoothScroll","NAME NOT FOUND","Length: 144"
"10:45:02.1555563 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
"10:45:02.1556238 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\Advanced","SUCCESS","Desired Access: Read"
"10:45:02.1557597 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips","NAME NOT FOUND","Length: 144"
"10:45:02.1558246 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced","SUCCESS",""
"10:45:02.1558773 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU","SUCCESS",""
"10:45:02.1559344 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\LanguagePack","SUCCESS","Desired Access: Query Value"
"10:45:02.1560134 a.m.","synpwrap.exe","1976","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack","NO MORE ENTRIES","Index: 0, Length: 220"
"10:45:02.1560585 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack","SUCCESS",""
"10:45:02.1564698 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MFC80ENU.DLL","NAME NOT FOUND","Desired Access: Read"
"10:45:02.1588786 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1594009 a.m.","synpwrap.exe","1976","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.1598036 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1622356 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
"10:45:02.1628385 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.1636279 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
"10:45:02.1639898 a.m.","synpwrap.exe","1976","CreateFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1679877 a.m.","synpwrap.exe","1976","LockFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.1682384 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","AllocationSize: 4,096, EndOfFile: 1,589, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1685070 a.m.","synpwrap.exe","1976","ReadFile","C:\lsc_env\lsc_8_1.ini","SUCCESS","Offset: 0, Length: 1,589"
"10:45:02.1691286 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\lsc_env\lsc_8_1.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.1693846 a.m.","synpwrap.exe","1976","CloseFile","C:\lsc_env\lsc_8_1.ini","SUCCESS",""
"10:45:02.1720867 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1725932 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Filter: synver.ver, 1: synver.ver"
"10:45:02.1731220 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config","SUCCESS",""
"10:45:02.1759161 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1809975 a.m.","synpwrap.exe","1976","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.1814049 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","AllocationSize: 288, EndOfFile: 281, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1819899 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Offset: 0, Length: 281"
"10:45:02.1863355 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.1868106 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS",""
"10:45:02.1874222 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.1928329 a.m.","synpwrap.exe","1976","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
"10:45:02.1932392 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","AllocationSize: 288, EndOfFile: 281, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.1939108 a.m.","synpwrap.exe","1976","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS","Offset: 0, Length: 281"
"10:45:02.1967860 a.m.","synpwrap.exe","1976","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
"10:45:02.1974450 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\synver.ver","SUCCESS",""
"10:45:02.2028557 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 9/28/2010 6:58:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 49,152, EndOfFile: 49,152, FileAttributes: A"
"10:45:02.2032382 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\license\license.dat","PATH NOT FOUND",""
"10:45:02.2033762 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\config\license.dat","PATH NOT FOUND",""
"10:45:02.2034733 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\config\PDS_LIC.GEN","PATH NOT FOUND",""
"10:45:02.2036727 a.m.","synpwrap.exe","1976","QueryOpen","C:\flexlm\license.dat","PATH NOT FOUND",""
"10:45:02.2043521 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2047813 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2052140 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2055683 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2092900 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2104664 a.m.","synpwrap.exe","1976","QueryOpen","C:\work\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2115090 a.m.","synpwrap.exe","1976","QueryOpen","C:\cygwin\usr\local\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2141565 a.m.","synpwrap.exe","1976","QueryOpen","C:\cygwin\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2145352 a.m.","synpwrap.exe","1976","QueryOpen","C:\cygwin\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2150531 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2160892 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispLeverDSP\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2235069 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispFPGA\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2270627 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispFPGA\data\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2284933 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\active-hdl\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2306060 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\Xilinx\10.1\ISE\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2314143 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\Xilinx\10.1\ISE\lib\nt\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2315464 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\Xilinx\10.1\ISE\smartmodel\nt\installed_nt\lib\pcnt.lib\IBFS32.DLL","PATH NOT FOUND",""
"10:45:02.2326142 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\questasim_6.6b\win32\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2371053 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_0\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2397164 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_0\ispLeverDSP\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2414690 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_0\ispFPGA\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2478241 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_0\ispFPGA\data\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2493006 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_0\active-hdl\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2512129 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2517551 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2522994 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\wbem\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2541041 a.m.","synpwrap.exe","1976","QueryOpen","C:\MATLAB\R2010a\runtime\win32\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2570944 a.m.","synpwrap.exe","1976","QueryOpen","C:\MATLAB\R2010a\bin\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2573510 a.m.","synpwrap.exe","1976","QueryOpen","C:\Program Files\Windows Imaging\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2581155 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\questasim_6.6b\win32\IBFS32.DLL","NAME NOT FOUND",""
"10:45:02.2606850 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2607741 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_DIAGNOSTICS","NAME NOT FOUND","Length: 144"
"10:45:02.2608248 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2609010 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2609812 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_BATCH","NAME NOT FOUND","Length: 144"
