"Time of Day","Process Name","PID","Operation","Path","Result","Detail" "12:00:13.4229641 PM","w3wp.exe","9700","Thread Exit","","SUCCESS","Thread ID: 14220, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:13.6882304 PM","w3wp.exe","9700","Thread Create","","SUCCESS","Thread ID: 9924" "12:00:15.2635872 PM","w3wp.exe","9700","Thread Exit","","SUCCESS","Thread ID: 9924, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:15.5443855 PM","w3wp.exe","7152","Thread Create","","SUCCESS","Thread ID: 11228" "12:00:15.9031765 PM","w3wp.exe","9700","Thread Create","","SUCCESS","Thread ID: 13324" "12:00:17.1199837 PM","w3wp.exe","7152","Thread Exit","","SUCCESS","Thread ID: 11228, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:17.4319892 PM","w3wp.exe","9700","Thread Exit","","SUCCESS","Thread ID: 13324, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:17.5219677 PM","WebDev.WebServer40.exe","13188","Thread Create","","SUCCESS","Thread ID: 13352" "12:00:17.5223387 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5223547 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5223638 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5223737 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5223824 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5223950 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.5224094 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Desired Access: Read" "12:00:17.5224357 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5224467 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5224543 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: Name" "12:00:17.5224623 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5225178 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.5225280 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5225356 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.5225463 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Query: Name" "12:00:17.5225531 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5225638 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5225729 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}" "12:00:17.5225835 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","" "12:00:17.5225904 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","" "12:00:17.5226029 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5226113 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5226177 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5226253 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5226337 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5226424 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.5226512 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Desired Access: Read" "12:00:17.5226588 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5226656 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5226713 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: Name" "12:00:17.5226782 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5226888 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.5226976 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5227048 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.5227131 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Query: Name" "12:00:17.5227200 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5227299 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\OmniOCRWrapper82.BPProcessEx.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5227375 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}" "12:00:17.5227458 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\OmniOCRWrapper82.BPProcessEx.1\CLSID","SUCCESS","" "12:00:17.5227519 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\OmniOCRWrapper82.BPProcessEx.1","SUCCESS","" "12:00:17.5227614 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5227686 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5227755 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5227857 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","NAME NOT FOUND","Desired Access: Read" "12:00:17.5228009 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Desired Access: Read" "12:00:17.5228184 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5228253 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5228325 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5228443 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5228526 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5228599 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5228682 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.5228739 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5228815 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5228884 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5228994 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5229074 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5229142 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.5229237 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","Query: Name" "12:00:17.5229306 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5229404 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5229481 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 62, Data: OmniOCRWrapper82.BPProcessEx.1" "12:00:17.5229560 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","" "12:00:17.5229644 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5229709 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5229823 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5229899 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5229971 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.5230039 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","Query: Name" "12:00:17.5230108 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5230210 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5230286 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 62, Data: OmniOCRWrapper82.BPProcessEx.1" "12:00:17.5230366 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\ProgID","SUCCESS","" "12:00:17.5230473 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5230644 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5230845 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5230959 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\(Default)","SUCCESS","Type: REG_SZ, Length: 50, Data: OmniOCRExWrapper80 Class" "12:00:17.5231054 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5231126 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5231252 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5231328 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\(Default)","SUCCESS","Type: REG_SZ, Length: 50, Data: OmniOCRExWrapper80 Class" "12:00:17.5231415 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5231488 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5231598 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.5231685 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5231765 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.5231883 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5231955 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5232058 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5232145 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.5232233 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5232309 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5232453 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5232525 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.5232590 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5232654 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5232753 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5232833 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.5232894 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 194, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll" "12:00:17.5232962 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5233035 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5233133 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5233206 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.5233308 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocServer32","SUCCESS","" "12:00:17.5233381 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5233464 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5233578 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5233692 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5233776 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5233848 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5233916 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5234046 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5234133 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5234205 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5234297 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","" "12:00:17.5234658 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5234753 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5234817 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5234909 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5235007 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5235099 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","NAME NOT FOUND","Desired Access: Read" "12:00:17.5235201 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Desired Access: Read" "12:00:17.5235289 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5235376 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5235441 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: Name" "12:00:17.5235513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5235623 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.5235711 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5235787 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.5235870 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{2CFEEBAD-DB26-4F36-8157-BA2522F1EF96}","SUCCESS","" "12:00:17.5238904 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\$Directory","SUCCESS","Offset: 0, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5243321 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\$Directory","SUCCESS","Offset: 20,480, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5245202 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\$Directory","SUCCESS","Offset: 53,248, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5248570 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5250991 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","CreationTime: 4/10/2012 2:59:48 PM, LastAccessTime: 12/28/2015 2:45:22 PM, LastWriteTime: 4/10/2012 2:59:48 PM, ChangeTime: 12/28/2015 2:45:22 PM, FileAttributes: A" "12:00:17.5251117 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","" "12:00:17.5252037 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5527633 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.5527747 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","AllocationSize: 286,720, EndOfFile: 285,544, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.5528176 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:17.5528796 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Image Base: 0x55d0000, Image Size: 0x48000" "12:00:17.5528952 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Name: \Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll" "12:00:17.5529959 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5533597 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","" "12:00:17.5534026 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","Desired Access: Read" "12:00:17.5534220 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5534311 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20" "12:00:17.5534414 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","" "12:00:17.5535319 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5535585 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","CreationTime: 4/10/2012 2:59:48 PM, LastAccessTime: 12/28/2015 2:45:22 PM, LastWriteTime: 4/10/2012 2:59:48 PM, ChangeTime: 12/28/2015 2:45:22 PM, FileAttributes: A" "12:00:17.5569312 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPOmniOCR164\OmniOCRWrapper82.dll","SUCCESS","" "12:00:17.5569803 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys" "12:00:17.5570799 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.5572270 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5572422 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","CreationTime: 6/4/2015 3:30:46 PM, LastAccessTime: 6/4/2015 3:30:46 PM, LastWriteTime: 6/4/2015 3:30:46 PM, ChangeTime: 6/4/2015 3:30:46 PM, FileAttributes: D" "12:00:17.5572505 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","" "12:00:17.5573209 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5573999 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options","SUCCESS","Query: HandleTags, HandleTags: 0x400" "12:00:17.5574102 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OmniOCRWrapper82.dll","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys" "12:00:17.5574767 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5574889 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5574969 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5575067 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5575151 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5575265 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.5575394 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Desired Access: Read" "12:00:17.5575562 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5575653 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5575729 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: Name" "12:00:17.5575805 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5575926 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.5576018 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5576090 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.5576185 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Query: Name" "12:00:17.5576265 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5576371 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5576466 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPageRange.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {6F43FD37-7ED7-48B9-AAF8-5FA172652C76}" "12:00:17.5576576 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","" "12:00:17.5576649 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","" "12:00:17.5576778 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5576865 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5576938 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5577033 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5577105 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5577204 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.5577299 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Desired Access: Read" "12:00:17.5577379 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5577447 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5577504 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: Name" "12:00:17.5577572 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5577675 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.5577755 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5577823 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.5577892 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Query: Name" "12:00:17.5577960 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5578055 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageRange.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5578131 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPageRange.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {6F43FD37-7ED7-48B9-AAF8-5FA172652C76}" "12:00:17.5578211 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageRange.1\CLSID","SUCCESS","" "12:00:17.5578276 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageRange.1","SUCCESS","" "12:00:17.5578355 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5578424 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5578492 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5578583 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","NAME NOT FOUND","Desired Access: Read" "12:00:17.5578743 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Desired Access: Read" "12:00:17.5578899 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5578956 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5579028 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5579135 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5579218 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5579298 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5579370 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.5579435 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5579511 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5579579 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5579709 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5579792 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5579864 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.5579960 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","Query: Name" "12:00:17.5580028 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5580131 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5580203 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPPageRange.1" "12:00:17.5580286 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","" "12:00:17.5580351 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5580423 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5580526 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5580602 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5580693 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.5580765 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","Query: Name" "12:00:17.5580834 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5580936 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5581009 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPPageRange.1" "12:00:17.5581092 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\ProgID","SUCCESS","" "12:00:17.5581157 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5581225 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5581324 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5581400 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\(Default)","SUCCESS","Type: REG_SZ, Length: 36, Data: BPPageRange Class" "12:00:17.5581488 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5581552 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5581655 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5581723 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\(Default)","SUCCESS","Type: REG_SZ, Length: 36, Data: BPPageRange Class" "12:00:17.5581795 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5581860 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5581959 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.5582035 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5582103 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.5582202 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5582271 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5582366 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5582442 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.5582510 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5582601 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5582708 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5582776 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.5582841 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5582905 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5583004 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5583073 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.5583130 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.5583202 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: Name" "12:00:17.5583278 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5583377 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.5583457 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.5583559 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocServer32","SUCCESS","" "12:00:17.5583624 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5583692 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5583791 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5583867 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5583939 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5584004 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5584069 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5584167 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5584243 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5584316 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.5584395 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","" "12:00:17.5584681 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.5584772 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5584844 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.5584916 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5584992 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.5585091 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","NAME NOT FOUND","Desired Access: Read" "12:00:17.5585198 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Desired Access: Read" "12:00:17.5585274 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5585353 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.5585414 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: Name" "12:00:17.5585494 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5585597 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.5585673 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.5585741 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.5585817 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{6F43FD37-7ED7-48B9-AAF8-5FA172652C76}","SUCCESS","" "12:00:17.5587227 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5589474 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","CreationTime: 3/27/2012 2:33:12 PM, LastAccessTime: 12/28/2015 2:45:08 PM, LastWriteTime: 3/27/2012 2:33:12 PM, ChangeTime: 12/28/2015 2:45:08 PM, FileAttributes: A" "12:00:17.5589565 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","" "12:00:17.5590291 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5860482 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.5860607 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","AllocationSize: 724,992, EndOfFile: 723,304, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.5861086 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:17.5861698 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Image Base: 0x8c80000, Image Size: 0xb3000" "12:00:17.5861854 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Name: \Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.5862721 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5864477 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 29,696, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5867826 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 62,464, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5871026 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 95,232, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5874253 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 128,000, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5877545 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 160,768, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5886771 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 193,536, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5889774 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 