10:17:34.2681625 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2682250 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2684594 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2685104 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2686637 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2687167 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2688673 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2689203 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2820170 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2820663 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2823785 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2824202 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2844146 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2844497 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2846639 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2846924 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2852578 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2853115 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:34.2855012 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:34.2855525 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:41.2209638 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:41.2210247 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:41.2212157 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:41.2212640 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:41.2214319 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:41.2214809 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:42.8555202 vb6.exe 2796 CreateFile C:\Program Files (x86)\Microsoft Visual Studio\VB98 SUCCESS Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened 10:17:42.8556298 vb6.exe 2796 RegOpenKey HKCU\Software\Classes SUCCESS Desired Access: Maximum Allowed, Granted Access: All Access 10:17:42.8556676 vb6.exe 2796 RegSetInfoKey HKCU\Software\Classes SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:17:42.8556911 vb6.exe 2796 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 10:17:42.8557129 vb6.exe 2796 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 10:17:42.8557325 vb6.exe 2796 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 10:17:42.8557566 vb6.exe 2796 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{7A0CBB99-5989-4F7D-ABCE-68624256B5AD} NAME NOT FOUND Desired Access: Read 10:17:42.8557871 vb6.exe 2796 RegOpenKey HKCR\Wow6432Node\CLSID\{7A0CBB99-5989-4F7D-ABCE-68624256B5AD} NAME NOT FOUND Desired Access: Read 10:17:42.8558271 vb6.exe 2796 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 10:17:42.8558467 vb6.exe 2796 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 10:17:42.8558639 vb6.exe 2796 RegOpenKey HKCU\Software\Classes\CLSID\{7A0CBB99-5989-4F7D-ABCE-68624256B5AD} NAME NOT FOUND Desired Access: Read 10:17:42.8558837 vb6.exe 2796 RegOpenKey HKCR\CLSID\{7A0CBB99-5989-4F7D-ABCE-68624256B5AD} NAME NOT FOUND Desired Access: Read 10:17:42.8559145 vb6.exe 2796 RegCloseKey HKCU\Software\Classes SUCCESS 10:17:42.8561506 vb6.exe 2796 CreateFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 10:17:42.8563856 vb6.exe 2796 QueryBasicInformationFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS CreationTime: 08-Jul-2014 15:06:19, LastAccessTime: 08-Jul-2014 15:06:19, LastWriteTime: 05-Jul-2014 20:57:22, ChangeTime: 08-Jul-2014 15:06:19, FileAttributes: A 10:17:42.8564068 vb6.exe 2796 CloseFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS 10:17:42.8565608 vb6.exe 2796 CreateFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened 10:17:42.8566671 vb6.exe 2796 CreateFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Complete If Oplocked, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened 10:17:42.8567137 vb6.exe 2796 QueryFileInternalInformationFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS IndexNumber: 0x5f000000039400 10:17:42.8567343 vb6.exe 2796 CloseFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS 10:17:42.8732834 vb6.exe 2796 CreateFileMapping C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS SyncType: SyncTypeOther 10:17:42.8733526 vb6.exe 2796 CreateFileMapping C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX FILE LOCKED WITH ONLY READERS SyncType: SyncTypeCreateSection, PageProtection: 10:17:42.8733701 vb6.exe 2796 QueryStandardInformationFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS AllocationSize: 3,710,976, EndOfFile: 3,710,976, NumberOfLinks: 1, DeletePending: False, Directory: False 10:17:42.8734797 vb6.exe 2796 CreateFileMapping C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS SyncType: SyncTypeOther 10:17:42.8737598 vb6.exe 2796 Load Image C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Image Base: 0x11000000, Image Size: 0x3ac000 10:17:42.8738111 vb6.exe 2796 CloseFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS 10:17:42.8738627 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 3,006,464, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8743292 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 2,969,600, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8750668 vb6.exe 2796 RegQueryValue HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\VBCCR10.OCX NAME NOT FOUND Length: 1,024 10:17:42.8751241 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 614,400, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8805407 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 225,280, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8812359 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 299,008, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8815965 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 3,002,368, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8819597 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 192,512, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8823215 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 131,072, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8826907 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 262,144, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8830750 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 163,840, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8835097 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 331,776, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8838967 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 258,048, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8842589 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 364,544, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8845933 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 397,312, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8849591 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:42.8849959 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\VBA\Monitors NAME NOT FOUND Desired Access: Maximum Allowed 10:17:42.8851280 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 2,846,720, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8854458 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 741,376, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8896097 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 708,608, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8904075 vb6.exe 2796 RegOpenKey HKLM\System\CurrentControlSet\Control\Nls\CustomLocale REPARSE Desired Access: Read 10:17:42.8904430 vb6.exe 2796 RegOpenKey HKLM\System\CurrentControlSet\Control\Nls\CustomLocale SUCCESS Desired Access: Read 10:17:42.8904847 vb6.exe 2796 RegSetInfoKey HKLM\System\CurrentControlSet\Control\Nls\CustomLocale SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:17:42.8905022 vb6.exe 2796 RegQueryValue HKLM\System\CurrentControlSet\Control\Nls\CustomLocale\de-DE NAME NOT FOUND Length: 532 10:17:42.8905224 vb6.exe 2796 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\CustomLocale SUCCESS 10:17:42.8905459 vb6.exe 2796 RegOpenKey HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale REPARSE Desired Access: Read 10:17:42.8905661 vb6.exe 2796 RegOpenKey HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale SUCCESS Desired Access: Read 10:17:42.8905880 vb6.exe 2796 RegSetInfoKey HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 10:17:42.8906022 vb6.exe 2796 RegQueryValue HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale\de-DE NAME NOT FOUND Length: 532 10:17:42.8906204 vb6.exe 2796 RegCloseKey HKLM\System\CurrentControlSet\Control\Nls\ExtendedLocale SUCCESS 10:17:42.8906846 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 536,576, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8917990 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 581,632, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8961698 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 569,344, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8964144 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 503,808, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8966720 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 471,040, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.8975675 vb6.exe 2796 ReadFile C:\Users\Developer-02\Downloads\VBCCR10.oca SUCCESS Offset: 659,456, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.9125729 vb6.exe 2796 ReadFile C:\Users\Developer-02\Downloads\VBCCR10.oca SUCCESS Offset: 233,472, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.9130933 vb6.exe 2796 ReadFile C:\Users\Developer-02\Downloads\VBCCR10.oca SUCCESS Offset: 200,704, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.9144311 vb6.exe 2796 ReadFile C:\Users\Developer-02\Downloads\VBCCR10.oca SUCCESS Offset: 745,472, Length: 18,432, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.9223208 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 438,272, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:42.9229489 vb6.exe 2796 ReadFile C:\Program Files (x86)\Microsoft Visual Studio\VB98\VBCCR10.OCX SUCCESS Offset: 430,080, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal 10:17:44.8329387 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:44.8329944 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 10:17:44.8332390 vb6.exe 2796 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 10:17:44.8332721 vb6.exe 2796 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read