"10:45:02.2610297 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2610707 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2640858 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_NO_CKOUT_INSTALL_LIC","NAME NOT FOUND","Length: 144"
"10:45:02.2641357 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2641795 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2642603 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_BORROW","NAME NOT FOUND","Length: 144"
"10:45:02.2643088 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2643635 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.2644430 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\SOFTWARE\FLEXlm License Manager\Borrow","SUCCESS","Desired Access: Query Value"
"10:45:02.2645229 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Software\FLEXlm License Manager\Borrow\LM_BORROW","NAME NOT FOUND","Length: 144"
"10:45:02.2645716 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Software\FLEXlm License Manager\Borrow","SUCCESS",""
"10:45:02.2647578 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2648398 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_LICENSE_FILE","NAME NOT FOUND","Length: 144"
"10:45:02.2675315 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2675950 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2676765 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
"10:45:02.2677067 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
"10:45:02.2677734 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2678285 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2679212 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_USE_FINDER","NAME NOT FOUND","Length: 144"
"10:45:02.2680239 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2683468 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2685173 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\1717@licwenz01","NO SUCH FILE","Filter: 1717@licwenz01"
"10:45:02.2715765 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1","SUCCESS",""
"10:45:02.2720396 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\license","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2742614 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\license\license.dat","NO SUCH FILE","Filter: license.dat"
"10:45:02.2745237 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\license","SUCCESS",""
"10:45:02.2750639 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2763760 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\1717@licwenz01","NO SUCH FILE","Filter: 1717@licwenz01"
"10:45:02.2765539 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1","SUCCESS",""
"10:45:02.2769512 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\license","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2772100 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\license\license.dat","NO SUCH FILE","Filter: license.dat"
"10:45:02.2774934 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\license","SUCCESS",""
"10:45:02.2798825 a.m.","synpwrap.exe","1976","CreateFile","C:\Tools\ispTOOLS8_1\license","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2801427 a.m.","synpwrap.exe","1976","QueryDirectory","C:\Tools\ispTOOLS8_1\license\license.dat.txt","NO SUCH FILE","Filter: license.dat.txt"
"10:45:02.2838691 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1\license","SUCCESS",""
"10:45:02.2840325 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2841158 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\L_BORROW_ERR","NAME NOT FOUND","Length: 144"
"10:45:02.2841653 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2842093 a.m.","synpwrap.exe","1976","RegOpenKey","HKCU\SOFTWARE\FLEXlm License Manager\Borrow","SUCCESS","Desired Access: Query Value"
"10:45:02.2842916 a.m.","synpwrap.exe","1976","RegQueryValue","HKCU\Software\FLEXlm License Manager\Borrow\borrow-d989d1c8-LSC_SYNPLIFYPRO1","NAME NOT FOUND","Length: 144"
"10:45:02.2843406 a.m.","synpwrap.exe","1976","RegCloseKey","HKCU\Software\FLEXlm License Manager\Borrow","SUCCESS",""
"10:45:02.2843992 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.2844935 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_DEBUG_HOSTID","NAME NOT FOUND","Length: 144"
"10:45:02.2846010 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.2868922 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\iphlpapi.dll","NAME NOT FOUND",""
"10:45:02.2873605 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","CreationTime: 7/29/2010 9:14:24 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:25 a.m., AllocationSize: 98,304, EndOfFile: 94,720, FileAttributes: ANCI"
"10:45:02.2877853 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.2908417 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.2909739 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.2913376 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS",""
"10:45:02.2966770 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Image Base: 0x76d60000, Image Size: 0x19000"
"10:45:02.2970084 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iphlpapi.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.3247408 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage","SUCCESS","Desired Access: Read"
"10:45:02.3248540 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.3249560 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces","SUCCESS","Desired Access: Read"
"10:45:02.3250582 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.3252397 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.3252781 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.3253278 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.3253626 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.3271989 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.3272292 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.3272578 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
"10:45:02.3534404 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.3535520 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.3535854 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
"10:45:02.3536202 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
"10:45:02.3536525 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.3536924 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.3537453 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.3538577 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.3540026 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.3540353 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
"10:45:02.3540705 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
"10:45:02.3541029 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.3541380 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.3541883 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.3543054 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.3544233 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3544602 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3545115 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpNameServer","NAME NOT FOUND","Length: 144"
"10:45:02.3545800 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.3546131 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.3547199 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3547567 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3551968 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3552327 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3552737 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3553066 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3579865 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.3580241 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\NodeType","NAME NOT FOUND","Length: 144"
