API tools faq
paste
Advertisement
Guest User

Non-Working Log File

a guest
Jan 18th, 2011
154
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 191.67 KB | None | 0 0
raw download clone embed print report
  1. "Time of Day","Process Name","PID","Operation","Path","Result","Detail"
  2. "10:43:20.4401501 a.m.","synpwrap.exe","2736","Process Start","","SUCCESS","Parent PID: 2784"
  3. "10:43:20.4401555 a.m.","synpwrap.exe","2736","Thread Create","","SUCCESS","Thread ID: 2392"
  4. "10:43:20.5059835 a.m.","synpwrap.exe","2736","QueryNameInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Name: \Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe"
  5. "10:43:20.5079394 a.m.","synpwrap.exe","2736","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Image Base: 0x400000, Image Size: 0x26000"
  6. "10:43:20.5097277 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Image Base: 0x7c900000, Image Size: 0xb2000"
  7. "10:43:20.5097763 a.m.","synpwrap.exe","2736","QueryNameInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","Name: \Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe"
  8. "10:43:20.5101396 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: None, AllocationSize: n/a, OpenResult: Opened"
  9. "10:43:20.5231135 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","AllocationSize: 24,576, EndOfFile: 23,912, NumberOfLinks: 1, DeletePending: False, Directory: False"
  10. "10:43:20.5233529 a.m.","synpwrap.exe","2736","ReadFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS","Offset: 0, Length: 23,912"
  11. "10:43:20.5237904 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\Prefetch\SYNPWRAP.EXE-1B4666B7.pf","SUCCESS",""
  12. "10:43:20.5238991 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe","NAME NOT FOUND","Desired Access: Read"
  13. "10:43:20.5246484 a.m.","synpwrap.exe","2736","CreateFile","C:\cygwin\home\david","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  14. "10:43:20.5308434 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\kernel32.dll","SUCCESS","Image Base: 0x7c800000, Image Size: 0xf6000"
  15. "10:43:20.5314815 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
  16. "10:43:20.5315853 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  17. "10:43:20.5316455 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
  18. "10:43:20.5316929 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe","NAME NOT FOUND","Desired Access: Read"
  19. "10:43:20.5377489 a.m.","synpwrap.exe","2736","FileSystemControl","C:\cygwin\home\david","SUCCESS","Control: FSCTL_IS_VOLUME_MOUNTED"
  20. "10:43:20.5450670 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","CreationTime: 11/24/2010 4:28:08 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:05:00 a.m., ChangeTime: 1/17/2011 10:55:04 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: A"
  21. "10:43:20.5456223 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","CreationTime: 11/24/2010 4:28:08 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:05:00 a.m., ChangeTime: 1/17/2011 10:55:04 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: A"
  22. "10:43:20.5461251 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  23. "10:43:20.5501797 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  24. "10:43:20.5503657 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","SyncType: SyncTypeOther"
  25. "10:43:20.5504592 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\SafeBoot\Option","NAME NOT FOUND","Desired Access: Query Value, Set Value"
  26. "10:43:20.5505071 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","SUCCESS","Desired Access: Query Value"
  27. "10:43:20.5505867 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\TransparentEnabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  28. "10:43:20.5506384 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers","SUCCESS",""
  29. "10:43:20.5506822 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers","NAME NOT FOUND","Desired Access: Query Value"
  30. "10:43:20.5512418 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS",""
  31. "10:43:20.5533497 a.m.","synpwrap.exe","2736","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\nttapkp.dll","SUCCESS","Image Base: 0x10000000, Image Size: 0x7000"
  32. "10:43:20.5534449 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  33. "10:43:20.5535211 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  34. "10:43:20.5535603 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  35. "10:43:20.5536319 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  36. "10:43:20.5536788 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  37. "10:43:20.5537212 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  38. "10:43:20.5541453 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\NTTAPKP.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  39. "10:43:20.5543138 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  40. "10:43:20.5543877 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  41. "10:43:20.5544215 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  42. "10:43:20.5544910 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  43. "10:43:20.5545332 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  44. "10:43:20.5591888 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  45. "10:43:20.5596218 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\NTTAPKP.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  46. "10:43:20.5884899 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:03:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 29,696, FileAttributes: A"
  47. "10:43:20.5890035 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:03:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 29,696, FileAttributes: A"
  48. "10:43:20.5977893 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  49. "10:43:20.5983000 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  50. "10:43:20.5984322 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","SyncType: SyncTypeOther"
  51. "10:43:20.5989042 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS",""
  52. "10:43:20.6082667 a.m.","synpwrap.exe","2736","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkdata.dll","SUCCESS","Image Base: 0x350000, Image Size: 0xb000"
  53. "10:43:20.6084947 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  54. "10:43:20.6089541 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  55. "10:43:20.6093058 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:19 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  56. "10:43:20.6156765 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  57. "10:43:20.6163171 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  58. "10:43:20.6252187 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  59. "10:43:20.6253734 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","SyncType: SyncTypeOther"
  60. "10:43:20.6257726 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS",""
  61. "10:43:20.6277362 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll","SUCCESS","Image Base: 0x781d0000, Image Size: 0x110000"
  62. "10:43:20.6278231 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  63. "10:43:20.6351532 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  64. "10:43:20.6354574 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:19 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  65. "10:43:20.6357796 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  66. "10:43:20.6361991 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  67. "10:43:20.6446888 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  68. "10:43:20.6448210 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","SyncType: SyncTypeOther"
  69. "10:43:20.6451871 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS",""
  70. "10:43:20.6531699 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","Image Base: 0x78130000, Image Size: 0x9b000"
  71. "10:43:20.6550303 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\msvcrt.dll","SUCCESS","Image Base: 0x77c10000, Image Size: 0x58000"
  72. "10:43:20.6572479 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\gdi32.dll","SUCCESS","Image Base: 0x77f10000, Image Size: 0x49000"
  73. "10:43:20.6656947 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\user32.dll","SUCCESS","Image Base: 0x7e410000, Image Size: 0x91000"
  74. "10:43:20.6677053 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\shlwapi.dll","SUCCESS","Image Base: 0x77f60000, Image Size: 0x76000"
  75. "10:43:20.6698964 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\advapi32.dll","SUCCESS","Image Base: 0x77dd0000, Image Size: 0x9b000"
  76. "10:43:20.6840487 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\rpcrt4.dll","SUCCESS","Image Base: 0x77e70000, Image Size: 0x93000"
  77. "10:43:20.6861073 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\secur32.dll","SUCCESS","Image Base: 0x77fe0000, Image Size: 0x11000"
  78. "10:43:20.6871237 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:04:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 32,256, FileAttributes: A"
  79. "10:43:20.6876550 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 9/28/2010 6:04:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 32,768, EndOfFile: 32,256, FileAttributes: A"
  80. "10:43:20.7116250 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  81. "10:43:20.7121154 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  82. "10:43:20.7122468 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","SyncType: SyncTypeOther"
  83. "10:43:20.7127393 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS",""
  84. "10:43:20.7294311 a.m.","synpwrap.exe","2736","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Image Base: 0x360000, Image Size: 0xc000"
  85. "10:43:20.7297222 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  86. "10:43:20.7298183 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  87. "10:43:20.7298601 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  88. "10:43:20.7299444 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  89. "10:43:20.7316399 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  90. "10:43:20.7535550 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  91. "10:43:20.7716411 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  92. "10:43:20.7722029 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  93. "10:43:20.8002548 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  94. "10:43:20.8008076 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  95. "10:43:20.8093245 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:20 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  96. "10:43:20.8097011 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  97. "10:43:20.8098104 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  98. "10:43:20.8102922 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  99. "10:43:20.8106915 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:20 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  100. "10:43:20.8111056 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  101. "10:43:20.8227148 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","CreationTime: 11/24/2010 4:28:03 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 5/27/2010 7:27:14 a.m., ChangeTime: 1/17/2011 10:55:02 a.m., AllocationSize: 1,622,016, EndOfFile: 1,622,016, FileAttributes: A"
  102. "10:43:20.8233295 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","CreationTime: 11/24/2010 4:28:03 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 5/27/2010 7:27:14 a.m., ChangeTime: 1/17/2011 10:55:02 a.m., AllocationSize: 1,622,016, EndOfFile: 1,622,016, FileAttributes: A"
  103. "10:43:20.8238283 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  104. "10:43:20.8353885 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  105. "10:43:20.8355547 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","SyncType: SyncTypeOther"
  106. "10:43:20.8361566 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS",""
  107. "10:43:20.8386854 a.m.","synpwrap.exe","2736","Load Image","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll","SUCCESS","Image Base: 0x430000, Image Size: 0x1e2000"
  108. "10:43:20.8423441 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  109. "10:43:20.8424258 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  110. "10:43:20.8424613 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  111. "10:43:20.8425355 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  112. "10:43:20.8426479 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  113. "10:43:20.8426909 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  114. "10:43:20.8431257 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  115. "10:43:20.8435559 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\lflxutil.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  116. "10:43:20.8460338 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\netapi32.dll","SUCCESS","Image Base: 0x5b860000, Image Size: 0x55000"
  117. "10:43:20.8466016 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WSOCK32.dll","NAME NOT FOUND",""
  118. "10:43:20.8470548 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\wsock32.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 24,576, EndOfFile: 22,528, FileAttributes: ANCI"
  119. "10:43:20.8603372 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  120. "10:43:20.8607545 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  121. "10:43:20.8685289 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wsock32.dll","SUCCESS","SyncType: SyncTypeOther"
  122. "10:43:20.8689045 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\wsock32.dll","SUCCESS",""
  123. "10:43:20.8707660 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\wsock32.dll","SUCCESS","Image Base: 0x71ad0000, Image Size: 0x9000"