226,304, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5892849 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 259,072, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5895905 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 291,840, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5898991 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 324,608, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5902017 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 357,376, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5905746 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 505,344, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5908099 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Offset: 521,728, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:17.5911246 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","" "12:00:17.5911687 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","Desired Access: Read" "12:00:17.5911904 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.5911999 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20" "12:00:17.5912098 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","" "12:00:17.5912870 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.5913132 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","CreationTime: 3/27/2012 2:33:12 PM, LastAccessTime: 12/28/2015 2:45:08 PM, LastWriteTime: 3/27/2012 2:33:12 PM, ChangeTime: 12/28/2015 2:45:08 PM, FileAttributes: A" "12:00:17.6074408 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll","SUCCESS","" "12:00:17.6074966 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys" "12:00:17.6075978 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.6077388 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6078011 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97","SUCCESS","CreationTime: 6/5/2015 8:01:00 AM, LastAccessTime: 6/5/2015 8:01:00 AM, LastWriteTime: 6/5/2015 8:01:00 AM, ChangeTime: 6/5/2015 8:01:00 AM, FileAttributes: D" "12:00:17.6078114 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97","SUCCESS","" "12:00:17.6078904 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6079767 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6082006 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","CreationTime: 6/5/2015 8:01:00 AM, LastAccessTime: 6/5/2015 8:01:00 AM, LastWriteTime: 6/5/2015 8:01:00 AM, ChangeTime: 6/5/2015 8:01:00 AM, FileAttributes: A" "12:00:17.6082109 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","" "12:00:17.6082725 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6301596 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.6301710 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","AllocationSize: 212,992, EndOfFile: 211,456, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.6302706 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:17.6303097 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","Image Base: 0xf1a0000, Image Size: 0x3a000" "12:00:17.6303284 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","Name: \Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll" "12:00:17.6303937 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6305218 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll","SUCCESS","" "12:00:17.6305648 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys" "12:00:17.6306629 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.6308088 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_lfwicutil_c9173f2a5647b0d5_8.3.0.110_none_17de39465d792d0d","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6308248 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\winsxs\x86_lfwicutil_c9173f2a5647b0d5_8.3.0.110_none_17de39465d792d0d","SUCCESS","CreationTime: 6/12/2015 10:44:46 AM, LastAccessTime: 6/12/2015 10:44:46 AM, LastWriteTime: 6/12/2015 10:44:46 AM, ChangeTime: 6/12/2015 10:44:46 AM, FileAttributes: D" "12:00:17.6308366 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_lfwicutil_c9173f2a5647b0d5_8.3.0.110_none_17de39465d792d0d","SUCCESS","" "12:00:17.6309084 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_lfwicutil_c9173f2a5647b0d5_8.3.0.110_none_17de39465d792d0d","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6311152 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.6311935 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6312311 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","CreationTime: 11/20/2010 8:24:08 PM, LastAccessTime: 11/20/2010 8:24:08 PM, LastWriteTime: 11/20/2010 8:24:08 PM, ChangeTime: 6/4/2015 2:00:29 PM, FileAttributes: A" "12:00:17.6312399 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","" "12:00:17.6312920 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6313398 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\SysWOW64\winspool.drv","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.6313756 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\SysWOW64\winspool.drv","SUCCESS","SyncType: SyncTypeOther" "12:00:17.6314467 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\SysWOW64\winspool.drv","SUCCESS","Image Base: 0x711f0000, Image Size: 0x51000" "12:00:17.6314584 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","Name: \Windows\SysWOW64\winspool.drv" "12:00:17.6315025 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6316147 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\SysWOW64\winspool.drv","SUCCESS","" "12:00:17.6317424 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots","NAME NOT FOUND","Desired Access: Enumerate Sub Keys" "12:00:17.6318272 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.6319549 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6319693 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","CreationTime: 6/4/2015 3:30:46 PM, LastAccessTime: 6/4/2015 3:30:46 PM, LastWriteTime: 6/4/2015 3:30:46 PM, ChangeTime: 6/4/2015 3:30:46 PM, FileAttributes: D" "12:00:17.6319777 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","" "12:00:17.6320442 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:17.6320967 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options","SUCCESS","Query: HandleTags, HandleTags: 0x400" "12:00:17.6321069 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WINSPOOL.DRV","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys" "12:00:17.6322084 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options","SUCCESS","Query: HandleTags, HandleTags: 0x400" "12:00:17.6322175 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BPImageWrapper.dll","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys" "12:00:17.6324802 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","Desired Access: Read" "12:00:17.6324935 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6325022 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20" "12:00:17.6325121 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","" "12:00:17.6325699 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a" "12:00:17.6326007 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","Desired Access: Read" "12:00:17.6326136 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6326235 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20" "12:00:17.6326341 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","" "12:00:17.6326805 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll.3.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a" "12:00:17.6327037 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","Desired Access: Read" "12:00:17.6327136 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6327201 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest","NAME NOT FOUND","Length: 20" "12:00:17.6327277 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide","SUCCESS","" "12:00:17.6327714 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\winsxs\x86_laserfiche.bpimagewrapper_c9173f2a5647b0d5_8.3.1.0_none_4ea7c45008bfde97\BPImageWrapper.dll.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a" "12:00:17.6327930 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options","SUCCESS","Query: HandleTags, HandleTags: 0x400" "12:00:17.6328029 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BPObjectsClient.dll","NAME NOT FOUND","Desired Access: Query Value, Enumerate Sub Keys" "12:00:17.6328717 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.6328824 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6328903 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6329002 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6329078 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6329170 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.6329287 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Desired Access: Read" "12:00:17.6329451 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6329534 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.6329603 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: Name" "12:00:17.6329679 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6329804 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.6329899 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6329972 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.6330074 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Query: Name" "12:00:17.6330143 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6330245 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6330340 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {7BC07DBB-0B1F-4404-901C-B9DCD433908E}" "12:00:17.6330451 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","" "12:00:17.6330519 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","" "12:00:17.6330644 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.6330720 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6330796 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6330872 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6330945 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6331028 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.6331120 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Desired Access: Read" "12:00:17.6331196 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6331268 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.6331325 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: Name" "12:00:17.6331397 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6331503 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.6331579 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6331652 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.6331720 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Query: Name" "12:00:17.6331785 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6331884 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPropertyBag.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6331956 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {7BC07DBB-0B1F-4404-901C-B9DCD433908E}" "12:00:17.6332036 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPropertyBag.1\CLSID","SUCCESS","" "12:00:17.6332096 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPropertyBag.1","SUCCESS","" "12:00:17.6332184 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6332283 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6332351 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6332442 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","NAME NOT FOUND","Desired Access: Read" "12:00:17.6332625 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Desired Access: Read" "12:00:17.6332777 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6332838 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6332906 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6333016 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6333104 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6333172 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6333244 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.6333301 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6333374 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6333438 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6333537 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6333617 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6333693 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.6333780 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","Query: Name" "12:00:17.6333853 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6333951 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6334024 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: BPObjectsClient.BPPropertyBag.1" "12:00:17.6334103 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","" "12:00:17.6334179 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6334267 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6334377 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6334457 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6334529 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.6334601 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","Query: Name" "12:00:17.6334677 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6334776 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6334848 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: BPObjectsClient.BPPropertyBag.1" "12:00:17.6334924 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\ProgID","SUCCESS","" "12:00:17.6334985 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6335061 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6335164 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6335232 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\(Default)","SUCCESS","Type: REG_SZ, Length: 40, Data: BPPropertyBag Class" "12:00:17.6335316 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6335381 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6335479 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6335544 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\(Default)","SUCCESS","Type: REG_SZ, Length: 40, Data: BPPropertyBag Class" "12:00:17.6335624 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6335689 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6335787 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.6335863 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6335932 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.6336031 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: Name" "12:00:17.6336099 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6336209 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6336282 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.6336350 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: Name" "12:00:17.6336418 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6336513 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6336586 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.6336650 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: Name" "12:00:17.6336745 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6336871 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6336947 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.6337011 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.6337091 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: Name" "12:00:17.6337163 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6337285 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6337357 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.6337445 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocServer32","SUCCESS","" "12:00:17.6337505 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6337582 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6337684 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6337760 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6337844 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6337912 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6337984 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6338083 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6338159 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6338232 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6338315 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","" "12:00:17.6338600 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.6338684 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6338748 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6338821 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6338889 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6338977 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","NAME NOT FOUND","Desired Access: Read" "12:00:17.6339087 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Desired Access: Read" "12:00:17.6339167 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6339239 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.6339296 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: Name" "12:00:17.6339364 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6339471 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.6339566 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6339638 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.6339714 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{7BC07DBB-0B1F-4404-901C-B9DCD433908E}","SUCCESS","" "12:00:17.6341352 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.6341436 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6341504 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6341577 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6341645 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6341751 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read" "12:00:17.6341869 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read" "12:00:17.6341983 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6342074 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.6342162 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name" "12:00:17.6342230 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6342341 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.6342439 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6342512 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read" "12:00:17.6342599 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name" "12:00:17.6342671 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6342774 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6342854 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}" "12:00:17.6342945 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","" "12:00:17.6343010 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","" "12:00:17.6343120 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.6343192 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6343260 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.6343348 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","NAME NOT FOUND","Desired Access: Read" "12:00:17.6343485 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Desired Access: Read" "12:00:17.6343610 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.6343679 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6343762 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6343880 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6343967 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6344040 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6344120 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.6344188 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6344268 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6344332 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6344435 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6344515 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6344583 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.6344674 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","Query: Name" "12:00:17.6344743 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6344849 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6344925 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 56, Data: BPOmniOCR82.BPProcessEx80.1" "12:00:17.6345009 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","" "12:00:17.6345070 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6345146 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6345248 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6345324 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6345393 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.6345484 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","Query: Name" "12:00:17.6345556 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6347259 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6347415 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 56, Data: BPOmniOCR82.BPProcessEx80.1" "12:00:17.6347541 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\ProgID","SUCCESS","" "12:00:17.6347632 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6347734 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6347890 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6347978 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\(Default)","SUCCESS","Type: REG_SZ, Length: 40, Data: BPProcessEx80 Class" "12:00:17.6348058 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6348130 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6348244 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.6348316 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\(Default)","SUCCESS","Type: REG_SZ, Length: 40, Data: BPProcessEx80 Class" "12:00:17.6348415 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6348491 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6348601 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.6348696 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6348772 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.6348856 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6348928 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6349031 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6349114 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6349183 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6349259 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: Name" "12:00:17.6349331 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6349434 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6349513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.6349586 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.6349669 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{25CA57CC-AB34-4221-95AF-99736B5B84AD}","SUCCESS","" "12:00:17.8947801 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.8947930 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8948018 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.8948105 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8948185 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8948295 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Read" "12:00:17.8948405 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Desired Access: Read" "12:00:17.8948497 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8948584 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.8948645 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8948717 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8948843 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Read" "12:00:17.8948945 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8949021 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","SUCCESS","Desired Access: Read" "12:00:17.8949101 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","SUCCESS","Query: Name" "12:00:17.8949177 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8949280 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8949371 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {B196B286-BAB4-101A-B69C-00AA00341D07}" "12:00:17.8949466 