"10:45:02.3580595 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpNodeType","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
"10:45:02.3580892 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\ScopeId","NAME NOT FOUND","Length: 144"
"10:45:02.3581179 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpScopeId","NAME NOT FOUND","Length: 144"
"10:45:02.3581469 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.3581774 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableProxy","NAME NOT FOUND","Length: 144"
"10:45:02.3582062 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableDNS","NAME NOT FOUND","Length: 144"
"10:45:02.3582442 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.3582746 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.3583050 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.3583340 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.3585617 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.3585913 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.3586192 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
"10:45:02.3975020 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.3976030 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.3976356 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
"10:45:02.3976690 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
"10:45:02.3977010 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.3977328 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.3977841 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.3978794 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.3979756 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.3980079 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
"10:45:02.3980423 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
"10:45:02.3980766 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.3981085 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.3981592 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.3982690 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.3983630 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3983950 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3984261 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpNameServer","NAME NOT FOUND","Length: 144"
"10:45:02.3984776 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.3985057 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.3985973 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3986292 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
"10:45:02.3986606 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3986956 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3987290 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.3987621 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
"10:45:02.4024420 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.4024737 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\NodeType","NAME NOT FOUND","Length: 144"
"10:45:02.4025048 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpNodeType","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
"10:45:02.4025343 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\ScopeId","NAME NOT FOUND","Length: 144"
"10:45:02.4025631 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpScopeId","NAME NOT FOUND","Length: 144"
"10:45:02.4025921 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.4026218 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableProxy","NAME NOT FOUND","Length: 144"
"10:45:02.4026529 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableDNS","NAME NOT FOUND","Length: 144"
"10:45:02.4028910 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.4029207 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.4029486 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
"10:45:02.4460287 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.4461615 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.4462239 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
"10:45:02.4462635 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
"10:45:02.4463009 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.4463380 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.4463998 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.4465303 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.4466273 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.4467129 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
"10:45:02.4467532 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
"10:45:02.4467908 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.4468416 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.4469228 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.4473086 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.4473433 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
"10:45:02.4473759 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
"10:45:02.5032655 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
"10:45:02.5034451 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5034785 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
"10:45:02.5035128 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
"10:45:02.5035449 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.5035769 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
"10:45:02.5036319 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
"10:45:02.5037443 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
"10:45:02.5038392 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5038715 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
"10:45:02.5039065 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
"10:45:02.5039387 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.5039704 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
"10:45:02.5040208 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
"10:45:02.5041654 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.5042420 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_NO_NETWORK","NAME NOT FOUND","Length: 144"
"10:45:02.5043461 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.5049232 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\icmp.Dll","NAME NOT FOUND",""
"10:45:02.5053837 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\icmp.dll","SUCCESS","CreationTime: 7/29/2010 9:14:33 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:39:42 a.m., ChangeTime: 1/17/2011 11:36:15 a.m., AllocationSize: 4,096, EndOfFile: 3,584, FileAttributes: ANCI"
"10:45:02.5088684 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\icmp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5093089 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5094410 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5098044 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\icmp.dll","SUCCESS",""
"10:45:02.5130307 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\icmp.dll","SUCCESS","Image Base: 0x74290000, Image Size: 0x4000"
"10:45:02.5135506 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.5136644 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
"10:45:02.5136996 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
"10:45:02.5137414 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.5138275 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
"10:45:02.5138861 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
"10:45:02.5139172 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000008","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:45:02.5139528 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1034"
"10:45:02.5139819 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries","SUCCESS","Type: REG_DWORD, Length: 4, Data: 17"
"10:45:02.5140073 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.5141288 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001","SUCCESS","Desired Access: Read"