  124. "10:43:20.8822450 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WS2_32.dll","NAME NOT FOUND",""
  125. "10:43:20.8826272 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","CreationTime: 7/29/2010 9:11:47 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 86,016, EndOfFile: 82,432, FileAttributes: ANCI"
  126. "10:43:20.8830953 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  127. "10:43:20.8918805 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  128. "10:43:20.8920318 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","SyncType: SyncTypeOther"
  129. "10:43:20.8924565 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\ws2_32.dll","SUCCESS",""
  130. "10:43:20.8997331 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\ws2_32.dll","SUCCESS","Image Base: 0x71ab0000, Image Size: 0x17000"
  131. "10:43:20.9003837 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\WS2HELP.dll","NAME NOT FOUND",""
  132. "10:43:20.9008231 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\ws2help.dll","SUCCESS","CreationTime: 7/29/2010 9:11:47 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 19,968, FileAttributes: ANCI"
  133. "10:43:20.9013964 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  134. "10:43:20.9075233 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  135. "10:43:20.9076722 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\ws2help.dll","SUCCESS","SyncType: SyncTypeOther"
  136. "10:43:20.9149433 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\ws2help.dll","SUCCESS",""
  137. "10:43:20.9168387 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\ws2help.dll","SUCCESS","Image Base: 0x71aa0000, Image Size: 0x8000"
  138. "10:43:20.9288771 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\comdlg32.dll","SUCCESS","Image Base: 0x763b0000, Image Size: 0x49000"
  139. "10:43:20.9312552 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Image Base: 0x5d090000, Image Size: 0x9a000"
  140. "10:43:20.9332616 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\shell32.dll","SUCCESS","Image Base: 0x7c9c0000, Image Size: 0x817000"
  141. "10:43:20.9337371 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  142. "10:43:20.9429679 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  143. "10:43:20.9433212 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:20 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  144. "10:43:20.9436436 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  145. "10:43:20.9438611 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
  146. "10:43:20.9439553 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  147. "10:43:20.9440080 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
  148. "10:43:20.9443453 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll","NAME NOT FOUND","Desired Access: Read"
  149. "10:43:20.9447800 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSVCR80.dll","NAME NOT FOUND","Desired Access: Read"
  150. "10:43:20.9453019 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager","SUCCESS","Desired Access: Query Value"
  151. "10:43:20.9453931 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\SafeDllSearchMode","NAME NOT FOUND","Length: 16"
  152. "10:43:20.9454422 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Control\Session Manager","SUCCESS",""
  153. "10:43:20.9569076 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll","SUCCESS","CreationTime: 7/12/2009 1:12:06 a.m., LastAccessTime: 1/19/2011 10:43:20 a.m., LastWriteTime: 7/12/2009 1:12:06 a.m., ChangeTime: 1/17/2011 11:37:20 a.m., AllocationSize: 634,880, EndOfFile: 632,656, FileAttributes: ANCI"
  154. "10:43:20.9569731 a.m.","synpwrap.exe","2736","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  155. "10:43:20.9570490 a.m.","synpwrap.exe","2736","QueryDirectory","C:\WINDOWS","SUCCESS","Filter: WINDOWS, 1: WINDOWS"
  156. "10:43:20.9571426 a.m.","synpwrap.exe","2736","CloseFile","C:\","SUCCESS",""
  157. "10:43:20.9837647 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  158. "10:43:20.9843857 a.m.","synpwrap.exe","2736","QueryDirectory","C:\WINDOWS\WinSxS","SUCCESS","Filter: WinSxS, 1: WinSxS"
  159. "10:43:20.9845826 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS","SUCCESS",""
  160. "10:43:20.9923722 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  161. "10:43:20.9926296 a.m.","synpwrap.exe","2736","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll","SUCCESS","Filter: MSVCR80.dll, 1: msvcr80.dll"
  162. "10:43:20.9990805 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
  163. "10:43:20.9992504 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\USER32.dll","NAME NOT FOUND","Desired Access: Read"
  164. "10:43:20.9998466 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:43:19 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
  165. "10:43:21.0003077 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  166. "10:43:21.0063009 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  167. "10:43:21.0063853 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","AllocationSize: 110,592, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
  168. "10:43:21.0064542 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
  169. "10:43:21.0069525 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  170. "10:43:21.0158728 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
  171. "10:43:21.0162999 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  172. "10:43:21.0216332 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  173. "10:43:21.0216678 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","AllocationSize: 110,592, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
  174. "10:43:21.0217367 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
  175. "10:43:21.0221098 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  176. "10:43:21.0227324 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
  177. "10:43:21.0231342 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  178. "10:43:21.0333559 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  179. "10:43:21.0335017 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeOther"
  180. "10:43:21.0338536 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  181. "10:43:21.0432652 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\imm32.dll","SUCCESS","Image Base: 0x76390000, Image Size: 0x1d000"
  182. "10:43:21.0434087 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL","NAME NOT FOUND","Desired Access: Read"
  183. "10:43:21.0439229 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
  184. "10:43:21.0439750 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll","NAME NOT FOUND","Desired Access: Read"
  185. "10:43:21.0440075 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll","NAME NOT FOUND","Desired Access: Read"
  186. "10:43:21.0440375 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll","NAME NOT FOUND","Desired Access: Read"
  187. "10:43:21.0440676 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Secur32.dll","NAME NOT FOUND","Desired Access: Read"
  188. "10:43:21.0440971 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll","NAME NOT FOUND","Desired Access: Read"
  189. "10:43:21.0441267 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ADVAPI32.dll","NAME NOT FOUND","Desired Access: Read"
  190. "10:43:21.0441569 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll","NAME NOT FOUND","Desired Access: Read"
  191. "10:43:21.0441950 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MFC80.DLL","NAME NOT FOUND","Desired Access: Read"
  192. "10:43:21.0442279 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TKDATA.dll","NAME NOT FOUND","Desired Access: Read"
  193. "10:43:21.0442600 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tkmesg.dll","NAME NOT FOUND","Desired Access: Read"
  194. "10:43:21.0442901 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NTTAPKP.dll","NAME NOT FOUND","Desired Access: Read"
  195. "10:43:21.0443226 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NETAPI32.dll","NAME NOT FOUND","Desired Access: Read"
  196. "10:43:21.0443532 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2HELP.dll","NAME NOT FOUND","Desired Access: Read"
  197. "10:43:21.0443828 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WS2_32.dll","NAME NOT FOUND","Desired Access: Read"
  198. "10:43:21.0444693 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WSOCK32.dll","NAME NOT FOUND","Desired Access: Read"
  199. "10:43:21.0444994 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\COMCTL32.dll","NAME NOT FOUND","Desired Access: Read"
  200. "10:43:21.0445296 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHELL32.dll","NAME NOT FOUND","Desired Access: Read"
  201. "10:43:21.0445593 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comdlg32.dll","NAME NOT FOUND","Desired Access: Read"
  202. "10:43:21.0445891 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lflxutil.dll","NAME NOT FOUND","Desired Access: Read"
  203. "10:43:21.0450646 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 7/29/2010 9:14:31 a.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 110,592, EndOfFile: 110,080, FileAttributes: ANCI"
  204. "10:43:21.0451046 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\Error Message Instrument","NAME NOT FOUND","Desired Access: Read"
  205. "10:43:21.0451722 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS","Desired Access: Read"
  206. "10:43:21.0452600 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"
  207. "10:43:21.0453178 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS",""
  208. "10:43:21.0455846 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32","SUCCESS","Desired Access: Read"
  209. "10:43:21.0456767 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32\synpwrap","NAME NOT FOUND","Length: 172"
  210. "10:43:21.0549993 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32","SUCCESS",""
  211. "10:43:21.0550262 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility","SUCCESS","Desired Access: Read"
  212. "10:43:21.0551021 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility\synpwrap","NAME NOT FOUND","Length: 172"
  213. "10:43:21.0551846 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility","SUCCESS",""
  214. "10:43:21.0556047 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows","SUCCESS","Desired Access: Read"
  215. "10:43:21.0556813 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  216. "10:43:21.0557307 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows","SUCCESS",""
  217. "10:43:21.0558865 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS","Desired Access: Read"
  218. "10:43:21.0559727 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  219. "10:43:21.0560041 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Control\Terminal Server\TSUserEnabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  220. "10:43:21.0560525 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Control\Terminal Server","SUCCESS",""
  221. "10:43:21.0560820 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SUCCESS","Desired Access: Read"
  222. "10:43:21.0561753 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LeakTrack","NAME NOT FOUND","Length: 144"
  223. "10:43:21.0562286 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon","SUCCESS",""
  224. "10:43:21.0562523 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed"
  225. "10:43:21.0563220 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics","NAME NOT FOUND","Desired Access: Read"
  226. "10:43:21.0563931 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Performance","NAME NOT FOUND","Desired Access: Maximum Allowed"
  227. "10:43:21.0570336 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  228. "10:43:21.0571412 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  229. "10:43:21.0571761 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  230. "10:43:21.0572481 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  231. "10:43:21.0572945 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  232. "10:43:21.0627726 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  233. "10:43:21.0630955 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  234. "10:43:21.0632217 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  235. "10:43:21.0632967 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  236. "10:43:21.0633307 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  237. "10:43:21.0634007 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  238. "10:43:21.0634432 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  239. "10:43:21.0634851 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  240. "10:43:21.0638180 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.3.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  241. "10:43:21.0691068 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  242. "10:43:21.0691823 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  243. "10:43:21.0692162 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  244. "10:43:21.0692864 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  245. "10:43:21.0693351 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  246. "10:43:21.0693774 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  247. "10:43:21.0697221 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  248. "10:43:21.0700588 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  249. "10:43:21.0701331 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  250. "10:43:21.0701669 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  251. "10:43:21.0702453 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  252. "10:43:21.0702983 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  253. "10:43:21.0703459 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  254. "10:43:21.0704216 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  255. "10:43:21.0704948 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  256. "10:43:21.0705281 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  257. "10:43:21.0705971 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  258. "10:43:21.0706388 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  259. "10:43:21.0706805 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  260. "10:43:21.0709958 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.1000.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  261. "10:43:21.0713625 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL.1000.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  262. "10:43:21.1060011 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  263. "10:43:21.1060754 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\International","SUCCESS","Desired Access: Read"