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","SUCCESS","" "12:00:17.8949534 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{B196B28F-BAB4-101A-B69C-00AA00341D07}","SUCCESS","" "12:00:17.8949626 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.8949698 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8949766 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8949854 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Read" "12:00:17.8949953 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Desired Access: Read" "12:00:17.8950032 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8950093 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8950165 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8950268 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8950367 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8950451 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8950519 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.8950576 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8950648 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8950720 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8950846 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8950926 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8951002 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8951070 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.8951154 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8951226 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Read" "12:00:17.8951310 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Desired Access: Read" "12:00:17.8951389 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8951446 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8951515 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.8951610 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8951690 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.8951758 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8951838 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","" "12:00:17.8951899 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8951967 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8952070 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8952146 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)","SUCCESS","Type: REG_SZ, Length: 32, Data: PSFactoryBuffer" "12:00:17.8952222 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8952290 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8952389 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8952461 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)","SUCCESS","Type: REG_SZ, Length: 32, Data: PSFactoryBuffer" "12:00:17.8952534 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8952602 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8952701 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.8952777 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8952845 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.8952917 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: Name" "12:00:17.8952986 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8953085 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8953157 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.8953222 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: Name" "12:00:17.8953301 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8953431 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8953514 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.8953586 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: Name" "12:00:17.8953655 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8953754 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8953822 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.8953891 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: Name" "12:00:17.8953959 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8954054 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.8954122 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.8954214 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","SUCCESS","" "12:00:17.8954271 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8954339 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8954442 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8954518 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8954594 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8954658 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8954731 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8954833 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8954917 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8955012 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.8955088 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","" "12:00:17.8955278 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.8955362 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8955422 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.8955495 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8955563 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.8955651 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","Desired Access: Read" "12:00:17.8955746 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Desired Access: Read" "12:00:17.8955825 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.8955894 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.8955951 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: Name" "12:00:17.8956015 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8956118 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.8956194 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.8956263 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.8956335 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","SUCCESS","" "12:00:17.9072225 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9072362 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9072453 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9072544 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9072624 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9072742 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9072859 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","Desired Access: Read" "12:00:17.9072966 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9073065 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9073133 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","Query: Name" "12:00:17.9073209 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9073342 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9073430 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9073509 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Desired Access: Read" "12:00:17.9073582 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Query: Name" "12:00:17.9073658 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9073764 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9073844 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {00020424-0000-0000-C000-000000000046}" "12:00:17.9073947 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","" "12:00:17.9074015 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}","SUCCESS","" "12:00:17.9074114 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9074190 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9074266 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9074361 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9074471 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9074566 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9074631 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9074699 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9074832 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9074927 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9075003 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9075072 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9075129 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9075201 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9075273 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9075380 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9075505 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9075577 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9075650 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9075726 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9075802 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9075923 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9076030 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9076090 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9076163 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9076258 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9076338 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9076406 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9076490 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9076554 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9076619 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9076725 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9076809 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)","SUCCESS","Type: REG_SZ, Length: 28, Data: PSOAInterface" "12:00:17.9076889 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9076953 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9077067 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9077151 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)","SUCCESS","Type: REG_SZ, Length: 28, Data: PSOAInterface" "12:00:17.9077235 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9077311 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9077588 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9077676 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9077763 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9077843 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9077915 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9078029 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9078117 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9078185 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9078257 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9078364 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9078443 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.9078527 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9078595 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9078702 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9078774 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.9078843 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9078915 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9079245 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9079390 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9079519 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","" "12:00:17.9079610 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9079705 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9079876 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9079971 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9080048 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9080120 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9080192 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9080302 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9080382 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9080454 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9080534 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9080739 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9080842 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9080918 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9080998 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9081070 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9081165 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9081264 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9081363 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9081443 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9081503 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9081572 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9081682 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9081766 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9081842 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9081918 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9082157 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9082237 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9082298 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9082370 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9082435 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9082522 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9082617 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9082701 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9082769 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9082834 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Query: Name" "12:00:17.9082906 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9083009 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9083088 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {00020424-0000-0000-C000-000000000046}" "12:00:17.9083172 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\ProxyStubClsid32","SUCCESS","" "12:00:17.9083362 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9083434 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9083499 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9083567 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9083636 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9083731 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\Forward","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9083826 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\Forward","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9083932 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9084008 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9084081 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\Forward","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9084191 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\Forward","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9084358 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9084468 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9084552 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9084613 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9084681 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9084761 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9084856 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9084974 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9085084 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9085152 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9085213 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","Query: Name" "12:00:17.9085286 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9085396 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9085468 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {B0389002-7984-4367-B7DF-A9BE22988ADB}" "12:00:17.9085548 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","Query: Name" "12:00:17.9085612 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9085711 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9085787 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib\Version","SUCCESS","Type: REG_SZ, Length: 8, Data: 8.0" "12:00:17.9085882 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{5F93EACA-A983-45C9-A7C5-B7533F04B554}\TypeLib","SUCCESS","" "12:00:17.9085993 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9086095 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9086164 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9086278 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9086354 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9086452 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9086559 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9086700 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9086776 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9086867 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Query: Name" "12:00:17.9086958 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9087068 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9087163 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Index: 0, Name: 8.0" "12:00:17.9087258 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","NO MORE ENTRIES","Index: 1, Length: 288" "12:00:17.9087338 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Query: Name" "12:00:17.9087407 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9087505 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9087585 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9087657 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9087760 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Query: Name" "12:00:17.9087828 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9087927 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9088000 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Index: 0, Name: 0" "12:00:17.9088087 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Query: Name" "12:00:17.9088152 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9088250 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9088326 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9088395 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9088475 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","SUCCESS","Query: Name" "12:00:17.9088551 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9088695 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9088783 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9088855 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9088950 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","SUCCESS","Query: Name" "12:00:17.9089018 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9089113 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9089193 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9089262 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32\(Default)","SUCCESS","Type: REG_SZ, Length: 172, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll" "12:00:17.9090060 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9264944 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 0, Length: 64, Priority: Normal" "12:00:17.9265199 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 264, Length: 4" "12:00:17.9265297 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 268, Length: 20" "12:00:17.9265373 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 512, Length: 40" "12:00:17.9265465 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 552, Length: 40" "12:00:17.9265533 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 592, Length: 40" "12:00:17.9265594 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 632, Length: 40" "12:00:17.9265655 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 672, Length: 40" "12:00:17.9265841 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 39,936, Length: 16" "12:00:17.9265913 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 39,952, Length: 8" "12:00:17.9265989 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,240, Length: 2" "12:00:17.9266058 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,242, Length: 14" "12:00:17.9266145 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 39,984, Length: 16" "12:00:17.9266217 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,000, Length: 8" "12:00:17.9266293 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,080, Length: 16" "12:00:17.9266362 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,096, Length: 8" "12:00:17.9266430 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","Offset: 40,176, Length: 16" "12:00:17.9266518 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","AllocationSize: 126,976, EndOfFile: 126,760, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.9266639 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.9266715 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","AllocationSize: 126,976, EndOfFile: 126,760, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.9266863 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:17.9267282 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0\win32","SUCCESS","" "12:00:17.9267388 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0\0","SUCCESS","" "12:00:17.9267464 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}\8.0","SUCCESS","" "12:00:17.9267532 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{B0389002-7984-4367-B7DF-A9BE22988ADB}","SUCCESS","" "12:00:17.9267901 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9268118 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9268201 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9268297 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9268384 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9268479 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9268585 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes\TypeLib","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9268654 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9268718 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: Name" "12:00:17.9268791 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9268855 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9268943 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9269042 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read" "12:00:17.9269163 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9269422 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9269631 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9269836 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9269969 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9270053 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read, Write DAC" "12:00:17.9270178 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: Name" "12:00:17.9270262 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9270376 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9270463 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9270532 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read, Write DAC" "12:00:17.9270623 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: Name" "12:00:17.9270699 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9270813 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9270904 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9270984 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read, Write DAC" "12:00:17.9271109 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","" "12:00:17.9271201 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","" "12:00:17.9271265 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: Name" "12:00:17.9271330 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9271436 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9271516 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9271585 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read, Write DAC" "12:00:17.9271661 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: Name" "12:00:17.9271737 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9271839 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9271915 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9271984 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","Desired Access: Query Value" "12:00:17.9272056 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","Query: Name" "12:00:17.9272132 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9272235 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9272322 