"10:45:02.5142058 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5142376 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5142680 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5143189 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001","SUCCESS",""
"10:45:02.5143495 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002","SUCCESS","Desired Access: Read"
"10:45:02.5144260 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5144574 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5144878 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5145372 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002","SUCCESS",""
"10:45:02.5145673 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003","SUCCESS","Desired Access: Read"
"10:45:02.5146436 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5146751 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5147058 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5168481 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003","SUCCESS",""
"10:45:02.5170321 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004","SUCCESS","Desired Access: Read"
"10:45:02.5171166 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5171637 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5172004 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5172593 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004","SUCCESS",""
"10:45:02.5172955 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005","SUCCESS","Desired Access: Read"
"10:45:02.5173819 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5174134 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5174437 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5174928 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005","SUCCESS",""
"10:45:02.5175230 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006","SUCCESS","Desired Access: Read"
"10:45:02.5176002 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5176314 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5176618 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5177110 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006","SUCCESS",""
"10:45:02.5177411 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007","SUCCESS","Desired Access: Read"
"10:45:02.5178176 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5178488 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5178792 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5179134 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007","SUCCESS",""
"10:45:02.5180001 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008","SUCCESS","Desired Access: Read"
"10:45:02.5180784 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5181101 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5181407 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5181899 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008","SUCCESS",""
"10:45:02.5182199 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009","SUCCESS","Desired Access: Read"
"10:45:02.5182963 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5183278 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5183583 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5202874 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009","SUCCESS",""
"10:45:02.5203199 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010","SUCCESS","Desired Access: Read"
"10:45:02.5203988 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5204306 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5204637 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5205139 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010","SUCCESS",""
"10:45:02.5205443 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011","SUCCESS","Desired Access: Read"
"10:45:02.5206216 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5206531 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5206836 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5207327 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011","SUCCESS",""
"10:45:02.5207627 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012","SUCCESS","Desired Access: Read"
"10:45:02.5208391 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5209738 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5210338 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5210842 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012","SUCCESS",""
"10:45:02.5211151 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013","SUCCESS","Desired Access: Read"
"10:45:02.5211937 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5212252 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5212559 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5213048 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013","SUCCESS",""
"10:45:02.5213349 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014","SUCCESS","Desired Access: Read"
"10:45:02.5214117 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5214430 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5214738 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5215280 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014","SUCCESS",""
"10:45:02.5215631 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015","SUCCESS","Desired Access: Read"
"10:45:02.5216606 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5216921 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5217228 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5227373 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015","SUCCESS",""
"10:45:02.5227700 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016","SUCCESS","Desired Access: Read"
"10:45:02.5228984 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5229306 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5229612 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5230113 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016","SUCCESS",""
"10:45:02.5231309 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017","SUCCESS","Desired Access: Read"
"10:45:02.5232109 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5232425 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
"10:45:02.5233012 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"10:45:02.5233516 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017","SUCCESS",""
"10:45:02.5233893 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries","SUCCESS",""
"10:45:02.5234567 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.5235340 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 10"
"10:45:02.5235787 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 10"
"10:45:02.5236115 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\0000000A","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:45:02.5236467 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries","SUCCESS","Type: REG_DWORD, Length: 4, Data: 3"
"10:45:02.5236764 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.5237531 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001","SUCCESS","Desired Access: Read"
"10:45:02.5238348 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
"10:45:02.5238671 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
"10:45:02.5238988 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
"10:45:02.5239295 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
"10:45:02.5239604 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
"10:45:02.5239908 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
"10:45:02.5240216 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: 40 9D 05 22 9E 7E CF 11 AE 5A 00 AA 00 A7 11 2B"
"10:45:02.5240527 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\AddressFamily","NAME NOT FOUND","Length: 144"