  264. "10:43:21.1061629 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  265. "10:43:21.1061928 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\International\Locale","SUCCESS","Type: REG_SZ, Length: 18, Data: 00001409"
  266. "10:43:21.1062426 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\International","SUCCESS",""
  267. "10:43:21.1063294 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  268. "10:43:21.1067602 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  269. "10:43:21.1071351 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS","CreationTime: 10/18/2010 12:58:44 p.m., LastAccessTime: 1/19/2011 10:43:19 a.m., LastWriteTime: 10/18/2010 12:58:44 p.m., ChangeTime: 10/18/2010 12:58:44 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  270. "10:43:21.1074578 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  271. "10:43:21.1156000 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  272. "10:43:21.1161077 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  273. "10:43:21.1161428 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","AllocationSize: 57,344, EndOfFile: 57,344, NumberOfLinks: 1, DeletePending: False, Directory: False"
  274. "10:43:21.1162176 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
  275. "10:43:21.1248936 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
  276. "10:43:21.1254366 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  277. "10:43:21.1359871 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  278. "10:43:21.1361229 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","SyncType: SyncTypeOther"
  279. "10:43:21.1368809 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS",""
  280. "10:43:21.1389953 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll","SUCCESS","Image Base: 0x5d360000, Image Size: 0xe000"
  281. "10:43:21.1397628 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  282. "10:43:21.1402693 a.m.","synpwrap.exe","2736","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
  283. "10:43:21.1518027 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
  284. "10:43:21.1523152 a.m.","synpwrap.exe","2736","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
  285. "10:43:21.1528766 a.m.","synpwrap.exe","2736","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
  286. "10:43:21.1533124 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
  287. "10:43:21.1702290 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  288. "10:43:21.1707230 a.m.","synpwrap.exe","2736","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
  289. "10:43:21.1713004 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
  290. "10:43:21.1790206 a.m.","synpwrap.exe","2736","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
  291. "10:43:21.1795094 a.m.","synpwrap.exe","2736","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
  292. "10:43:21.1799163 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
  293. "10:43:21.1813116 a.m.","synpwrap.exe","2736","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\BIN\tkmesg.dll","SUCCESS","Offset: 27,648, Length: 512, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  294. "10:43:21.1865546 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  295. "10:43:21.1866360 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  296. "10:43:21.1866716 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  297. "10:43:21.1867440 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  298. "10:43:21.1867908 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  299. "10:43:21.1868331 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  300. "10:43:21.1872891 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  301. "10:43:21.1914100 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  302. "10:43:21.1914434 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","AllocationSize: 618,496, EndOfFile: 617,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
  303. "10:43:21.1915116 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
  304. "10:43:21.1921935 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\COMCTL32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  305. "10:43:21.1926476 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\COMCTL32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  306. "10:43:21.2001070 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS",""
  307. "10:43:21.2003724 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Read"
  308. "10:43:21.2004850 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  309. "10:43:21.2005548 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\SmoothScroll","NAME NOT FOUND","Length: 144"
  310. "10:43:21.2006063 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  311. "10:43:21.2061951 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  312. "10:43:21.2064879 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\Setup","SUCCESS","Desired Access: Query Value"
  313. "10:43:21.2066169 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  314. "10:43:21.2066658 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
  315. "10:43:21.2067276 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  316. "10:43:21.2068009 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  317. "10:43:21.2068351 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  318. "10:43:21.2069047 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  319. "10:43:21.2069470 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  320. "10:43:21.2069907 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  321. "10:43:21.2074644 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  322. "10:43:21.2157198 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  323. "10:43:21.2157541 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","AllocationSize: 8,462,336, EndOfFile: 8,462,336, NumberOfLinks: 1, DeletePending: False, Directory: False"
  324. "10:43:21.2158236 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
  325. "10:43:21.2162163 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\SHELL32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  326. "10:43:21.2167887 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\SHELL32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  327. "10:43:21.2536884 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\shell32.dll","SUCCESS",""
  328. "10:43:21.2539362 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys"
  329. "10:43:21.2544410 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe.Local","NAME NOT FOUND",""
  330. "10:43:21.2598402 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","CreationTime: 7/14/2010 7:48:47 p.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 7/29/2010 1:19:08 p.m., ChangeTime: 8/30/2010 4:30:43 p.m., AllocationSize: 0, EndOfFile: 0, FileAttributes: DNCI"
  331. "10:43:21.2601661 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  332. "10:43:21.2607816 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  333. "10:43:21.2666538 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  334. "10:43:21.2666893 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","AllocationSize: 1,056,768, EndOfFile: 1,054,208, NumberOfLinks: 1, DeletePending: False, Directory: False"
  335. "10:43:21.2667608 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
  336. "10:43:21.2673385 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
  337. "10:43:21.2745072 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  338. "10:43:21.2808109 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  339. "10:43:21.2809712 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
  340. "10:43:21.2813921 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
  341. "10:43:21.2836331 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Image Base: 0x773d0000, Image Size: 0x103000"
  342. "10:43:21.2840393 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll","NAME NOT FOUND","Desired Access: Read"
  343. "10:43:21.2842885 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  344. "10:43:21.2843780 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
  345. "10:43:21.2844186 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  346. "10:43:21.2845013 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\MultiUILanguageId","NAME NOT FOUND","Length: 256"
  347. "10:43:21.2939572 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  348. "10:43:21.2940010 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  349. "10:43:21.2942486 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 7/28/2010 4:37:36 p.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 7/28/2010 4:37:36 p.m., ChangeTime: 1/17/2011 11:37:15 a.m., AllocationSize: 4,096, EndOfFile: 749, FileAttributes: RHANCI"
  350. "10:43:21.2948416 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  351. "10:43:21.2997261 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  352. "10:43:21.2997595 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  353. "10:43:21.2998281 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  354. "10:43:21.3000032 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  355. "10:43:21.3003787 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 7/28/2010 4:37:36 p.m., LastAccessTime: 1/19/2011 10:43:21 a.m., LastWriteTime: 7/28/2010 4:37:36 p.m., ChangeTime: 1/17/2011 11:37:15 a.m., AllocationSize: 4,096, EndOfFile: 749, FileAttributes: RHANCI"
  356. "10:43:21.3067953 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  357. "10:43:21.3070176 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  358. "10:43:21.3070512 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  359. "10:43:21.3071740 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  360. "10:43:21.3073750 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  361. "10:43:21.3125825 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  362. "10:43:21.3168348 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  363. "10:43:21.3169468 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  364. "10:43:21.3170268 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  365. "10:43:21.3172738 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 4,096, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  366. "10:43:21.3175298 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\WindowsShell.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  367. "10:43:21.3360956 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  368. "10:43:21.3417635 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Read"
  369. "10:43:21.3418847 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\Control Panel\Desktop","SUCCESS","Desired Access: Read"
  370. "10:43:21.3419550 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Control Panel\Desktop\SmoothScroll","NAME NOT FOUND","Length: 144"
  371. "10:43:21.3463700 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Control Panel\Desktop","SUCCESS",""
  372. "10:43:21.3464540 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\Advanced","SUCCESS","Desired Access: Read"
  373. "10:43:21.3465333 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips","NAME NOT FOUND","Length: 144"
  374. "10:43:21.3465983 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced","SUCCESS",""
  375. "10:43:21.3466509 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU","SUCCESS",""
  376. "10:43:21.3467076 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\LanguagePack","SUCCESS","Desired Access: Query Value"
  377. "10:43:21.3467815 a.m.","synpwrap.exe","2736","RegEnumValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack","NO MORE ENTRIES","Index: 0, Length: 220"
  378. "10:43:21.3468268 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack","SUCCESS",""
  379. "10:43:21.3471070 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MFC80ENU.DLL","NAME NOT FOUND","Desired Access: Read"
  380. "10:43:21.3483183 a.m.","synpwrap.exe","2736","CreateFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  381. "10:43:21.3488062 a.m.","synpwrap.exe","2736","LockFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Exclusive: False, Offset: 0, Length: 4,294,967,295, Fail Immediately: False"
  382. "10:43:21.3492651 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","AllocationSize: 496, EndOfFile: 495, NumberOfLinks: 1, DeletePending: False, Directory: False"
  383. "10:43:21.3550155 a.m.","synpwrap.exe","2736","ReadFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS","Offset: 0, Length: 495"
  384. "10:43:21.3554950 a.m.","synpwrap.exe","2736","UnlockFileSingle","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","RANGE NOT LOCKED","Offset: 0, Length: 4,294,967,295"
  385. "10:43:21.3558957 a.m.","synpwrap.exe","2736","CloseFile","C:\Tools\ispTOOLS8_1\ispcpld\config\ispsys.ini","SUCCESS",""