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\SysWOW64\stdole2.tlb" "12:00:17.9272428 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32","SUCCESS","" "12:00:17.9273113 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9273725 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 0, Length: 64, Priority: Normal" "12:00:17.9273877 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 184, Length: 4" "12:00:17.9273960 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 188, Length: 20" "12:00:17.9274040 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 432, Length: 40" "12:00:17.9274124 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 512, Length: 16" "12:00:17.9274188 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 528, Length: 8" "12:00:17.9274257 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 760, Length: 2" "12:00:17.9274329 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 536, Length: 8" "12:00:17.9274397 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 744, Length: 2" "12:00:17.9274462 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 746, Length: 14" "12:00:17.9274538 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 576, Length: 16" "12:00:17.9274606 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 592, Length: 8" "12:00:17.9274686 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 648, Length: 16" "12:00:17.9274751 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 664, Length: 8" "12:00:17.9274823 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","Offset: 712, Length: 16" "12:00:17.9274914 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 2, DeletePending: False, Directory: False" "12:00:17.9275013 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\SysWOW64\stdole2.tlb","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.9275093 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,896, NumberOfLinks: 2, DeletePending: False, Directory: False" "12:00:17.9275249 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","SyncType: SyncTypeOther" "12:00:17.9275542 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0","SUCCESS","" "12:00:17.9275621 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0","SUCCESS","" "12:00:17.9275690 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{00020430-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9275770 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes\TypeLib","SUCCESS","" "12:00:17.9276135 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9276260 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Rpc","SUCCESS","Desired Access: Read" "12:00:17.9276401 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Rpc","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9276473 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\UDTAlignmentPolicy","NAME NOT FOUND","Length: 144" "12:00:17.9276560 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Microsoft\Rpc","SUCCESS","" "12:00:17.9276750 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9276857 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9276929 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9277013 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9277089 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9277184 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9277301 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9277400 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9277469 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9277530 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9277606 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9277723 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9277811 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9277883 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","SUCCESS","Desired Access: Read" "12:00:17.9277970 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","SUCCESS","Query: Name" "12:00:17.9278039 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9278157 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9278271 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {00020420-0000-0000-C000-000000000046}" "12:00:17.9278377 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}\ProxyStubClsid32","SUCCESS","" "12:00:17.9278446 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\Interface\{00020400-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9278579 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9278651 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9278719 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9278814 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9278928 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9279061 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9279126 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9279202 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9279316 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9279411 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9279495 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9279586 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9279647 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9279719 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9279787 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9279901 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9279981 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9280050 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9280130 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9280209 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9280278 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9280369 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9280456 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9280513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9280582 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9280681 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\CLSID\{00020420-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9280757 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9280829 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9280909 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9280977 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9281046 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9281148 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9281224 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\(Default)","SUCCESS","Type: REG_SZ, Length: 22, Data: PSDispatch" "12:00:17.9281300 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9281376 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9281487 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9281559 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\(Default)","SUCCESS","Type: REG_SZ, Length: 22, Data: PSDispatch" "12:00:17.9281639 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9281707 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9281806 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9281882 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9281962 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9282049 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9282121 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9282220 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9282300 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9282368 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9282437 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9282539 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9282623 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.9282703 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9282783 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9282931 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9283011 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: C:\Windows\SysWOW64\oleaut32.dll" "12:00:17.9283087 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9283159 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9283258 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9283326 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9283414 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32","SUCCESS","" "12:00:17.9283475 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9283539 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9283649 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9283725 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9283798 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9283862 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9283931 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9284041 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9284117 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9284185 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9284277 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9284474 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9284565 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9284638 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9284706 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9284775 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9284862 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9284957 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Desired Access: Read" "12:00:17.9285041 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9285109 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9285170 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: Name" "12:00:17.9285235 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9285341 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9285428 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9285504 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9285580 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{00020420-0000-0000-C000-000000000046}","SUCCESS","" "12:00:17.9285786 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\SysWOW64\stdole2.tlb","SUCCESS","" "12:00:17.9286105 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPInterfacesClient.dll","SUCCESS","" "12:00:17.9316370 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9316491 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\OleAut","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9317541 PM","WebDev.WebServer40.exe","13188","Thread Create","","SUCCESS","Thread ID: 13340" "12:00:17.9319031 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9319141 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\SOFTWARE\Laserfiche\DocumentProcessor","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9319251 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9319342 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","Desired Access: Query Value" "12:00:17.9319502 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9319589 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor\UseOPFastMode","NAME NOT FOUND","Length: 144" "12:00:17.9319696 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","" "12:00:17.9319757 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9319924 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Laserfiche\Client8\Profile\OCR","SUCCESS","Desired Access: Read" "12:00:17.9320057 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Laserfiche\Client8\Profile\OCR","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9320129 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCU\Software\Laserfiche\Client8\Profile\OCR\ProcessTimeOut","NAME NOT FOUND","Length: 144" "12:00:17.9320334 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9320430 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\SOFTWARE\Laserfiche\DocumentProcessor","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9320513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9320597 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","Desired Access: Query Value" "12:00:17.9320680 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9320741 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor\CacheDirectory","NAME NOT FOUND","Length: 144" "12:00:17.9320813 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Laserfiche\DocumentProcessor","SUCCESS","" "12:00:17.9321901 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9322072 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","CreationTime: 6/4/2015 2:02:16 PM, LastAccessTime: 12/31/2015 12:00:00 PM, LastWriteTime: 12/31/2015 12:00:00 PM, ChangeTime: 12/31/2015 12:00:00 PM, FileAttributes: DNCI" "12:00:17.9322155 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","" "12:00:17.9322767 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","Desired Access: Generic Read, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created" "12:00:17.9326990 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","" "12:00:17.9327808 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9328575 PM","WebDev.WebServer40.exe","13188","QueryAttributeTagFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","Attributes: ANCI, ReparseTag: 0x0" "12:00:17.9328682 PM","WebDev.WebServer40.exe","13188","SetDispositionInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","Delete: True" "12:00:17.9328819 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tmp","SUCCESS","" "12:00:17.9330769 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created" "12:00:17.9336486 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 333, startime: 129818, endtime: 129818, seqnum: 0, connid: 0" "12:00:17.9348824 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 2295, seqnum: 0, connid: 0" "12:00:17.9349033 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 625, seqnum: 0, connid: 0" "12:00:17.9349098 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 1460, seqnum: 0, connid: 0" "12:00:17.9349144 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 1460, seqnum: 0, connid: 0" "12:00:17.9349246 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 1460, seqnum: 0, connid: 0" "12:00:17.9349288 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 431, seqnum: 0, connid: 0" "12:00:17.9351344 PM","WebDev.WebServer40.exe","13188","WriteFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Offset: 0, Length: 4,096, Priority: Normal" "12:00:17.9353025 PM","WebDev.WebServer40.exe","13188","WriteFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Offset: 4,096, Length: 3,298, Priority: Normal" "12:00:17.9353310 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","" "12:00:17.9359509 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 395, startime: 129818, endtime: 129818, seqnum: 0, connid: 0" "12:00:17.9492740 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 270, seqnum: 0, connid: 0" "12:00:17.9494952 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9495124 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9495222 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9495314 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9495397 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9495500 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx","NAME NOT FOUND","Desired Access: Read" "12:00:17.9495629 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Desired Access: Read" "12:00:17.9495819 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9495910 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9495979 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: Name" "12:00:17.9496051 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9496173 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9496264 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9496332 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9496435 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Query: Name" "12:00:17.9496500 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9496598 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9496686 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPageEx\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}" "12:00:17.9496781 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","" "12:00:17.9496845 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","" "12:00:17.9496967 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9497043 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9497100 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9497169 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9497245 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9497324 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx","NAME NOT FOUND","Desired Access: Read" "12:00:17.9497419 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Desired Access: Read" "12:00:17.9497503 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9497571 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9497640 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: Name" "12:00:17.9497708 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9497807 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9497879 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9497948 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9498012 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Query: Name" "12:00:17.9498073 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9498168 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPPageEx\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9498240 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPPageEx\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}" "12:00:17.9498317 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageEx\CLSID","SUCCESS","" "12:00:17.9498377 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPPageEx","SUCCESS","" "12:00:17.9498461 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9498529 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9498590 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9498678 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9498856 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Desired Access: Read" "12:00:17.9499005 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9499069 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9499141 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9499255 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9499385 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9499457 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9499529 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9499594 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9499666 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9499742 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9499845 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9499924 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9499989 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9500076 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","Query: Name" "12:00:17.9500145 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9500236 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9500308 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 54, Data: BPObjectsClient.BPPageEx.1" "12:00:17.9500388 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","" "12:00:17.9500449 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9500510 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9500605 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9500677 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9500742 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9500810 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","Query: Name" "12:00:17.9500871 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9500966 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9501031 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 54, Data: BPObjectsClient.BPPageEx.1" "12:00:17.9501122 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\ProgID","SUCCESS","" "12:00:17.9501179 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9501240 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9501338 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9501403 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\(Default)","SUCCESS","Type: REG_SZ, Length: 30, Data: BPPageEx Class" "12:00:17.9501475 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9501536 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9501631 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9501692 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\(Default)","SUCCESS","Type: REG_SZ, Length: 30, Data: BPPageEx Class" "12:00:17.9501764 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9501829 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9501928 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9502000 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9502072 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9502171 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9502243 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9502342 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9502410 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9502471 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9502536 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9502631 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9502692 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9502752 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9502817 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9502908 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9502973 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9503030 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9503095 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9503163 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9503262 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9503330 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9503425 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocServer32","SUCCESS","" "12:00:17.9503486 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9503555 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9503653 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9503729 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9503802 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9503870 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9503938 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9504033 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9504106 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9504178 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9504258 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","" "12:00:17.9504566 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9504645 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9504710 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9504779 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9504843 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9504927 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9505018 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Desired Access: Read" "12:00:17.9505090 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9505155 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9505212 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: Name" "12:00:17.9505276 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9505379 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9505451 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9505520 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9505588 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CA34AC01-CB97-4ECA-90CB-6E16B1A8C96B}","SUCCESS","" "12:00:17.9505809 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9505881 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9505942 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9506010 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9506082 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9506166 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9506269 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Desired Access: Read" "12:00:17.9506379 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9506455 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9506512 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: Name" "12:00:17.9506580 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9506679 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9506759 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9506824 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9506903 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Query: Name" "12:00:17.9506968 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9507063 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9507135 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPTokenManager.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}" "12:00:17.9507211 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","" "12:00:17.9507318 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","" "12:00:17.9507443 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9507523 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9507595 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9507664 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9507732 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9507812 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9507903 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Desired Access: Read" "12:00:17.9507990 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9508063 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9508116 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: Name" "12:00:17.9508188 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9508310 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9508386 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9508454 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9508519 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Query: Name" "12:00:17.9508583 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9508675 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTokenManager.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9508743 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPTokenManager.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}" "12:00:17.9508819 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTokenManager.1\CLSID","SUCCESS","" "12:00:17.9508880 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTokenManager.1","SUCCESS","" "12:00:17.9508948 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9509013 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9509078 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9509161 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9509302 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Desired Access: Read" "12:00:17.9509412 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9509465 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9509534 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9509644 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9509724 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9509792 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9509864 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9509921 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9509986 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9510051 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9510146 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9510218 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9510286 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9510385 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","Query: Name" "12:00:17.9510454 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9510556 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9510629 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: BPObjectsClient.BPTokenManager.1" "12:00:17.9510712 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","" "12:00:17.9510777 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9510845 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9510959 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9511031 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9511100 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9511164 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","Query: Name" "12:00:17.9511229 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9511324 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9511393 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 66, Data: BPObjectsClient.BPTokenManager.1" "12:00:17.9511469 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\ProgID","SUCCESS","" "12:00:17.9511526 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9511590 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9511693 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9511757 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\(Default)","SUCCESS","Type: REG_SZ, Length: 42, Data: BPTokenManager Class" "12:00:17.9511833 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9511906 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9512012 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9512081 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\(Default)","SUCCESS","Type: REG_SZ, Length: 42, Data: BPTokenManager Class" "12:00:17.9512153 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9512229 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9512328 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9512407 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9512480 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9512571 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9512643 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9512750 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9512818 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9512879 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9512943 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9513038 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9513107 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9513164 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9513229 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9513324 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9513388 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9513445 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9513510 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9513574 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9513669 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9513742 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9513821 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocServer32","SUCCESS","" "12:00:17.9513879 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9513943 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9514038 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9514110 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9514179 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9514243 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9514308 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9514403 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9514483 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9514551 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9514639 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","" "12:00:17.9514905 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9514981 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9515042 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9515114 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9515178 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9515262 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9515353 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Desired Access: Read" "12:00:17.9515422 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9515490 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9515543 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: Name" "12:00:17.9515612 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9515714 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9515787 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9515908 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9515992 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{D0DB66AF-B48F-4D74-87D1-67F5E729AAEF}","SUCCESS","" "12:00:17.9516220 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9516300 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9516364 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9516433 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9516513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9516596 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9516707 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Desired Access: Read" "12:00:17.9516813 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9516878 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9516935 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: Name" "12:00:17.9516999 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9517098 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9517178 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9517243 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9517322 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Query: Name" "12:00:17.9517387 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9517482 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9517554 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {F5D69D82-76D7-4435-9A39-A4E786BD4471}" "12:00:17.9517630 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","" "12:00:17.9517691 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","" "12:00:17.9517805 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9517885 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9517942 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9518010 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9518075 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9518151 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9518227 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Desired Access: Read" "12:00:17.9518295 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9518360 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9518413 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: Name" "12:00:17.9518478 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9518584 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9518657 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9518736 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9518801 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Query: Name" "12:00:17.9518869 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9518976 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPStatusMessages.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9519044 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {F5D69D82-76D7-4435-9A39-A4E786BD4471}" "12:00:17.9519117 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPStatusMessages.1\CLSID","SUCCESS","" "12:00:17.9519177 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPStatusMessages.1","SUCCESS","" "12:00:17.9519242 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9519307 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9519371 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9519455 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9519569 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Desired Access: Read" "12:00:17.9519687 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9519767 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9519835 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9519941 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9520025 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9520105 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9520173 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9520230 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9520325 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9520394 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9520508 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9520599 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9520667 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9520766 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","Query: Name" "12:00:17.9520835 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9520937 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9521009 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 70, Data: BPObjectsClient.BPStatusMessages.1" "12:00:17.9521089 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","" "12:00:17.9521146 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9521211 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9521310 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9521378 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9521447 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9521511 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","Query: Name" "12:00:17.9521576 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9521671 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9521739 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 70, Data: BPObjectsClient.BPStatusMessages.1" "12:00:17.9521815 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\ProgID","SUCCESS","" "12:00:17.9521872 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9521971 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9522081 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9522150 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\(Default)","SUCCESS","Type: REG_SZ, Length: 46, Data: BPStatusMessages Class" "12:00:17.9522222 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9522290 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9522382 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9522446 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\(Default)","SUCCESS","Type: REG_SZ, Length: 46, Data: BPStatusMessages Class" "12:00:17.9522519 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9522583 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9522682 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9522762 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9522834 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9522925 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9523001 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9523104 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9523172 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9523229 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9523294 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9523389 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9523465 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9523526 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9523587 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9523686 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9523750 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9523803 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9523879 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9523963 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9524062 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9524138 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9524233 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocServer32","SUCCESS","" "12:00:17.9524297 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9524362 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9524461 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9524541 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9524617 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9524681 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9524746 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9524849 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9524928 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9525001 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9525077 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","" "12:00:17.9525316 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9525396 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9525457 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9525525 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9525590 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9525674 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9525761 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Desired Access: Read" "12:00:17.9525837 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9525905 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9525962 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: Name" "12:00:17.9526027 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9526126 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9526206 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9526282 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9526354 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F5D69D82-76D7-4435-9A39-A4E786BD4471}","SUCCESS","" "12:00:17.9526563 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9526635 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9526696 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9526761 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9526825 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9526901 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9527004 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Desired Access: Read" "12:00:17.9527107 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9527179 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9527247 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: Name" "12:00:17.9527319 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9527430 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9527513 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9527578 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9527658 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Query: Name" "12:00:17.9527719 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9527814 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9527886 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPImageFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {46918080-746B-40A4-824B-85D91B1F3D68}" "12:00:17.9527966 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","" "12:00:17.9528026 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","" "12:00:17.9528133 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9528201 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9528270 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9528334 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9528399 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9528475 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9528555 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Desired Access: Read" "12:00:17.9528635 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9528714 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9528768 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: Name" "12:00:17.9528832 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9528931 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9529007 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9529076 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9529140 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Query: Name" "12:00:17.9529209 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9529300 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPImageFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9529380 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPImageFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {46918080-746B-40A4-824B-85D91B1F3D68}" "12:00:17.9529456 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPImageFile\CLSID","SUCCESS","" "12:00:17.9529520 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPImageFile","SUCCESS","" "12:00:17.9529589 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9529661 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9529726 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9529805 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9529935 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Desired Access: Read" "12:00:17.9530041 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9530094 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9530167 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9530265 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9530341 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9530410 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9530486 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9530543 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9530607 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9530672 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9530767 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9530839 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9530904 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9530984 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","Query: Name" "12:00:17.9531048 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9531140 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9531219 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPImageFile.1" "12:00:17.9531303 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","" "12:00:17.9531360 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9531432 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9531539 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9531615 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9531683 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9531748 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","Query: Name" "12:00:17.9531809 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9531904 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9531968 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPImageFile.1" "12:00:17.9532040 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\ProgID","SUCCESS","" "12:00:17.9532097 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9532158 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9532253 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9532318 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\(Default)","SUCCESS","Type: REG_SZ, Length: 36, Data: BPImageFile Class" "12:00:17.9532390 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9532462 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9532557 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9532618 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\(Default)","SUCCESS","Type: REG_SZ, Length: 36, Data: BPImageFile Class" "12:00:17.9532694 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9532763 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9532858 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9532930 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9533006 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9533112 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9533207 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9533321 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9533390 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9533458 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9533569 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9533671 