"10:45:02.5240839 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 12"
"10:45:02.5241146 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5241453 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5241762 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5242252 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001","SUCCESS",""
"10:45:02.5242561 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002","SUCCESS","Desired Access: Read"
"10:45:02.5243336 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\LibraryPath","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\System32\winrnr.dll"
"10:45:02.5243653 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\LibraryPath","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\System32\winrnr.dll"
"10:45:02.5243965 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
"10:45:02.5244272 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
"10:45:02.5244581 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
"10:45:02.5244887 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
"10:45:02.5245198 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: EE 37 26 3B 80 E5 CF 11 A5 55 00 C0 4F D8 D4 AC"
"10:45:02.5245507 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\AddressFamily","NAME NOT FOUND","Length: 144"
"10:45:02.5245818 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 32"
"10:45:02.5246125 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5246433 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5246741 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5266247 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002","SUCCESS",""
"10:45:02.5266580 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003","SUCCESS","Desired Access: Read"
"10:45:02.5267663 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
"10:45:02.5267986 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
"10:45:02.5268303 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
"10:45:02.5268615 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
"10:45:02.5268924 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
"10:45:02.5269231 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
"10:45:02.5269542 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: 3A 24 42 66 A8 3B A6 4A BA A5 2E 0B D7 1F DD 83"
"10:45:02.5269853 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\AddressFamily","NAME NOT FOUND","Length: 144"
"10:45:02.5270190 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 15"
"10:45:02.5270500 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5270806 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5271113 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5271668 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003","SUCCESS",""
"10:45:02.5272146 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries","SUCCESS",""
"10:45:02.5272629 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
"10:45:02.5272925 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Winsock2\Parameters","SUCCESS","Desired Access: Query Value"
"10:45:02.5273835 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Ws2_32NumHandleBuckets","NAME NOT FOUND","Length: 144"
"10:45:02.5274304 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
"10:45:02.5340992 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.5345142 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5382432 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5382829 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","AllocationSize: 245,760, EndOfFile: 245,248, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.5383592 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5386967 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
"10:45:02.5393556 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.5399265 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5424253 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5425601 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5429277 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
"10:45:02.5486066 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Image Base: 0x71a50000, Image Size: 0x3f000"
"10:45:02.5488809 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mswsock.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5489341 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icmp.Dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5494851 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\DNSAPI.dll","NAME NOT FOUND",""
"10:45:02.5499230 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","CreationTime: 7/29/2010 9:14:57 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:00 a.m., AllocationSize: 151,552, EndOfFile: 147,968, FileAttributes: ANCI"
"10:45:02.5505729 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5536252 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5537569 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5541340 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS",""
"10:45:02.5595231 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Image Base: 0x76f20000, Image Size: 0x27000"
"10:45:02.5598318 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DNSAPI.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5598948 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5599658 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5600549 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5600931 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryAdapterName","NAME NOT FOUND","Length: 144"
"10:45:02.5601234 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableAdapterDomainName","NAME NOT FOUND","Length: 144"
"10:45:02.5601566 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseDomainNameDevolution","NAME NOT FOUND","Length: 144"
"10:45:02.5601845 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\UseDomainNameDevolution","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5602146 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144"
"10:45:02.5602425 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144"
"10:45:02.5602717 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144"
"10:45:02.5602996 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144"
"10:45:02.5603287 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AppendToMultiLabelName","NAME NOT FOUND","Length: 144"
"10:45:02.5603572 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenBadTlds","NAME NOT FOUND","Length: 144"
"10:45:02.5603851 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenUnreachableServers","NAME NOT FOUND","Length: 144"
"10:45:02.5604132 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\FilterClusterIp","NAME NOT FOUND","Length: 144"
"10:45:02.5604411 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\WaitForNameErrorOnAll","NAME NOT FOUND","Length: 144"
"10:45:02.5604693 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseEdns","NAME NOT FOUND","Length: 144"
"10:45:02.5604972 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryIpMatching","NAME NOT FOUND","Length: 144"
"10:45:02.5605252 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseHostsFile","NAME NOT FOUND","Length: 144"
"10:45:02.5605531 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationEnabled","NAME NOT FOUND","Length: 144"
"10:45:02.5605811 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableDynamicUpdate","NAME NOT FOUND","Length: 144"
"10:45:02.5606105 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterPrimaryName","NAME NOT FOUND","Length: 144"
"10:45:02.5606386 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterAdapterName","NAME NOT FOUND","Length: 144"
"10:45:02.5606666 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\EnableAdapterDomainNameRegistration","NAME NOT FOUND","Length: 144"