  386. "10:43:21.3561776 a.m.","synpwrap.exe","2736","CreateFile","C:\cygwin\home\david\lsc_env\lsc_8_1.ini","PATH NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  387. "10:43:21.3623277 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\synpwrap.exe","SUCCESS","CreationTime: 11/24/2010 4:28:11 p.m., LastAccessTime: 1/19/2011 10:43:20 a.m., LastWriteTime: 9/28/2010 6:58:40 a.m., ChangeTime: 1/17/2011 10:55:06 a.m., AllocationSize: 49,152, EndOfFile: 49,152, FileAttributes: A"
  388. "10:43:21.3624741 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\license\license.dat","PATH NOT FOUND",""
  389. "10:43:21.3626306 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\config\license.dat","PATH NOT FOUND",""
  390. "10:43:21.3627314 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\ispcomp\config\PDS_LIC.GEN","PATH NOT FOUND",""
  391. "10:43:21.3629617 a.m.","synpwrap.exe","2736","QueryOpen","C:\flexlm\license.dat","PATH NOT FOUND",""
  392. "10:43:21.3636581 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
  393. "10:43:21.3640346 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\IBFS32.DLL","NAME NOT FOUND",""
  394. "10:43:21.3645089 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system\IBFS32.DLL","NAME NOT FOUND",""
  395. "10:43:21.3648216 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\IBFS32.DLL","NAME NOT FOUND",""
  396. "10:43:21.3700037 a.m.","synpwrap.exe","2736","QueryOpen","C:\cygwin\home\david\IBFS32.DLL","NAME NOT FOUND",""
  397. "10:43:21.3706501 a.m.","synpwrap.exe","2736","QueryOpen","C:\cygwin\usr\local\bin\IBFS32.DLL","NAME NOT FOUND",""
  398. "10:43:21.3710786 a.m.","synpwrap.exe","2736","QueryOpen","C:\cygwin\bin\IBFS32.DLL","NAME NOT FOUND",""
  399. "10:43:21.3716899 a.m.","synpwrap.exe","2736","QueryOpen","C:\cygwin\bin\IBFS32.DLL","NAME NOT FOUND",""
  400. "10:43:21.3722079 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
  401. "10:43:21.3783557 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispLeverDSP\IBFS32.DLL","NAME NOT FOUND",""
  402. "10:43:21.3873972 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispFPGA\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
  403. "10:43:21.3887596 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispFPGA\data\IBFS32.DLL","NAME NOT FOUND",""
  404. "10:43:21.4262053 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\active-hdl\bin\IBFS32.DLL","NAME NOT FOUND",""
  405. "10:43:21.4349910 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\Xilinx\10.1\ISE\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
  406. "10:43:21.4364014 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\Xilinx\10.1\ISE\lib\nt\IBFS32.DLL","NAME NOT FOUND",""
  407. "10:43:21.4365368 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\Xilinx\10.1\ISE\smartmodel\nt\installed_nt\lib\pcnt.lib\IBFS32.DLL","PATH NOT FOUND",""
  408. "10:43:21.5143930 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\questasim_6.6b\win32\IBFS32.DLL","NAME NOT FOUND",""
  409. "10:43:21.5383614 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_0\ispcpld\BIN\IBFS32.DLL","NAME NOT FOUND",""
  410. "10:43:21.5451461 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_0\ispLeverDSP\IBFS32.DLL","NAME NOT FOUND",""
  411. "10:43:21.5511951 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_0\ispFPGA\bin\nt\IBFS32.DLL","NAME NOT FOUND",""
  412. "10:43:21.5524621 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_0\ispFPGA\data\IBFS32.DLL","NAME NOT FOUND",""
  413. "10:43:21.5591256 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_0\active-hdl\bin\IBFS32.DLL","NAME NOT FOUND",""
  414. "10:43:21.5598608 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\IBFS32.DLL","NAME NOT FOUND",""
  415. "10:43:21.5667617 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\IBFS32.DLL","NAME NOT FOUND",""
  416. "10:43:21.5672428 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\wbem\IBFS32.DLL","NAME NOT FOUND",""
  417. "10:43:21.5683185 a.m.","synpwrap.exe","2736","QueryOpen","C:\MATLAB\R2010a\runtime\win32\IBFS32.DLL","NAME NOT FOUND",""
  418. "10:43:21.5773611 a.m.","synpwrap.exe","2736","QueryOpen","C:\MATLAB\R2010a\bin\IBFS32.DLL","NAME NOT FOUND",""
  419. "10:43:21.5775659 a.m.","synpwrap.exe","2736","QueryOpen","C:\Program Files\Windows Imaging\IBFS32.DLL","NAME NOT FOUND",""
  420. "10:43:21.5787228 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\questasim_6.6b\win32\IBFS32.DLL","NAME NOT FOUND",""
  421. "10:43:21.5874690 a.m.","synpwrap.exe","2736","QueryOpen","C:\cygwin\bin\IBFS32.DLL","NAME NOT FOUND",""
  422. "10:43:21.5875694 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  423. "10:43:21.5876546 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_DIAGNOSTICS","NAME NOT FOUND","Length: 144"
  424. "10:43:21.5877061 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  425. "10:43:21.5877760 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  426. "10:43:21.5878504 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_BATCH","NAME NOT FOUND","Length: 144"
  427. "10:43:21.5878991 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  428. "10:43:21.5879350 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  429. "10:43:21.5880069 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_NO_CKOUT_INSTALL_LIC","NAME NOT FOUND","Length: 144"
  430. "10:43:21.5880552 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  431. "10:43:21.5880965 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  432. "10:43:21.5881794 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_BORROW","NAME NOT FOUND","Length: 144"
  433. "10:43:21.5882314 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  434. "10:43:21.5882821 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU","SUCCESS","Desired Access: Maximum Allowed"
  435. "10:43:21.5883709 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\SOFTWARE\FLEXlm License Manager\Borrow","SUCCESS","Desired Access: Query Value"
  436. "10:43:21.5884472 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Software\FLEXlm License Manager\Borrow\LM_BORROW","NAME NOT FOUND","Length: 144"
  437. "10:43:21.5884961 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Software\FLEXlm License Manager\Borrow","SUCCESS",""
  438. "10:43:21.5886732 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  439. "10:43:21.5887475 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_LICENSE_FILE","NAME NOT FOUND","Length: 144"
  440. "10:43:21.5957258 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  441. "10:43:21.5957722 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  442. "10:43:21.5958488 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
  443. "10:43:21.5958794 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
  444. "10:43:21.5959306 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  445. "10:43:21.5959789 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  446. "10:43:21.5960530 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_USE_FINDER","NAME NOT FOUND","Length: 144"
  447. "10:43:21.5961019 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  448. "10:43:21.5964881 a.m.","synpwrap.exe","2736","CreateFile","C:\cygwin\home\david","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Open For Backup, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  449. "10:43:21.5968399 a.m.","synpwrap.exe","2736","QueryDirectory","C:\cygwin\home\david\1717@licwenz01","NO SUCH FILE","Filter: 1717@licwenz01"
  450. "10:43:21.6036670 a.m.","synpwrap.exe","2736","CloseFile","C:\cygwin\home\david","SUCCESS",""
  451. "10:43:21.6038791 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  452. "10:43:21.6040145 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\L_BORROW_ERR","NAME NOT FOUND","Length: 144"
  453. "10:43:21.6088149 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  454. "10:43:21.6089140 a.m.","synpwrap.exe","2736","RegOpenKey","HKCU\SOFTWARE\FLEXlm License Manager\Borrow","SUCCESS","Desired Access: Query Value"
  455. "10:43:21.6089938 a.m.","synpwrap.exe","2736","RegQueryValue","HKCU\Software\FLEXlm License Manager\Borrow\borrow-d989d1c8-LSC_SYNPLIFYPRO1","NAME NOT FOUND","Length: 144"
  456. "10:43:21.6090434 a.m.","synpwrap.exe","2736","RegCloseKey","HKCU\Software\FLEXlm License Manager\Borrow","SUCCESS",""
  457. "10:43:21.6090970 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  458. "10:43:21.6091710 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_DEBUG_HOSTID","NAME NOT FOUND","Length: 144"
  459. "10:43:21.6092201 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  460. "10:43:21.6102176 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\iphlpapi.dll","NAME NOT FOUND",""
  461. "10:43:21.6106726 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","CreationTime: 7/29/2010 9:14:24 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:25 a.m., AllocationSize: 98,304, EndOfFile: 94,720, FileAttributes: ANCI"
  462. "10:43:21.6167279 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  463. "10:43:21.6171329 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  464. "10:43:21.6172634 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","SyncType: SyncTypeOther"
  465. "10:43:21.6176035 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS",""
  466. "10:43:21.6254157 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\iphlpapi.dll","SUCCESS","Image Base: 0x76d60000, Image Size: 0x19000"
  467. "10:43:21.6257068 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iphlpapi.dll","NAME NOT FOUND","Desired Access: Read"
  468. "10:43:21.6869366 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage","SUCCESS","Desired Access: Read"
  469. "10:43:21.6870756 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  470. "10:43:21.6871582 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces","SUCCESS","Desired Access: Read"
  471. "10:43:21.6872408 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters","SUCCESS","Desired Access: Read"
  472. "10:43:21.6873677 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  473. "10:43:21.6874009 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  474. "10:43:21.6874436 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  475. "10:43:21.6874735 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  476. "10:43:21.6877249 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  477. "10:43:21.6877545 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  478. "10:43:21.6877826 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
  479. "10:43:21.7790562 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  480. "10:43:21.7791576 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  481. "10:43:21.7791909 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
  482. "10:43:21.7792253 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
  483. "10:43:21.7792575 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  484. "10:43:21.7792969 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  485. "10:43:21.7793493 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  486. "10:43:21.7794629 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  487. "10:43:21.7795526 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  488. "10:43:21.7795874 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
  489. "10:43:21.7796213 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
  490. "10:43:21.7796540 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  491. "10:43:21.7796858 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  492. "10:43:21.7797929 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  493. "10:43:21.7799046 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  494. "10:43:21.7799938 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  495. "10:43:21.7800260 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  496. "10:43:21.7800577 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpNameServer","NAME NOT FOUND","Length: 144"
  497. "10:43:21.7801096 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  498. "10:43:21.7801377 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  499. "10:43:21.7802242 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  500. "10:43:21.7802560 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  501. "10:43:21.7802873 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  502. "10:43:21.7803231 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  503. "10:43:21.7803635 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  504. "10:43:21.7803970 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  505. "10:43:21.7804494 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  506. "10:43:21.7804799 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\NodeType","NAME NOT FOUND","Length: 144"
  507. "10:43:21.7805108 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpNodeType","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
  508. "10:43:21.7805400 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\ScopeId","NAME NOT FOUND","Length: 144"
  509. "10:43:21.7805686 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpScopeId","NAME NOT FOUND","Length: 144"
  510. "10:43:21.7805976 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  511. "10:43:21.7806278 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableProxy","NAME NOT FOUND","Length: 144"
  512. "10:43:21.7806564 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableDNS","NAME NOT FOUND","Length: 144"
  513. "10:43:21.7806827 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  514. "10:43:21.7807557 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  515. "10:43:21.7807863 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  516. "10:43:21.7808154 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  517. "10:43:21.7810394 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  518. "10:43:21.7810687 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  519. "10:43:21.7810966 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