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9533736 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9533797 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9533857 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9533952 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9534013 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9534066 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9534135 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9534196 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9534291 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9534355 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9534435 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocServer32","SUCCESS","" "12:00:17.9534488 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9534553 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9534648 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9534720 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9534785 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9534861 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9534933 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9535028 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9535097 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9535165 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9535233 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","" "12:00:17.9535469 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9535549 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9535614 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9535682 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9535754 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9535849 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9535940 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Desired Access: Read" "12:00:17.9536020 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9536085 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9536142 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: Name" "12:00:17.9536207 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9536313 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9536385 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9536454 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9536522 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{46918080-746B-40A4-824B-85D91B1F3D68}","SUCCESS","" "12:00:17.9538921 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9539255 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9539362 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9539441 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9539525 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9539609 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9539715 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9539837 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Desired Access: Read" "12:00:17.9539958 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9540046 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9540107 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: Name" "12:00:17.9540175 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9540293 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9540376 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9540449 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9540528 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Query: Name" "12:00:17.9540593 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9540692 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9540772 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPTextFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {13557084-D03B-4AF3-A35D-8B1D820E8066}" "12:00:17.9540859 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","" "12:00:17.9540924 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","" "12:00:17.9541053 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9541140 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9541205 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9541281 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9541353 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9541441 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9541551 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Desired Access: Read" "12:00:17.9541631 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9541711 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9541771 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: Name" "12:00:17.9541847 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9541950 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9542026 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9542091 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9542159 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Query: Name" "12:00:17.9542220 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9542315 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPTextFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9542383 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPTextFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {13557084-D03B-4AF3-A35D-8B1D820E8066}" "12:00:17.9542459 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTextFile\CLSID","SUCCESS","" "12:00:17.9542524 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPTextFile","SUCCESS","" "12:00:17.9542593 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9542657 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9542722 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9542805 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9542931 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Desired Access: Read" "12:00:17.9543075 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9543136 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9543205 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9543311 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9543391 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9543459 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9543524 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9543581 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9543645 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9543710 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9543813 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9543889 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9543961 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9544052 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","Query: Name" "12:00:17.9544121 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9544223 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9544295 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 58, Data: BPObjectsClient.BPTextFile.1" "12:00:17.9544379 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","" "12:00:17.9544432 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9544497 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9544592 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9544664 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9544733 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9544797 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","Query: Name" "12:00:17.9544862 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9544953 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9545025 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 58, Data: BPObjectsClient.BPTextFile.1" "12:00:17.9545101 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\ProgID","SUCCESS","" "12:00:17.9545162 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9545238 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9545360 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9545451 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\(Default)","SUCCESS","Type: REG_SZ, Length: 34, Data: BPTextFile Class" "12:00:17.9545527 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9545592 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9545702 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9545782 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\(Default)","SUCCESS","Type: REG_SZ, Length: 34, Data: BPTextFile Class" "12:00:17.9545858 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9545922 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9546021 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9546101 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9546169 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9546257 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9546325 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9546420 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9546485 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9546550 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9546610 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9546705 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9546770 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9546831 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9546892 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9546987 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9547051 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9547120 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9547184 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9547249 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9547344 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9547405 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9547485 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocServer32","SUCCESS","" "12:00:17.9547542 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9547606 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9547705 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9547777 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9547857 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9547922 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9547998 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9548108 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9548184 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9548252 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9548328 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","" "12:00:17.9548587 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9548671 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9548731 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9548800 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9548864 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9548948 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9549047 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Desired Access: Read" "12:00:17.9549123 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9549191 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9549260 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: Name" "12:00:17.9549332 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9549435 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9549514 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9549594 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9549674 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{13557084-D03B-4AF3-A35D-8B1D820E8066}","SUCCESS","" "12:00:17.9550704 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9550997 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9551088 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9551153 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9551225 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9551301 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9551388 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9551499 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Desired Access: Read" "12:00:17.9551605 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9551677 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9551738 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: Name" "12:00:17.9551803 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9551909 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9551989 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9552061 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9552152 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Query: Name" "12:00:17.9552228 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9552339 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9552419 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPLocFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}" "12:00:17.9552502 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","" "12:00:17.9552563 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","" "12:00:17.9552677 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9552749 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9552806 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9552871 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9552935 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9553012 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile","NAME NOT FOUND","Desired Access: Read" "12:00:17.9553103 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Desired Access: Read" "12:00:17.9553171 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9553236 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9553297 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: Name" "12:00:17.9553361 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9553460 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9553555 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9553643 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9553719 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Query: Name" "12:00:17.9553783 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9553890 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPLocFile\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9553973 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPLocFile\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}" "12:00:17.9554049 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPLocFile\CLSID","SUCCESS","" "12:00:17.9554110 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPLocFile","SUCCESS","" "12:00:17.9554197 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9554277 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9554342 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9554429 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9554555 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Desired Access: Read" "12:00:17.9554657 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9554711 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9554779 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9554878 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9554954 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9555022 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9555087 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9555140 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9555209 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9555277 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9555376 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9555448 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9555513 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9555600 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","Query: Name" "12:00:17.9555665 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9555760 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9555832 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 56, Data: BPObjectsClient.BPLocFile.1" "12:00:17.9555912 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","" "12:00:17.9555969 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9556037 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9556132 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9556208 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9556284 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9556360 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","Query: Name" "12:00:17.9556425 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9556516 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9556585 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 56, Data: BPObjectsClient.BPLocFile.1" "12:00:17.9556661 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\ProgID","SUCCESS","" "12:00:17.9556718 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9556778 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9556874 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9556942 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\(Default)","SUCCESS","Type: REG_SZ, Length: 32, Data: BPLocFile Class" "12:00:17.9557010 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9557075 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9557185 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9557250 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\(Default)","SUCCESS","Type: REG_SZ, Length: 32, Data: BPLocFile Class" "12:00:17.9557322 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9557387 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9557489 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9557562 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9557634 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9557721 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9557809 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9557911 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9557987 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9558048 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9558132 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9558234 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9558299 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9558360 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9558421 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9558516 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9558580 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:17.9558633 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 166, Data: C:\Program Files (x86)\Common Files\Laserfiche\Batch Processor\BPObjectsClient.dll" "12:00:17.9558702 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9558763 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9558858 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9558922 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9559002 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocServer32","SUCCESS","" "12:00:17.9559055 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9559120 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9559215 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9559287 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9559356 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9559428 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9559504 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9559595 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9559667 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9559732 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9559800 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","" "12:00:17.9560047 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9560127 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9560196 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9560268 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9560333 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9560420 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9560515 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Desired Access: Read" "12:00:17.9560595 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9560659 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9560716 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: Name" "12:00:17.9560781 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9560876 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9560952 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9561017 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9561085 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{CDD6FAD8-6625-46C0-B3EB-93A6EF897EB4}","SUCCESS","" "12:00:17.9562112 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9562241 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9562336 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9562419 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9562495 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9562594 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9562708 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Desired Access: Read" "12:00:17.9562834 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9562917 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9562978 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: Name" "12:00:17.9563050 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9563168 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9563271 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9563343 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9563431 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Query: Name" "12:00:17.9563499 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9563602 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9563678 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {F62FCB5E-37DE-42CF-AD05-B6069C65A065}" "12:00:17.9563765 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","" "12:00:17.9563830 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","" "12:00:17.9563944 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9564023 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9564088 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9564176 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9564274 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9564369 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1","NAME NOT FOUND","Desired Access: Read" "12:00:17.9564453 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Desired Access: Read" "12:00:17.9564525 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9564594 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9564647 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: Name" "12:00:17.9564715 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9564814 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1\CLSID","NAME NOT FOUND","Desired Access: Read" "12:00:17.9564890 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9564959 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Desired Access: Read" "12:00:17.9565023 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Query: Name" "12:00:17.9565088 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9565198 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\BPObjectsClient.BPXMLMarkup.1\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9565270 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {F62FCB5E-37DE-42CF-AD05-B6069C65A065}" "12:00:17.9565350 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPXMLMarkup.1\CLSID","SUCCESS","" "12:00:17.9565419 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\BPObjectsClient.BPXMLMarkup.1","SUCCESS","" "12:00:17.9565491 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9565563 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9565635 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9565726 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9565859 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Desired Access: Read" "12:00:17.9565973 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9566034 