"10:45:02.5606959 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterReverseLookup","NAME NOT FOUND","Length: 144"
"10:45:02.5607239 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableReverseAddressRegistrations","NAME NOT FOUND","Length: 144"
"10:45:02.5607532 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterWanAdapters","NAME NOT FOUND","Length: 144"
"10:45:02.5607812 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableWanDynamicUpdate","NAME NOT FOUND","Length: 144"
"10:45:02.5608125 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationTtl","NAME NOT FOUND","Length: 144"
"10:45:02.5608405 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationTTL","NAME NOT FOUND","Length: 144"
"10:45:02.5608699 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationRefreshInterval","NAME NOT FOUND","Length: 144"
"10:45:02.5609354 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationRefreshInterval","NAME NOT FOUND","Length: 144"
"10:45:02.5609656 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationMaxAddressCount","NAME NOT FOUND","Length: 144"
"10:45:02.5609937 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\MaxNumberOfAddressesToRegister","NAME NOT FOUND","Length: 144"
"10:45:02.5610229 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144"
"10:45:02.5610509 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144"
"10:45:02.5610801 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateZoneExcludeFile","NAME NOT FOUND","Length: 144"
"10:45:02.5611083 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateTopLevelDomainZones","NAME NOT FOUND","Length: 144"
"10:45:02.5611364 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DnsTest","NAME NOT FOUND","Length: 144"
"10:45:02.5611713 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheSize","NAME NOT FOUND","Length: 144"
"10:45:02.5612000 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheTtl","NAME NOT FOUND","Length: 144"
"10:45:02.5612281 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxNegativeCacheTtl","NAME NOT FOUND","Length: 144"
"10:45:02.5612560 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AdapterTimeoutLimit","NAME NOT FOUND","Length: 144"
"10:45:02.5612840 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ServerPriorityTimeLimit","NAME NOT FOUND","Length: 144"
"10:45:02.5613121 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCachedSockets","NAME NOT FOUND","Length: 144"
"10:45:02.5613400 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastListenLevel","NAME NOT FOUND","Length: 144"
"10:45:02.5613680 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastSendLevel","NAME NOT FOUND","Length: 144"
"10:45:02.5613988 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\Setup","SUCCESS","Desired Access: Query Value"
"10:45:02.5614996 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.5615585 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:45:02.5616142 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.5616682 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.5617021 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Query Value"
"10:45:02.5618023 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQueryTimeouts","NAME NOT FOUND","Length: 144"
"10:45:02.5618327 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQuickQueryTimeouts","NAME NOT FOUND","Length: 144"
"10:45:02.5618568 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsMulticastQueryTimeouts","NAME NOT FOUND","Length: 144"
"10:45:02.5646943 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.5647864 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Rpc\PagedBuffers","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5650638 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Rpc","SUCCESS","Desired Access: Read"
"10:45:02.5651421 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\MaxRpcSize","NAME NOT FOUND","Length: 144"
"10:45:02.5651906 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Rpc","SUCCESS",""
"10:45:02.5652198 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe\RpcThreadPoolThrottle","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5653027 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\Rpc","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5656378 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: E7 A5 0D C5 6F 67 82 71 3C E2 AA 7E 11 9B 2F 5F"
"10:45:02.5660546 a.m.","synpwrap.exe","1976","SetEndOfFileInformationFile","C:\WINDOWS\system32\config\software.LOG","SUCCESS","EndOfFile: 12,288"
"10:45:02.5666816 a.m.","synpwrap.exe","1976","SetEndOfFileInformationFile","C:\WINDOWS\system32\config\software.LOG","SUCCESS","EndOfFile: 12,288"
"10:45:02.5709646 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5710566 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5711436 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5711798 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.5712127 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.5712622 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.5713093 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.5715138 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: BF DA B6 07 48 30 4C 4D 46 71 D3 29 DD 3C C9 0E"
"10:45:02.5720063 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: C9 88 72 FD 91 F7 50 B0 D1 C4 D6 78 DE B4 2A 24"
"10:45:02.5724459 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 5F 4D B3 B7 50 95 96 C5 1E 48 1C 1E 74 3E B8 39"
"10:45:02.5725986 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 56 6E B2 B8 80 C8 63 BA 9B 49 7D 85 25 76 13 11"
"10:45:02.5762913 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: DB 2D E6 F0 32 7F BA BE A8 85 D3 6B 21 A8 8F CD"
"10:45:02.5765047 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: F4 E2 CA C2 3B 05 02 5B B2 B3 0E 06 A7 70 17 89"
"10:45:02.5768078 a.m.","synpwrap.exe","1976","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 61 F9 72 11 03 C7 78 B3 20 A4 39 69 82 DD CD CD"
"10:45:02.5771450 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5772372 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.5773242 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5773583 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
"10:45:02.5773947 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.5774255 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.5774754 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.5794342 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.5795345 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Query Value"
"10:45:02.5796273 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsNbtLookupOrder","NAME NOT FOUND","Length: 144"
"10:45:02.5796777 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.5801707 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\winrnr.dll","SUCCESS","CreationTime: 7/29/2010 9:12:01 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:10 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: ANCI"
"10:45:02.5832519 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5855783 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5856123 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.5856811 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5860412 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
"10:45:02.5865970 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\winrnr.dll","SUCCESS","CreationTime: 7/29/2010 9:12:01 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 4/15/2008 1:42:10 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: ANCI"
"10:45:02.5885212 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.5916513 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.5917810 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.5921290 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