  520. "10:43:21.8587607 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  521. "10:43:21.8588745 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  522. "10:43:21.8589119 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
  523. "10:43:21.8589504 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
  524. "10:43:21.8589877 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  525. "10:43:21.8590278 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  526. "10:43:21.8624092 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  527. "10:43:21.8625252 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  528. "10:43:21.8626159 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  529. "10:43:21.8626484 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
  530. "10:43:21.8626820 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
  531. "10:43:21.8627105 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  532. "10:43:21.8627931 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  533. "10:43:21.8628442 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  534. "10:43:21.8629552 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  535. "10:43:21.8630469 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  536. "10:43:21.8630789 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  537. "10:43:21.8631100 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpNameServer","NAME NOT FOUND","Length: 144"
  538. "10:43:21.8631618 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  539. "10:43:21.8631898 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  540. "10:43:21.8632762 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  541. "10:43:21.8633079 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\NameServer","SUCCESS","Type: REG_SZ, Length: 2, Data: "
  542. "10:43:21.8633389 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  543. "10:43:21.8633740 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  544. "10:43:21.8634075 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  545. "10:43:21.8634404 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpNameServer","SUCCESS","Type: REG_SZ, Length: 46, Data: 10.16.0.191 10.10.0.54"
  546. "10:43:21.8634926 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  547. "10:43:21.8635227 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\NodeType","NAME NOT FOUND","Length: 144"
  548. "10:43:21.8635533 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpNodeType","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
  549. "10:43:21.8635827 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\ScopeId","NAME NOT FOUND","Length: 144"
  550. "10:43:21.8636115 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\DhcpScopeId","NAME NOT FOUND","Length: 144"
  551. "10:43:21.8636404 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  552. "10:43:21.8636708 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableProxy","NAME NOT FOUND","Length: 144"
  553. "10:43:21.8636870 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\EnableDNS","NAME NOT FOUND","Length: 144"
  554. "10:43:21.8639692 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  555. "10:43:21.8639988 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  556. "10:43:21.8640267 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
  557. "10:43:21.9351943 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  558. "10:43:21.9352947 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  559. "10:43:21.9353273 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
  560. "10:43:21.9353608 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
  561. "10:43:21.9353927 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  562. "10:43:21.9354248 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  563. "10:43:21.9354830 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  564. "10:43:21.9355957 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  565. "10:43:21.9356852 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  566. "10:43:21.9357178 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
  567. "10:43:21.9357520 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
  568. "10:43:21.9357843 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  569. "10:43:21.9358163 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  570. "10:43:21.9358666 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  571. "10:43:21.9361452 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  572. "10:43:21.9361748 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","BUFFER OVERFLOW","Length: 144"
  573. "10:43:21.9362026 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage\Bind","SUCCESS","Type: REG_MULTI_SZ, Length: 226, Data: \Device\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}, \Device\{93168A12-76B2-424F-8DFA-18BF89FC5C94}, \Device\NdisWanIp"
  574. "10:43:21.9801693 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS","Desired Access: Read"
  575. "10:43:21.9802911 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  576. "10:43:21.9803304 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210664"
  577. "10:43:21.9803714 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 2147483647"
  578. "10:43:21.9804097 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  579. "10:43:21.9804472 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 32, Data: 255.255.255.255"
  580. "10:43:21.9858476 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AB436F1-D3DF-40FF-B344-7C87040B4BEB}","SUCCESS",""
  581. "10:43:21.9859690 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS","Desired Access: Read"
  582. "10:43:21.9860625 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\EnableDHCP","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  583. "10:43:21.9860963 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseObtainedTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295210606"
  584. "10:43:21.9861322 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\LeaseTerminatesTime","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1295901806"
  585. "10:43:21.9861650 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  586. "10:43:21.9861974 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}\DhcpServer","SUCCESS","Type: REG_SZ, Length: 22, Data: 10.16.0.33"
  587. "10:43:21.9862496 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93168A12-76B2-424F-8DFA-18BF89FC5C94}","SUCCESS",""
  588. "10:43:21.9863818 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  589. "10:43:21.9864562 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_NO_NETWORK","NAME NOT FOUND","Length: 144"
  590. "10:43:21.9865039 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  591. "10:43:21.9870553 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\icmp.Dll","NAME NOT FOUND",""
  592. "10:43:21.9875107 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\icmp.dll","SUCCESS","CreationTime: 7/29/2010 9:14:33 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:39:42 a.m., ChangeTime: 1/17/2011 11:36:15 a.m., AllocationSize: 4,096, EndOfFile: 3,584, FileAttributes: ANCI"
  593. "10:43:21.9879370 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\icmp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  594. "10:43:21.9923727 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  595. "10:43:21.9925047 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\icmp.dll","SUCCESS","SyncType: SyncTypeOther"
  596. "10:43:21.9928838 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\icmp.dll","SUCCESS",""
  597. "10:43:22.0005052 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\icmp.dll","SUCCESS","Image Base: 0x74290000, Image Size: 0x4000"
  598. "10:43:22.0007171 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS","Desired Access: Maximum Allowed"
  599. "10:43:22.0008094 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
  600. "10:43:22.0008396 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
  601. "10:43:22.0008769 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9","SUCCESS","Desired Access: Maximum Allowed"
  602. "10:43:22.0009488 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
  603. "10:43:22.0010082 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 8"
  604. "10:43:22.0010406 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\00000008","NAME NOT FOUND","Desired Access: Maximum Allowed"
  605. "10:43:22.0010763 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1034"
  606. "10:43:22.0011057 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries","SUCCESS","Type: REG_DWORD, Length: 4, Data: 17"
  607. "10:43:22.0011353 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries","SUCCESS","Desired Access: Maximum Allowed"
  608. "10:43:22.0012076 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001","SUCCESS","Desired Access: Read"
  609. "10:43:22.0012786 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  610. "10:43:22.0013104 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  611. "10:43:22.0013410 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  612. "10:43:22.0013766 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001","SUCCESS",""
  613. "10:43:22.0112206 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002","SUCCESS","Desired Access: Read"
  614. "10:43:22.0112975 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  615. "10:43:22.0113293 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  616. "10:43:22.0113601 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  617. "10:43:22.0114108 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002","SUCCESS",""
  618. "10:43:22.0114412 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003","SUCCESS","Desired Access: Read"
  619. "10:43:22.0115132 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  620. "10:43:22.0115443 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  621. "10:43:22.0115746 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  622. "10:43:22.0116234 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003","SUCCESS",""
  623. "10:43:22.0116535 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004","SUCCESS","Desired Access: Read"
  624. "10:43:22.0117248 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  625. "10:43:22.0117562 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  626. "10:43:22.0117865 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  627. "10:43:22.0118354 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004","SUCCESS",""
  628. "10:43:22.0118655 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005","SUCCESS","Desired Access: Read"
  629. "10:43:22.0119366 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  630. "10:43:22.0119702 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  631. "10:43:22.0120004 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  632. "10:43:22.0120490 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005","SUCCESS",""
  633. "10:43:22.0120790 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006","SUCCESS","Desired Access: Read"
  634. "10:43:22.0121874 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  635. "10:43:22.0122194 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  636. "10:43:22.0122501 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  637. "10:43:22.0122995 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006","SUCCESS",""
  638. "10:43:22.0123300 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007","SUCCESS","Desired Access: Read"
  639. "10:43:22.0124020 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  640. "10:43:22.0124334 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  641. "10:43:22.0124639 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  642. "10:43:22.0182359 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007","SUCCESS",""
  643. "10:43:22.0182692 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008","SUCCESS","Desired Access: Read"
  644. "10:43:22.0183509 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  645. "10:43:22.0185515 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  646. "10:43:22.0185826 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  647. "10:43:22.0186332 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008","SUCCESS",""
  648. "10:43:22.0186647 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009","SUCCESS","Desired Access: Read"
  649. "10:43:22.0187387 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  650. "10:43:22.0187727 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  651. "10:43:22.0188029 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  652. "10:43:22.0188519 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009","SUCCESS",""
  653. "10:43:22.0188822 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010","SUCCESS","Desired Access: Read"
  654. "10:43:22.0189540 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  655. "10:43:22.0193829 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  656. "10:43:22.0194186 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  657. "10:43:22.0194769 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010","SUCCESS",""
  658. "10:43:22.0195133 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011","SUCCESS","Desired Access: Read"
  659. "10:43:22.0195988 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  660. "10:43:22.0196355 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  661. "10:43:22.0197051 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  662. "10:43:22.0201334 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011","SUCCESS",""
  663. "10:43:22.0203548 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012","SUCCESS","Desired Access: Read"
  664. "10:43:22.0204426 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  665. "10:43:22.0204795 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  666. "10:43:22.0205147 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  667. "10:43:22.0205724 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012","SUCCESS",""