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9566114 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9566221 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9566300 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9566365 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\TreatAs","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9566441 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","BUFFER TOO SMALL","Query: Name, Length: 0" "12:00:17.9566494 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9566574 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9566635 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9566734 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9566810 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9566874 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9566962 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","Query: Name" "12:00:17.9567026 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9567121 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9567197 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPXMLMarkup.1" "12:00:17.9567292 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","" "12:00:17.9567357 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9567422 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9567517 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Progid","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9567589 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9567657 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Progid","SUCCESS","Desired Access: Query Value" "12:00:17.9567722 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","Query: Name" "12:00:17.9567783 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9567878 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9567950 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID\(Default)","SUCCESS","Type: REG_SZ, Length: 60, Data: BPObjectsClient.BPXMLMarkup.1" "12:00:17.9568034 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\ProgID","SUCCESS","" "12:00:17.9568102 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9568167 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9568269 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9568345 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\(Default)","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9568421 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9568486 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9568581 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9568650 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\(Default)","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9568722 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9568786 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9568881 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9568954 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9569018 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9569109 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9569174 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9569277 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9569345 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144" "12:00:17.9569410 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9569486 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9569630 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9569714 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 24, Data: mscoree.dll" "12:00:17.9569824 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9569896 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9570007 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9570075 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 24, Data: mscoree.dll" "12:00:17.9570143 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9570212 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9570326 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9570398 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\ThreadingModel","SUCCESS","Type: REG_SZ, Length: 10, Data: Both" "12:00:17.9570482 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9570539 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9570603 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9570702 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9570778 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9570847 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocHandler32","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9570907 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9570972 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9571067 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9571135 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9571204 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocHandler","NAME NOT FOUND","Desired Access: Query Value" "12:00:17.9571295 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","" "12:00:17.9571557 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:17.9571641 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9571702 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9571770 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9571839 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9571926 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","NAME NOT FOUND","Desired Access: Read" "12:00:17.9572025 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Desired Access: Read" "12:00:17.9572105 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9572188 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:17.9572249 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: Name" "12:00:17.9572318 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9572424 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9572496 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9572565 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\TreatAs","NAME NOT FOUND","Desired Access: Read" "12:00:17.9572637 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}","SUCCESS","" "12:00:17.9572952 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9573017 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9573085 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9573188 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Server","NAME NOT FOUND","Desired Access: Read" "12:00:17.9573283 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\Server","NAME NOT FOUND","Desired Access: Read" "12:00:17.9573397 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9573466 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9573534 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9573640 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9573739 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9573823 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9573907 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Cached, SubKeys: 1, Values: 6" "12:00:17.9573971 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9574043 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9574157 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9574245 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9574313 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9574408 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9574492 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Index: 0, Name: 8.0.2.0" "12:00:17.9574595 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9574663 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9574762 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9574838 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9574910 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9574994 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9575062 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9575157 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9575233 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\ImplementedInThisVersion","NAME NOT FOUND","Length: 144" "12:00:17.9575309 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9575378 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9575473 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9575541 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9575602 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9575666 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9575761 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9575830 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9575895 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9575959 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9576088 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9576161 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9576233 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9576301 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9576400 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9576480 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9576571 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9576643 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9576704 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9576769 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9576833 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9576917 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9577004 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9577081 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9577138 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9577202 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9577309 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9577377 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9577449 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9577529 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9577670 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9577742 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9577829 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9577905 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9578008 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9578084 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9578149 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9578213 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9578316 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9578388 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9578449 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","SUCCESS","Type: REG_SZ, Length: 186, Data: Laserfiche.BatchProcessor, Version=8.0.2.0, Culture=neutral, PublicKeyToken=35de22b2ae3b724a" "12:00:17.9578529 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9578897 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9578970 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9579034 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9579126 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9579217 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9579297 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9579357 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Cached, SubKeys: 1, Values: 6" "12:00:17.9579418 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9579490 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9579593 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9579665 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9579730 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9579829 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9579905 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Index: 0, Name: 8.0.2.0" "12:00:17.9579981 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9580045 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9580144 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9580224 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9580292 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9580376 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9580452 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9580562 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9580635 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\ImplementedInThisVersion","NAME NOT FOUND","Length: 144" "12:00:17.9580692 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9580756 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9580855 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9580920 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9580977 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9581041 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9581136 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9581201 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9581262 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9581338 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9581437 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9581532 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9581631 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9581710 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9581771 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9581843 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9581916 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9582007 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9582098 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9582185 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9582246 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9582326 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9582425 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9582493 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9582558 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9582623 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9582729 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9582794 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9582858 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9582923 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9583018 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9583083 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\SupportedRuntimeVersions","NAME NOT FOUND","Length: 144" "12:00:17.9583155 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9583413 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9583482 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9583554 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9583645 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9583736 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9583812 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9583869 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Cached, SubKeys: 1, Values: 6" "12:00:17.9583930 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9583995 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9584097 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9584189 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9584253 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9584360 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9584436 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Index: 0, Name: 8.0.2.0" "12:00:17.9584523 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9584611 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9584709 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9584789 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9584865 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9584938 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9585002 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9585097 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9585166 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\ImplementedInThisVersion","NAME NOT FOUND","Length: 144" "12:00:17.9585226 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9585291 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9585386 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9585451 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9585508 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9585572 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9585667 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9585740 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9585850 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9585918 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9586021 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9586108 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9586173 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9586245 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9586340 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9586412 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9586504 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9586572 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9586652 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9586735 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9586804 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9586888 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9586979 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9587055 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9587112 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9587180 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9587275 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9587344 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9587408 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9587473 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9587568 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9587636 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9587701 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9587777 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9587872 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9587940 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9587997 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9588058 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9588153 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9588218 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9588275 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","SUCCESS","Type: REG_SZ, Length: 186, Data: Laserfiche.BatchProcessor, Version=8.0.2.0, Culture=neutral, PublicKeyToken=35de22b2ae3b724a" "12:00:17.9588340 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9588404 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9588503 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9588568 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\CodeBase","SUCCESS","Type: REG_SZ, Length: 82, Data: file:///F:\Laserfiche.BatchProcessor.dll" "12:00:17.9588640 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9588712 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9588811 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9588887 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\CodeBase","SUCCESS","Type: REG_SZ, Length: 82, Data: file:///F:\Laserfiche.BatchProcessor.dll" "12:00:17.9588967 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9589073 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9589142 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9589206 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9589286 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9589373 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9589450 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9589507 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9589571 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9589670 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9589742 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 24, Data: mscoree.dll" "12:00:17.9589807 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9589871 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9589974 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9590058 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 24, Data: mscoree.dll" "12:00:17.9590198 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9590305 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9590377 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9590445 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9590533 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9590624 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9590708 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9590769 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Cached, SubKeys: 1, Values: 6" "12:00:17.9590829 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9590890 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9590993 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9591061 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9591126 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9591221 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9591297 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Index: 0, Name: 8.0.2.0" "12:00:17.9591369 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9591445 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9591544 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9591616 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9591685 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9591753 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9591856 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9591966 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9592038 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\ImplementedInThisVersion","NAME NOT FOUND","Length: 144" "12:00:17.9592103 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9592175 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9592278 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9592350 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9592422 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9592502 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9592597 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9592665 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9592730 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9592795 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9592897 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9592966 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9593034 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9593099 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9593194 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9593258 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9593353 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9593441 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9593502 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9593574 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9593642 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9593726 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9593817 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9593916 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9593977 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9594049 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9594148 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9594216 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9594285 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9594349 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9594444 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9594513 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9594577 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9594649 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9594752 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9594817 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9594889 