"10:45:02.5944196 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Image Base: 0x76fb0000, Image Size: 0x8000"
"10:45:02.5969297 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\wldap32.dll","SUCCESS","Image Base: 0x76f60000, Image Size: 0x2c000"
"10:45:02.5972057 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WLDAP32.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5972603 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\LDAP","SUCCESS","Desired Access: Read"
"10:45:02.5973533 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\ldap\LdapClientIntegrity","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"10:45:02.5974036 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\ldap","SUCCESS",""
"10:45:02.5974275 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winrnr.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.5979327 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.6015301 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6016508 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6017541 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6017999 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6018383 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6018942 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6020298 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6049674 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6050850 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6051877 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6052288 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
"10:45:02.6052724 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6053099 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6053703 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6054257 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6055101 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.6056076 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_PROJECT","NAME NOT FOUND","Length: 144"
"10:45:02.6056648 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.6202887 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6203859 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6205188 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6205582 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6205908 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6217668 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6218176 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6220427 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6221347 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6222214 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6222559 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
"10:45:02.6222921 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6223228 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6243316 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6244487 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6245123 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.6245969 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_NO_NETWORK","NAME NOT FOUND","Length: 144"
"10:45:02.6246462 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.6370022 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6373112 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6374011 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6374381 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6374690 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
"10:45:02.6375188 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6375657 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6562488 a.m.","synpwrap.exe","1976","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6563419 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6564287 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6564630 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
"10:45:02.6564988 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6565297 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
"10:45:02.6565794 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6566829 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
"10:45:02.6642589 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS","Desired Access: Maximum Allowed"
"10:45:02.6643719 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
"10:45:02.6643916 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
"10:45:02.6646984 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\AutodialDLL","NAME NOT FOUND","Length: 144"
"10:45:02.6647471 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
"10:45:02.6653009 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\rasadhlp.dll","NAME NOT FOUND",""
"10:45:02.6656943 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","CreationTime: 7/29/2010 9:13:00 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:04 a.m., ChangeTime: 1/17/2011 11:36:09 a.m., AllocationSize: 8,192, EndOfFile: 7,680, FileAttributes: ANCI"
"10:45:02.6661106 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.6674324 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.6676031 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.6680713 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS",""
"10:45:02.6720456 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Image Base: 0x76fc0000, Image Size: 0x6000"
"10:45:02.6722038 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rasadhlp.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6724286 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.6725132 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_NO_MT_CONNECT","NAME NOT FOUND","Length: 144"
"10:45:02.6725630 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.6726088 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6727008 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
"10:45:02.6727310 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
"10:45:02.6727792 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.6734189 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.6785637 a.m.","synpwrap.exe","1976","ReadFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Offset: 0, Length: 799"
"10:45:02.6797454 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS",""
"10:45:02.6821179 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.6826931 a.m.","synpwrap.exe","1976","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\hnetcfg.dll","NAME NOT FOUND",""
"10:45:02.6848065 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","CreationTime: 7/29/2010 9:14:34 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 344,064, EndOfFile: 344,064, FileAttributes: ANCI"
"10:45:02.6851388 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4701 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 147"
"10:45:02.6852874 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4701 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 41"
"10:45:02.6855249 a.m.","synpwrap.exe","1976","TCP Disconnect","pc770.GNET.global.vpn:4701 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 0"
"10:45:02.6857303 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.6862472 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.6863800 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.6880190 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS",""
"10:45:02.6901605 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Image Base: 0x662b0000, Image Size: 0x58000"
"10:45:02.6904741 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hnetcfg.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.6905987 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Rpc\SecurityService","SUCCESS","Desired Access: Read"
"10:45:02.6906929 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel","NAME NOT FOUND","Length: 144"