  668. "10:43:22.0206079 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013","SUCCESS","Desired Access: Read"
  669. "10:43:22.0206911 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  670. "10:43:22.0207274 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  671. "10:43:22.0207629 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  672. "10:43:22.0275142 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013","SUCCESS",""
  673. "10:43:22.0275492 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014","SUCCESS","Desired Access: Read"
  674. "10:43:22.0276266 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  675. "10:43:22.0276587 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  676. "10:43:22.0276894 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  677. "10:43:22.0277397 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014","SUCCESS",""
  678. "10:43:22.0281059 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015","SUCCESS","Desired Access: Read"
  679. "10:43:22.0281813 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  680. "10:43:22.0282131 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  681. "10:43:22.0282434 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  682. "10:43:22.0282931 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015","SUCCESS",""
  683. "10:43:22.0283234 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016","SUCCESS","Desired Access: Read"
  684. "10:43:22.0283955 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  685. "10:43:22.0284269 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  686. "10:43:22.0284869 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  687. "10:43:22.0285375 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016","SUCCESS",""
  688. "10:43:22.0285680 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017","SUCCESS","Desired Access: Read"
  689. "10:43:22.0286487 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  690. "10:43:22.0286855 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","BUFFER OVERFLOW","Length: 144"
  691. "10:43:22.0287192 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\PackedCatalogItem","SUCCESS","Type: REG_BINARY, Length: 888, Data: 25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
  692. "10:43:22.0288127 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017","SUCCESS",""
  693. "10:43:22.0288599 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries","SUCCESS",""
  694. "10:43:22.0345784 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5","SUCCESS","Desired Access: Maximum Allowed"
  695. "10:43:22.0346978 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 10"
  696. "10:43:22.0347578 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num","SUCCESS","Type: REG_DWORD, Length: 4, Data: 10"
  697. "10:43:22.0347904 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\0000000A","NAME NOT FOUND","Desired Access: Maximum Allowed"
  698. "10:43:22.0348261 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries","SUCCESS","Type: REG_DWORD, Length: 4, Data: 3"
  699. "10:43:22.0348559 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries","SUCCESS","Desired Access: Maximum Allowed"
  700. "10:43:22.0349281 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001","SUCCESS","Desired Access: Read"
  701. "10:43:22.0349987 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
  702. "10:43:22.0350310 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
  703. "10:43:22.0350631 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
  704. "10:43:22.0350941 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
  705. "10:43:22.0351252 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
  706. "10:43:22.0351558 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\DisplayString","SUCCESS","Type: REG_SZ, Length: 12, Data: Tcpip"
  707. "10:43:22.0351907 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: 40 9D 05 22 9E 7E CF 11 AE 5A 00 AA 00 A7 11 2B"
  708. "10:43:22.0352218 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\AddressFamily","NAME NOT FOUND","Length: 144"
  709. "10:43:22.0352535 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 12"
  710. "10:43:22.0352846 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  711. "10:43:22.0353156 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  712. "10:43:22.0353465 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  713. "10:43:22.0353966 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001","SUCCESS",""
  714. "10:43:22.0354277 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002","SUCCESS","Desired Access: Read"
  715. "10:43:22.0354995 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\LibraryPath","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\System32\winrnr.dll"
  716. "10:43:22.0355313 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\LibraryPath","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\System32\winrnr.dll"
  717. "10:43:22.0355549 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
  718. "10:43:22.0356278 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
  719. "10:43:22.0356592 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
  720. "10:43:22.0356899 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\DisplayString","SUCCESS","Type: REG_SZ, Length: 10, Data: NTDS"
  721. "10:43:22.0357213 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: EE 37 26 3B 80 E5 CF 11 A5 55 00 C0 4F D8 D4 AC"
  722. "10:43:22.0357523 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\AddressFamily","NAME NOT FOUND","Length: 144"
  723. "10:43:22.0357840 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 32"
  724. "10:43:22.0358149 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  725. "10:43:22.0358613 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  726. "10:43:22.0358922 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  727. "10:43:22.0359419 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002","SUCCESS",""
  728. "10:43:22.0359733 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003","SUCCESS","Desired Access: Read"
  729. "10:43:22.0360534 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
  730. "10:43:22.0360852 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\LibraryPath","SUCCESS","Type: REG_SZ, Length: 68, Data: %SystemRoot%\System32\mswsock.dll"
  731. "10:43:22.0361166 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
  732. "10:43:22.0361479 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
  733. "10:43:22.0361788 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
  734. "10:43:22.0362096 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\DisplayString","SUCCESS","Type: REG_SZ, Length: 86, Data: Network Location Awareness (NLA) Namespace"
  735. "10:43:22.0362408 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\ProviderId","SUCCESS","Type: REG_BINARY, Length: 16, Data: 3A 24 42 66 A8 3B A6 4A BA A5 2E 0B D7 1F DD 83"
  736. "10:43:22.0362719 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\AddressFamily","NAME NOT FOUND","Length: 144"
  737. "10:43:22.0363034 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\SupportedNameSpace","SUCCESS","Type: REG_DWORD, Length: 4, Data: 15"
  738. "10:43:22.0363345 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\Enabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  739. "10:43:22.0363653 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\Version","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  740. "10:43:22.0363961 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\StoresServiceClassInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  741. "10:43:22.0364471 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003","SUCCESS",""
  742. "10:43:22.0364946 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries","SUCCESS",""
  743. "10:43:22.0428234 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
  744. "10:43:22.0428560 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Winsock2\Parameters","SUCCESS","Desired Access: Query Value"
  745. "10:43:22.0429454 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Ws2_32NumHandleBuckets","NAME NOT FOUND","Length: 144"
  746. "10:43:22.0429959 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
  747. "10:43:22.0435071 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  748. "10:43:22.0439285 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  749. "10:43:22.0495097 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  750. "10:43:22.0495438 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","AllocationSize: 245,760, EndOfFile: 245,248, NumberOfLinks: 1, DeletePending: False, Directory: False"
  751. "10:43:22.0496128 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
  752. "10:43:22.0499741 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
  753. "10:43:22.0565482 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  754. "10:43:22.0569857 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  755. "10:43:22.0574677 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  756. "10:43:22.0576009 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\mswsock.dll","SUCCESS","SyncType: SyncTypeOther"
  757. "10:43:22.0631170 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\mswsock.dll","SUCCESS",""
  758. "10:43:22.0651743 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\mswsock.dll","SUCCESS","Image Base: 0x71a50000, Image Size: 0x3f000"
  759. "10:43:22.0654610 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mswsock.dll","NAME NOT FOUND","Desired Access: Read"
  760. "10:43:22.0655142 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\icmp.Dll","NAME NOT FOUND","Desired Access: Read"
  761. "10:43:22.0661576 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\DNSAPI.dll","NAME NOT FOUND",""
  762. "10:43:22.0758556 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","CreationTime: 7/29/2010 9:14:57 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:00 a.m., AllocationSize: 151,552, EndOfFile: 147,968, FileAttributes: ANCI"
  763. "10:43:22.0762749 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  764. "10:43:22.0766762 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  765. "10:43:22.0768069 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","SyncType: SyncTypeOther"
  766. "10:43:22.0826412 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\dnsapi.dll","SUCCESS",""
  767. "10:43:22.0845824 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\dnsapi.dll","SUCCESS","Image Base: 0x76f20000, Image Size: 0x27000"
  768. "10:43:22.0848085 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DNSAPI.dll","NAME NOT FOUND","Desired Access: Read"
  769. "10:43:22.0848897 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  770. "10:43:22.0849922 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  771. "10:43:22.0850876 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  772. "10:43:22.0851315 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryAdapterName","NAME NOT FOUND","Length: 144"
  773. "10:43:22.0851662 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableAdapterDomainName","NAME NOT FOUND","Length: 144"
  774. "10:43:22.0852047 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseDomainNameDevolution","NAME NOT FOUND","Length: 144"
  775. "10:43:22.0852373 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\UseDomainNameDevolution","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  776. "10:43:22.0852725 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144"
  777. "10:43:22.0853051 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144"
  778. "10:43:22.0853392 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144"
  779. "10:43:22.0853575 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144"
  780. "10:43:22.0854402 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AppendToMultiLabelName","NAME NOT FOUND","Length: 144"
  781. "10:43:22.0854735 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenBadTlds","NAME NOT FOUND","Length: 144"
  782. "10:43:22.0855063 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenUnreachableServers","NAME NOT FOUND","Length: 144"
  783. "10:43:22.0855432 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\FilterClusterIp","NAME NOT FOUND","Length: 144"
  784. "10:43:22.0855761 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\WaitForNameErrorOnAll","NAME NOT FOUND","Length: 144"
  785. "10:43:22.0856092 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseEdns","NAME NOT FOUND","Length: 144"
  786. "10:43:22.0856420 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryIpMatching","NAME NOT FOUND","Length: 144"
  787. "10:43:22.0856748 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseHostsFile","NAME NOT FOUND","Length: 144"
  788. "10:43:22.0857076 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationEnabled","NAME NOT FOUND","Length: 144"
  789. "10:43:22.0857404 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableDynamicUpdate","NAME NOT FOUND","Length: 144"
  790. "10:43:22.0857749 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterPrimaryName","NAME NOT FOUND","Length: 144"
  791. "10:43:22.0858077 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterAdapterName","NAME NOT FOUND","Length: 144"
  792. "10:43:22.0858404 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\EnableAdapterDomainNameRegistration","NAME NOT FOUND","Length: 144"
  793. "10:43:22.0858747 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterReverseLookup","NAME NOT FOUND","Length: 144"
  794. "10:43:22.0859075 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableReverseAddressRegistrations","NAME NOT FOUND","Length: 144"
  795. "10:43:22.0859417 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterWanAdapters","NAME NOT FOUND","Length: 144"
  796. "10:43:22.0859745 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableWanDynamicUpdate","NAME NOT FOUND","Length: 144"
  797. "10:43:22.0860087 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationTtl","NAME NOT FOUND","Length: 144"
  798. "10:43:22.0860415 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationTTL","NAME NOT FOUND","Length: 144"
  799. "10:43:22.0860758 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationRefreshInterval","NAME NOT FOUND","Length: 144"
  800. "10:43:22.0861085 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationRefreshInterval","NAME NOT FOUND","Length: 144"
  801. "10:43:22.0861429 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationMaxAddressCount","NAME NOT FOUND","Length: 144"
  802. "10:43:22.0861757 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\MaxNumberOfAddressesToRegister","NAME NOT FOUND","Length: 144"
  803. "10:43:22.0862097 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144"
  804. "10:43:22.0862423 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144"
  805. "10:43:22.0862763 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateZoneExcludeFile","NAME NOT FOUND","Length: 144"
  806. "10:43:22.0863092 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateTopLevelDomainZones","NAME NOT FOUND","Length: 144"
  807. "10:43:22.0863340 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DnsTest","NAME NOT FOUND","Length: 144"
  808. "10:43:22.0864342 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheSize","NAME NOT FOUND","Length: 144"
  809. "10:43:22.0864671 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheTtl","NAME NOT FOUND","Length: 144"
  810. "10:43:22.0864997 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxNegativeCacheTtl","NAME NOT FOUND","Length: 144"
  811. "10:43:22.0865323 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AdapterTimeoutLimit","NAME NOT FOUND","Length: 144"
  812. "10:43:22.0865650 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ServerPriorityTimeLimit","NAME NOT FOUND","Length: 144"
  813. "10:43:22.0865978 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCachedSockets","NAME NOT FOUND","Length: 144"
  814. "10:43:22.0866304 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastListenLevel","NAME NOT FOUND","Length: 144"
  815. "10:43:22.0866630 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastSendLevel","NAME NOT FOUND","Length: 144"
  816. "10:43:22.0866947 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\Setup","SUCCESS","Desired Access: Query Value"
  817. "10:43:22.0867754 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  818. "10:43:22.0868315 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
  819. "10:43:22.0954138 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  820. "10:43:22.0954641 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  821. "10:43:22.0954942 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Query Value"
  822. "10:43:22.0955813 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQueryTimeouts","NAME NOT FOUND","Length: 144"
  823. "10:43:22.0956123 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQuickQueryTimeouts","NAME NOT FOUND","Length: 144"
  824. "10:43:22.0956417 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsMulticastQueryTimeouts","NAME NOT FOUND","Length: 144"
  825. "10:43:22.0956896 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  826. "10:43:22.0957867 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Rpc\PagedBuffers","NAME NOT FOUND","Desired Access: Read"
  827. "10:43:22.0958228 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Rpc","SUCCESS","Desired Access: Read"
  828. "10:43:22.0959015 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\MaxRpcSize","NAME NOT FOUND","Length: 144"
  829. "10:43:22.0959713 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Rpc","SUCCESS",""
  830. "10:43:22.0960008 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\synpwrap.exe\RpcThreadPoolThrottle","NAME NOT FOUND","Desired Access: Read"
  831. "10:43:22.0960981 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\Rpc","NAME NOT FOUND","Desired Access: Read"
  832. "10:43:22.0966573 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 49 B7 B6 7F A8 C3 7D 7C 79 93 2F FC 90 75 51 31"
  833. "10:43:22.0970758 a.m.","synpwrap.exe","2736","SetEndOfFileInformationFile","C:\WINDOWS\system32\config\software.LOG","SUCCESS","EndOfFile: 12,288"
  834. "10:43:22.1059513 a.m.","synpwrap.exe","2736","SetEndOfFileInformationFile","C:\WINDOWS\system32\config\software.LOG","SUCCESS","EndOfFile: 12,288"
  835. "10:43:22.1064990 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  836. "10:43:22.1065871 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  837. "10:43:22.1066700 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  838. "10:43:22.1067067 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  839. "10:43:22.1067383 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  840. "10:43:22.1067888 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  841. "10:43:22.1124268 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  842. "10:43:22.1126982 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 34 E1 F0 23 17 C9 82 C3 5A C6 11 23 30 D2 65 D5"
  843. "10:43:22.1131581 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: C9 33 89 7A 30 6A 1F DD 4E 1C AC 88 16 86 2D D5"
  844. "10:43:22.1135072 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: CB 0D AD 70 3B 10 BE 85 03 C0 9F FD 63 91 6B 4F"
  845. "10:43:22.1136766 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: EF 0C 60 10 1E 4A C9 8D E3 B7 21 CF F3 E2 EE 73"
  846. "10:43:22.1140501 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 93 10 4C 7A 5B 00 C3 4D BC 20 3E 39 A1 25 C8 BC"
  847. "10:43:22.1143398 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 3D A3 39 0A 44 34 A1 CA 47 69 6A 76 EC 2B DE 14"
  848. "10:43:22.1146388 a.m.","synpwrap.exe","2736","RegSetValue","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed","SUCCESS","Type: REG_BINARY, Length: 80, Data: 3B 02 61 7D 3D 5D 73 3F F0 F3 80 3A AB BB 25 DF"
  849. "10:43:22.1150775 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  850. "10:43:22.1151794 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  851. "10:43:22.1152676 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  852. "10:43:22.1153019 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
  853. "10:43:22.1153381 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  854. "10:43:22.1153692 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  855. "10:43:22.1154192 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  856. "10:43:22.1237753 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  857. "10:43:22.1238198 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Query Value"
  858. "10:43:22.1239072 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsNbtLookupOrder","NAME NOT FOUND","Length: 144"
  859. "10:43:22.1239585 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  860. "10:43:22.1244184 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\winrnr.dll","SUCCESS","CreationTime: 7/29/2010 9:12:01 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:10 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: ANCI"
  861. "10:43:22.1249260 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  862. "10:43:22.1282667 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  863. "10:43:22.1283009 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 1, DeletePending: False, Directory: False"
  864. "10:43:22.1284173 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
  865. "10:43:22.1287978 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
  866. "10:43:22.1294163 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\winrnr.dll","SUCCESS","CreationTime: 7/29/2010 9:12:01 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 4/15/2008 1:42:10 a.m., ChangeTime: 1/17/2011 11:36:11 a.m., AllocationSize: 20,480, EndOfFile: 16,896, FileAttributes: ANCI"
  867. "10:43:22.1298652 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  868. "10:43:22.1302655 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  869. "10:43:22.1304455 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\winrnr.dll","SUCCESS","SyncType: SyncTypeOther"
  870. "10:43:22.1367078 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\winrnr.dll","SUCCESS",""
  871. "10:43:22.1388265 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\winrnr.dll","SUCCESS","Image Base: 0x76fb0000, Image Size: 0x8000"
  872. "10:43:22.1408578 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\wldap32.dll","SUCCESS","Image Base: 0x76f60000, Image Size: 0x2c000"
  873. "10:43:22.1410192 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WLDAP32.dll","NAME NOT FOUND","Desired Access: Read"
  874. "10:43:22.1411418 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\LDAP","SUCCESS","Desired Access: Read"
  875. "10:43:22.1412290 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\ldap\LdapClientIntegrity","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
  876. "10:43:22.1414057 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\ldap","SUCCESS",""
  877. "10:43:22.1414305 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winrnr.dll","NAME NOT FOUND","Desired Access: Read"
  878. "10:43:22.1418985 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  879. "10:43:22.1421124 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  880. "10:43:22.1421993 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  881. "10:43:22.1422810 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  882. "10:43:22.1423174 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  883. "10:43:22.1423482 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  884. "10:43:22.1423975 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  885. "10:43:22.1424445 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  886. "10:43:22.1538314 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  887. "10:43:22.1539207 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  888. "10:43:22.1540103 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  889. "10:43:22.1540508 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
  890. "10:43:22.1540922 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  891. "10:43:22.1541237 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  892. "10:43:22.1541736 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  893. "10:43:22.1542208 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  894. "10:43:22.1542848 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  895. "10:43:22.1543623 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_PROJECT","NAME NOT FOUND","Length: 144"
  896. "10:43:22.1544114 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  897. "10:43:22.1595653 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  898. "10:43:22.1596472 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  899. "10:43:22.1597439 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  900. "10:43:22.1597882 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  901. "10:43:22.1598193 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  902. "10:43:22.1598687 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  903. "10:43:22.1648720 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  904. "10:43:22.1829625 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  905. "10:43:22.1830835 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  906. "10:43:22.1831673 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  907. "10:43:22.1832020 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
  908. "10:43:22.1832383 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  909. "10:43:22.1832694 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  910. "10:43:22.1833193 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  911. "10:43:22.1882177 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  912. "10:43:22.1882751 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  913. "10:43:22.1883522 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_NO_NETWORK","NAME NOT FOUND","Length: 144"
  914. "10:43:22.1917984 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  915. "10:43:22.1984244 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  916. "10:43:22.1985113 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  917. "10:43:22.1985927 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  918. "10:43:22.1986291 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  919. "10:43:22.1986967 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname","SUCCESS","Type: REG_SZ, Length: 12, Data: pc770"
  920. "10:43:22.2030517 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  921. "10:43:22.2031015 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  922. "10:43:22.2033393 a.m.","synpwrap.exe","2736","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  923. "10:43:22.2034464 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","SUCCESS","Desired Access: Read"
  924. "10:43:22.2036057 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","Desired Access: Read"
  925. "10:43:22.2036574 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","Desired Access: Query Value"
  926. "10:43:22.2037006 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  927. "10:43:22.2037372 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Domain","SUCCESS","Type: REG_SZ, Length: 32, Data: GNET.global.vpn"
  928. "10:43:22.2081335 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  929. "10:43:22.2081838 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters","SUCCESS",""
  930. "10:43:22.2162114 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS","Desired Access: Maximum Allowed"