"10:45:02.6907522 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Rpc\SecurityService","SUCCESS",""
"10:45:02.6950841 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.6951773 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Winsock\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.6952885 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Winsock\Parameters\Transports","SUCCESS","Type: REG_MULTI_SZ, Length: 30, Data: Tcpip, NetBIOS"
"10:45:02.6953237 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Winsock\Parameters\Transports","SUCCESS","Type: REG_MULTI_SZ, Length: 30, Data: Tcpip, NetBIOS"
"10:45:02.6953830 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Winsock\Parameters","SUCCESS",""
"10:45:02.6954163 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS","Desired Access: Read"
"10:45:02.6955225 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","BUFFER OVERFLOW","Length: 144"
"10:45:02.6955583 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","BUFFER OVERFLOW","Length: 144"
"10:45:02.6955930 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","SUCCESS","Type: REG_BINARY, Length: 140, Data: 0B 00 00 00 03 00 00 00 02 00 00 00 01 00 00 00"
"10:45:02.6956403 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS",""
"10:45:02.6959225 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS","Desired Access: Read"
"10:45:02.6960202 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\MinSockaddrLength","SUCCESS","Type: REG_DWORD, Length: 4, Data: 16"
"10:45:02.6960556 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\MaxSockaddrLength","SUCCESS","Type: REG_DWORD, Length: 4, Data: 16"
"10:45:02.6960895 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\UseDelayedAcceptance","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:45:02.6961230 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\HelperDllName","SUCCESS","Type: REG_EXPAND_SZ, Length: 70, Data: %SystemRoot%\System32\wshtcpip.dll"
"10:45:02.6965104 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.6965538 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 39"
"10:45:02.6966989 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:45:01 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 20,480, EndOfFile: 19,456, FileAttributes: ANCI"
"10:45:02.6971396 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.6975290 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.6975688 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.6986044 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.6986445 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.7001434 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.7001772 a.m.","synpwrap.exe","1976","QueryStandardInformationFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 19,456, NumberOfLinks: 1, DeletePending: False, Directory: False"
"10:45:02.7002458 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.7003227 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 82"
"10:45:02.7003631 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.7006128 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
"10:45:02.7016876 a.m.","synpwrap.exe","1976","TCP Send","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.7017313 a.m.","synpwrap.exe","1976","TCP Receive","pc770.GNET.global.vpn:4702 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
"10:45:02.7041714 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 20,480, EndOfFile: 19,456, FileAttributes: ANCI"
"10:45:02.7045682 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.7050014 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
"10:45:02.7051321 a.m.","synpwrap.exe","1976","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
"10:45:02.7063821 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
"10:45:02.7087599 a.m.","synpwrap.exe","1976","Load Image","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Image Base: 0x71a90000, Image Size: 0x8000"
"10:45:02.7089028 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wshtcpip.dll","NAME NOT FOUND","Desired Access: Read"
"10:45:02.7089680 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS",""
"10:45:02.7115987 a.m.","synpwrap.exe","1976","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:45:02 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
"10:45:02.7117407 a.m.","synpwrap.exe","1976","Thread Create","","SUCCESS","Thread ID: 3928"
"10:45:02.7173771 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
"10:45:02.7174871 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
"10:45:02.7175225 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
"10:45:02.7178849 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.7185936 a.m.","synpwrap.exe","1976","CreateFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"10:45:02.7204802 a.m.","synpwrap.exe","1976","ReadFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Offset: 0, Length: 799"
"10:45:02.7211765 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS",""
"10:45:02.7327481 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.7329555 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_DIAGNOSTICS","NAME NOT FOUND","Length: 144"
"10:45:02.7331672 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.7332979 a.m.","synpwrap.exe","1976","Thread Create","","SUCCESS","Thread ID: 3856"
"10:45:02.7395838 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.7397099 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_LICENSE_FILE","NAME NOT FOUND","Length: 144"
"10:45:02.7397590 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.7397980 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
"10:45:02.7398763 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
"10:45:02.7399061 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
"10:45:02.7399560 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
"10:45:02.7425927 a.m.","synpwrap.exe","1976","Thread Exit","","SUCCESS","Thread ID: 3928, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:45:02.7435553 a.m.","synpwrap.exe","1976","Thread Exit","","SUCCESS","Thread ID: 3856, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:45:02.7436234 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\NetBT\Parameters","SUCCESS",""
"10:45:02.7436806 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\Interfaces","SUCCESS",""
"10:45:02.7437347 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
"10:45:02.7437884 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage","SUCCESS",""
"10:45:02.7455539 a.m.","synpwrap.exe","1976","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS","Desired Access: Read"
"10:45:02.7456468 a.m.","synpwrap.exe","1976","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"
"10:45:02.7456960 a.m.","synpwrap.exe","1976","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS",""
"10:45:02.7458524 a.m.","synpwrap.exe","1976","Thread Exit","","SUCCESS","Thread ID: 2264, User Time: 0.0000000, Kernel Time: 0.3750000"
"10:45:02.7463410 a.m.","synpwrap.exe","1976","Process Exit","","SUCCESS","Exit Status: 1, User Time: 0.0156250 seconds, Kernel Time: 0.3281250 seconds, Private Bytes: 2,846,720, Peak Private Bytes: 3,076,096, Working Set: 5,095,424, Peak Working Set: 7,327,744"
"10:45:02.7465598 a.m.","synpwrap.exe","1976","CloseFile","C:\Tools\ispTOOLS8_1","SUCCESS",""
"10:45:02.7470657 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
"10:45:02.7473799 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS",""
"10:45:02.7478759 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
"10:45:02.7482001 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS",""
"10:45:02.7484627 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
"10:45:02.7487717 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS",""
"10:45:02.7490933 a.m.","synpwrap.exe","1976","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""