  931. "10:43:22.2163568 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
  932. "10:43:22.2163875 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 2.0"
  933. "10:43:22.2164191 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\AutodialDLL","NAME NOT FOUND","Length: 144"
  934. "10:43:22.2204345 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","SUCCESS",""
  935. "10:43:22.2209801 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\rasadhlp.dll","NAME NOT FOUND",""
  936. "10:43:22.2214252 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","CreationTime: 7/29/2010 9:13:00 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:04 a.m., ChangeTime: 1/17/2011 11:36:09 a.m., AllocationSize: 8,192, EndOfFile: 7,680, FileAttributes: ANCI"
  937. "10:43:22.2218422 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  938. "10:43:22.2287491 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  939. "10:43:22.2289028 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","SyncType: SyncTypeOther"
  940. "10:43:22.2294108 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS",""
  941. "10:43:22.2316073 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\rasadhlp.dll","SUCCESS","Image Base: 0x76fc0000, Image Size: 0x6000"
  942. "10:43:22.2318017 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rasadhlp.dll","NAME NOT FOUND","Desired Access: Read"
  943. "10:43:22.2321013 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  944. "10:43:22.2321948 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_NO_MT_CONNECT","NAME NOT FOUND","Length: 144"
  945. "10:43:22.2322553 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  946. "10:43:22.2323090 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  947. "10:43:22.2324134 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
  948. "10:43:22.2326594 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
  949. "10:43:22.2327273 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  950. "10:43:22.2335252 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  951. "10:43:22.2389806 a.m.","synpwrap.exe","2736","ReadFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Offset: 0, Length: 799"
  952. "10:43:22.2396479 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS",""
  953. "10:43:22.2525966 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  954. "10:43:22.2531813 a.m.","synpwrap.exe","2736","QueryOpen","C:\Tools\ispTOOLS8_1\ispcpld\BIN\hnetcfg.dll","NAME NOT FOUND",""
  955. "10:43:22.2540054 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","CreationTime: 7/29/2010 9:14:34 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:41:56 a.m., ChangeTime: 1/17/2011 11:36:03 a.m., AllocationSize: 344,064, EndOfFile: 344,064, FileAttributes: ANCI"
  956. "10:43:22.2544347 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  957. "10:43:22.2607269 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  958. "10:43:22.2608678 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","SyncType: SyncTypeOther"
  959. "10:43:22.2615800 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS",""
  960. "10:43:22.2642928 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\hnetcfg.dll","SUCCESS","Image Base: 0x662b0000, Image Size: 0x58000"
  961. "10:43:22.2645364 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hnetcfg.dll","NAME NOT FOUND","Desired Access: Read"
  962. "10:43:22.2646559 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Rpc\SecurityService","SUCCESS","Desired Access: Read"
  963. "10:43:22.2647445 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel","NAME NOT FOUND","Length: 144"
  964. "10:43:22.2649998 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Rpc\SecurityService","SUCCESS",""
  965. "10:43:22.2655751 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  966. "10:43:22.2656550 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\Winsock\Parameters","SUCCESS","Desired Access: Read"
  967. "10:43:22.2657459 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Winsock\Parameters\Transports","SUCCESS","Type: REG_MULTI_SZ, Length: 30, Data: Tcpip, NetBIOS"
  968. "10:43:22.2657763 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Winsock\Parameters\Transports","SUCCESS","Type: REG_MULTI_SZ, Length: 30, Data: Tcpip, NetBIOS"
  969. "10:43:22.2658249 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Winsock\Parameters","SUCCESS",""
  970. "10:43:22.2658534 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS","Desired Access: Read"
  971. "10:43:22.2659389 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","BUFFER OVERFLOW","Length: 144"
  972. "10:43:22.2659702 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","BUFFER OVERFLOW","Length: 144"
  973. "10:43:22.2659992 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\Mapping","SUCCESS","Type: REG_BINARY, Length: 140, Data: 0B 00 00 00 03 00 00 00 02 00 00 00 01 00 00 00"
  974. "10:43:22.2660920 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS",""
  975. "10:43:22.2661212 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS","Desired Access: Read"
  976. "10:43:22.2662102 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\MinSockaddrLength","SUCCESS","Type: REG_DWORD, Length: 4, Data: 16"
  977. "10:43:22.2662451 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\MaxSockaddrLength","SUCCESS","Type: REG_DWORD, Length: 4, Data: 16"
  978. "10:43:22.2664431 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\UseDelayedAcceptance","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
  979. "10:43:22.2664731 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock\HelperDllName","SUCCESS","Type: REG_EXPAND_SZ, Length: 70, Data: %SystemRoot%\System32\wshtcpip.dll"
  980. "10:43:22.2669073 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:42:34 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 20,480, EndOfFile: 19,456, FileAttributes: ANCI"
  981. "10:43:22.2757563 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  982. "10:43:22.2762235 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  983. "10:43:22.2762574 a.m.","synpwrap.exe","2736","QueryStandardInformationFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","AllocationSize: 20,480, EndOfFile: 19,456, NumberOfLinks: 1, DeletePending: False, Directory: False"
  984. "10:43:22.2763263 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
  985. "10:43:22.2766875 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
  986. "10:43:22.2822889 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","CreationTime: 7/29/2010 9:11:46 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 4/15/2008 1:42:12 a.m., ChangeTime: 1/17/2011 11:36:14 a.m., AllocationSize: 20,480, EndOfFile: 19,456, FileAttributes: ANCI"
  987. "10:43:22.2841616 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4698 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 147"
  988. "10:43:22.2842136 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4698 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 41"
  989. "10:43:22.2843725 a.m.","synpwrap.exe","2736","TCP Disconnect","pc770.GNET.global.vpn:4698 -> licwenz01.gnet.global.vpn:1717","SUCCESS","Length: 0"
  990. "10:43:22.2877294 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  991. "10:43:22.2881332 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  992. "10:43:22.2882632 a.m.","synpwrap.exe","2736","CreateFileMapping","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","SyncType: SyncTypeOther"
  993. "10:43:22.2887680 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS",""
  994. "10:43:22.3009257 a.m.","synpwrap.exe","2736","Load Image","C:\WINDOWS\system32\wshtcpip.dll","SUCCESS","Image Base: 0x71a90000, Image Size: 0x8000"
  995. "10:43:22.3011031 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wshtcpip.dll","NAME NOT FOUND","Desired Access: Read"
  996. "10:43:22.3011688 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Winsock","SUCCESS",""
  997. "10:43:22.3112605 a.m.","synpwrap.exe","2736","QueryOpen","C:\WINDOWS\system32\mswsock.dll","SUCCESS","CreationTime: 7/29/2010 9:13:34 a.m., LastAccessTime: 1/19/2011 10:43:22 a.m., LastWriteTime: 6/21/2008 6:46:57 a.m., ChangeTime: 1/17/2011 11:36:17 a.m., AllocationSize: 245,760, EndOfFile: 245,248, FileAttributes: ANCI"
  998. "10:43:22.3114169 a.m.","synpwrap.exe","2736","Thread Create","","SUCCESS","Thread ID: 1776"
  999. "10:43:22.3191043 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1000. "10:43:22.3191553 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 39"
  1001. "10:43:22.3204295 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1002. "10:43:22.3204761 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1003. "10:43:22.3214661 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1004. "10:43:22.3215122 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1005. "10:43:22.3230491 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 82"
  1006. "10:43:22.3230967 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1007. "10:43:22.3243790 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1008. "10:43:22.3244298 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1009. "10:43:22.3269142 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS","Desired Access: Read"
  1010. "10:43:22.3270025 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
  1011. "10:43:22.3270330 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DataBasePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 68, Data: %SystemRoot%\System32\drivers\etc"
  1012. "10:43:22.3270902 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  1013. "10:43:22.3277686 a.m.","synpwrap.exe","2736","CreateFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1014. "10:43:22.3284293 a.m.","synpwrap.exe","2736","ReadFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS","Offset: 0, Length: 799"
  1015. "10:43:22.3326154 a.m.","synpwrap.exe","2736","TCP Send","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1016. "10:43:22.3326689 a.m.","synpwrap.exe","2736","TCP Receive","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 147"
  1017. "10:43:22.3328767 a.m.","synpwrap.exe","2736","TCP Disconnect","pc770.GNET.global.vpn:4699 -> licwenz01.gnet.global.vpn:1042","SUCCESS","Length: 0"
  1018. "10:43:22.3355609 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\system32\drivers\etc\protocol","SUCCESS",""
  1019. "10:43:22.3583261 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  1020. "10:43:22.3584224 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\FLEXLM_DIAGNOSTICS","NAME NOT FOUND","Length: 144"
  1021. "10:43:22.3584827 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  1022. "10:43:22.3586321 a.m.","synpwrap.exe","2736","Thread Create","","SUCCESS","Thread ID: 1884"
  1023. "10:43:22.3646427 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  1024. "10:43:22.3647917 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LM_LICENSE_FILE","NAME NOT FOUND","Length: 144"
  1025. "10:43:22.3648490 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  1026. "10:43:22.3648900 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS","Desired Access: Query Value"
  1027. "10:43:22.3649742 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
  1028. "10:43:22.3650091 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\FLEXlm License Manager\LATTICE_LICENSE_FILE","SUCCESS","Type: REG_SZ, Length: 30, Data: 1717@licwenz01"
  1029. "10:43:22.3650674 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\FLEXlm License Manager","SUCCESS",""
  1030. "10:43:22.3678239 a.m.","synpwrap.exe","2736","Thread Exit","","SUCCESS","Thread ID: 1776, User Time: 0.0000000, Kernel Time: 0.0000000"
  1031. "10:43:22.3701981 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\NetBT\Parameters","SUCCESS",""
  1032. "10:43:22.3702542 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\NetBT\Parameters\Interfaces","SUCCESS",""
  1033. "10:43:22.3703085 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","SUCCESS",""
  1034. "10:43:22.3703625 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\System\CurrentControlSet\Services\Tcpip\Linkage","SUCCESS",""
  1035. "10:43:22.3719378 a.m.","synpwrap.exe","2736","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS","Desired Access: Read"
  1036. "10:43:22.3720302 a.m.","synpwrap.exe","2736","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20"
  1037. "10:43:22.3720873 a.m.","synpwrap.exe","2736","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize","SUCCESS",""
  1038. "10:43:22.3722852 a.m.","synpwrap.exe","2736","Thread Exit","","SUCCESS","Thread ID: 2392, User Time: 0.0000000, Kernel Time: 0.1562500"
  1039. "10:43:22.3725813 a.m.","synpwrap.exe","2736","Thread Exit","","SUCCESS","Thread ID: 1884, User Time: 0.0000000, Kernel Time: 0.0000000"
  1040. "10:43:22.3731139 a.m.","synpwrap.exe","2736","Process Exit","","SUCCESS","Exit Status: 1, User Time: 0.0156250 seconds, Kernel Time: 0.1562500 seconds, Private Bytes: 2,842,624, Peak Private Bytes: 3,047,424, Working Set: 5,095,424, Peak Working Set: 7,274,496"
  1041. "10:43:22.3736418 a.m.","synpwrap.exe","2736","CloseFile","C:\cygwin\home\david","SUCCESS",""
  1042. "10:43:22.3741203 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
  1043. "10:43:22.3748332 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c","SUCCESS",""
  1044. "10:43:22.3752069 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
  1045. "10:43:22.3756348 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS",""
  1046. "10:43:22.3759898 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
  1047. "10:43:22.3763478 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e","SUCCESS",""
  1048. "10:43:22.3767898 a.m.","synpwrap.exe","2736","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989","SUCCESS",""
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!