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9594957 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9595052 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9595121 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9595178 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","SUCCESS","Type: REG_SZ, Length: 186, Data: Laserfiche.BatchProcessor, Version=8.0.2.0, Culture=neutral, PublicKeyToken=35de22b2ae3b724a" "12:00:17.9595258 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9595414 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9595486 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9595566 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9595653 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Read" "12:00:17.9595744 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Desired Access: Read" "12:00:17.9595820 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9595877 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Cached, SubKeys: 1, Values: 6" "12:00:17.9595949 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9596018 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9596117 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9596189 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9596254 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9596349 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9596428 PM","WebDev.WebServer40.exe","13188","RegEnumKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Index: 0, Name: 8.0.2.0" "12:00:17.9596523 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: Name" "12:00:17.9596599 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9596710 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9596793 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9596869 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9596938 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9597006 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9597109 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9597177 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\ImplementedInThisVersion","NAME NOT FOUND","Length: 144" "12:00:17.9597246 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9597310 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9597405 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9597474 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Assembly","BUFFER OVERFLOW","Length: 144" "12:00:17.9597531 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9597595 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9597687 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9597751 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\Class","SUCCESS","Type: REG_SZ, Length: 106, Data: Laserfiche.BatchProcessor.ComponentModel.BPXMLMarkup" "12:00:17.9597816 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9597880 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9597976 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9598040 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9598120 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9598185 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32","SUCCESS","" "12:00:17.9598245 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:17.9598310 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9598386 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:17.9598470 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Read" "12:00:17.9598557 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Desired Access: Read" "12:00:17.9598629 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9598686 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9598751 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9598846 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9598914 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9598979 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9599044 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9599150 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9599215 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\RuntimeVersion","SUCCESS","Type: REG_SZ, Length: 22, Data: v2.0.50727" "12:00:17.9599279 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: Name" "12:00:17.9599352 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:17.9599458 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:17.9599538 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0\SupportedRuntimeVersions","NAME NOT FOUND","Length: 144" "12:00:17.9599610 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\Wow6432Node\CLSID\{F62FCB5E-37DE-42CF-AD05-B6069C65A065}\InprocServer32\8.0.2.0","SUCCESS","" "12:00:17.9602244 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9602343 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.8.0.Laserfiche.BatchProcessor__35de22b2ae3b724a","NAME NOT FOUND","Desired Access: Read" "12:00:17.9602484 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9602560 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Laserfiche.BatchProcessor__35de22b2ae3b724a","NAME NOT FOUND","Desired Access: Read" "12:00:17.9603685 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\Laserfiche.BatchProcessor\v4.0_8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9604365 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Laserfiche.BatchProcessor\v4.0_8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9604875 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\Laserfiche.BatchProcessor\v4.0_8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9605342 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9612230 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9614480 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","CreationTime: 6/5/2015 1:15:11 PM, LastAccessTime: 6/5/2015 1:15:11 PM, LastWriteTime: 6/5/2015 1:15:11 PM, ChangeTime: 6/5/2015 1:15:11 PM, AllocationSize: 2281472, EndOfFile: 2279816, FileAttributes: A" "12:00:17.9614590 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","" "12:00:17.9615985 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\Laserfiche.6bffd9e9#","NAME NOT FOUND","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9616845 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9957019 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9957323 PM","WebDev.WebServer40.exe","13188","QueryInformationVolume","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","VolumeCreationTime: 6/4/2015 10:21:36 AM, VolumeSerialNumber: F4E9-55BD, SupportsObjects: True, VolumeLabel: OS" "12:00:17.9957444 PM","WebDev.WebServer40.exe","13188","QueryAllInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","BUFFER OVERFLOW","CreationTime: 6/5/2015 1:15:11 PM, LastAccessTime: 6/5/2015 1:15:11 PM, LastWriteTime: 6/5/2015 1:15:11 PM, ChangeTime: 6/5/2015 1:15:11 PM, FileAttributes: A, AllocationSize: 2,281,472, EndOfFile: 2,279,816, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x300000006c818, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word" "12:00:17.9958619 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9958767 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","CreationTime: 6/5/2015 1:15:11 PM, LastAccessTime: 6/5/2015 1:15:11 PM, LastWriteTime: 6/5/2015 1:15:11 PM, ChangeTime: 6/5/2015 1:15:11 PM, AllocationSize: 2281472, EndOfFile: 2279816, FileAttributes: A" "12:00:17.9958851 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","" "12:00:17.9959200 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:17.9959295 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","AllocationSize: 2,281,472, EndOfFile: 2,279,816, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:17.9960755 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:17.9961192 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Image Base: 0x9480000, Image Size: 0x232000" "12:00:17.9961310 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Name: \Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll" "12:00:17.9961990 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9963211 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Image Base: 0x96c0000, Image Size: 0x232000" "12:00:17.9963317 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Name: \Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll" "12:00:17.9963902 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9965130 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","" "12:00:17.9965909 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9966096 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read" "12:00:17.9966286 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9966385 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider" "12:00:17.9966472 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider" "12:00:17.9966548 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider" "12:00:17.9966613 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider" "12:00:17.9966708 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","" "12:00:17.9966791 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9966894 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read" "12:00:17.9967000 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9967092 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1" "12:00:17.9967168 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll" "12:00:17.9967251 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll" "12:00:17.9967331 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll" "12:00:17.9967400 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll" "12:00:17.9967707 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9967799 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read" "12:00:17.9967905 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:17.9968012 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf" "12:00:17.9968088 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf" "12:00:17.9968156 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf" "12:00:17.9968217 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf" "12:00:17.9968331 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","" "12:00:17.9968411 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0" "12:00:17.9968506 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read" "12:00:17.9968741 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","" "12:00:17.9971581 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.INI","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9972292 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9972402 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.8.0.Interop.BPIClientLib__35de22b2ae3b724a","NAME NOT FOUND","Desired Access: Read" "12:00:17.9972558 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:17.9972634 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Interop.BPIClientLib__35de22b2ae3b724a","NAME NOT FOUND","Desired Access: Read" "12:00:17.9974983 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\Interop.BPIClientLib\v4.0_8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9975595 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Interop.BPIClientLib\v4.0_8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9976062 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\Interop.BPIClientLib\v4.0_8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9976515 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9978267 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:17.9978628 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","CreationTime: 6/5/2015 6:56:23 AM, LastAccessTime: 6/5/2015 6:56:23 AM, LastWriteTime: 6/5/2015 6:56:23 AM, ChangeTime: 6/5/2015 6:56:23 AM, AllocationSize: 114688, EndOfFile: 112936, FileAttributes: A" "12:00:17.9978716 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","" "12:00:17.9979940 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.BPIClientLib","NAME NOT FOUND","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:17.9980700 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0069107 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0069408 PM","WebDev.WebServer40.exe","13188","QueryInformationVolume","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","VolumeCreationTime: 6/4/2015 10:21:36 AM, VolumeSerialNumber: F4E9-55BD, SupportsObjects: True, VolumeLabel: OS" "12:00:18.0069533 PM","WebDev.WebServer40.exe","13188","QueryAllInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","BUFFER OVERFLOW","CreationTime: 6/5/2015 6:56:23 AM, LastAccessTime: 6/5/2015 6:56:23 AM, LastWriteTime: 6/5/2015 6:56:23 AM, ChangeTime: 6/5/2015 6:56:23 AM, FileAttributes: A, AllocationSize: 114,688, EndOfFile: 112,936, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x100000004df29, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word" "12:00:18.0070666 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0070810 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","CreationTime: 6/5/2015 6:56:23 AM, LastAccessTime: 6/5/2015 6:56:23 AM, LastWriteTime: 6/5/2015 6:56:23 AM, ChangeTime: 6/5/2015 6:56:23 AM, AllocationSize: 114688, EndOfFile: 112936, FileAttributes: A" "12:00:18.0070902 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","" "12:00:18.0071270 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:18.0071358 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","AllocationSize: 114,688, EndOfFile: 112,936, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.0071688 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Offset: 4,096, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:18.0072768 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:18.0073072 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Image Base: 0x5250000, Image Size: 0x1e000" "12:00:18.0073220 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Name: \Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll" "12:00:18.0073855 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0074893 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Image Base: 0x53b0000, Image Size: 0x1e000" "12:00:18.0074988 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Name: \Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll" "12:00:18.0075604 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0076835 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.dll","SUCCESS","" "12:00:18.0078242 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0078386 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.8.3.Laserfiche.Base__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0078565 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0078648 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.3.Laserfiche.Base__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0080925 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\Laserfiche.Base\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0081518 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Laserfiche.Base\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0082001 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\Laserfiche.Base\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0082461 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\Laserfiche.Base\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0082890 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.Base\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0083297 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC\Laserfiche.Base\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0086007 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Base.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0086798 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Base\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0087900 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Base.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0088573 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Base\Laserfiche.Base.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0089710 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Base.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0090394 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Base\Laserfiche.Base.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0091375 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Base.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0092002 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Base\Laserfiche.Base.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0092557 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0092667 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.8.3.Laserfiche.Project__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0092811 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0092887 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.3.Laserfiche.Project__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0094936 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\Laserfiche.Project\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0095491 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Laserfiche.Project\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0095963 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\Laserfiche.Project\v4.0_8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0096415 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\Laserfiche.Project\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0096863 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.Project\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0097301 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC\Laserfiche.Project\8.3.0.0__607dd73ee2bd1c00\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0099825 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Project.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0100562 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Project\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0101535 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Project.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0102147 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Project\Laserfiche.Project.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0103158 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Project.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0103823 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\Laserfiche.Project\Laserfiche.Project.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0104789 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Project.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0105431 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\Laserfiche.Project\Laserfiche.Project.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0106108 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0106222 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.8.3.BatchProcessor.Connection__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0106366 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0106446 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.3.BatchProcessor.Connection__607dd73ee2bd1c00","NAME NOT FOUND","Desired Access: Read" "12:00:18.0108499 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\BatchProcessor.Connection\v4.0_8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0109042 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\BatchProcessor.Connection\v4.0_8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0109525 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\BatchProcessor.Connection\v4.0_8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0109981 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\BatchProcessor.Connection\8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0110418 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\BatchProcessor.Connection\8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0110833 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC\BatchProcessor.Connection\8.3.0.0__607dd73ee2bd1c00\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0113395 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\BatchProcessor.Connection.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0114128 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\BatchProcessor.Connection\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0115185 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\BatchProcessor.Connection.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0115858 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\BatchProcessor.Connection\BatchProcessor.Connection.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0116861 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\BatchProcessor.Connection.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0117534 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\99c8b395\11b1c857\BatchProcessor.Connection\BatchProcessor.Connection.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0118564 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\BatchProcessor.Connection.exe","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0119195 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\bin\BatchProcessor.Connection\BatchProcessor.Connection.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0119864 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0119975 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.7.0.stdole__b03f5f7f11d50a3a","NAME NOT FOUND","Desired Access: Read" "12:00:18.0120115 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0120210 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.7.0.stdole__b03f5f7f11d50a3a","NAME NOT FOUND","Desired Access: Read" "12:00:18.0122225 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_32\stdole\v4.0_7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0122746 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC_MSIL\stdole\v4.0_7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0123175 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.Net\assembly\GAC\stdole\v4.0_7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0123608 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_32\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0124057 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0124924 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0125076 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","CreationTime: 6/4/2015 3:16:08 PM, LastAccessTime: 6/4/2015 3:16:08 PM, LastWriteTime: 6/4/2015 3:16:08 PM, ChangeTime: 6/4/2015 3:16:08 PM, AllocationSize: 24576, EndOfFile: 22344, FileAttributes: A" "12:00:18.0125163 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","" "12:00:18.0126353 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0126520 PM","WebDev.WebServer40.exe","13188","QueryDirectory","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\*","SUCCESS","Filter: *, 1: ." "12:00:18.0126668 PM","WebDev.WebServer40.exe","13188","QueryDirectory","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole","SUCCESS","0: .., 1: cb3d402cb9c5109e96282bee89f63262" "12:00:18.0127676 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0127832 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","CreationTime: 6/5/2015 9:07:29 AM, LastAccessTime: 6/5/2015 9:07:29 AM, LastWriteTime: 6/5/2015 9:07:29 AM, ChangeTime: 6/5/2015 9:07:29 AM, FileAttributes: A" "12:00:18.0127915 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","" "12:00:18.0128561 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll.aux","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0128805 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll.aux","SUCCESS","AllocationSize: 272, EndOfFile: 272, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.0128934 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll.aux","SUCCESS","Offset: 0, Length: 272, Priority: Normal" "12:00:18.0129120 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll.aux","SUCCESS","" "12:00:18.0130268 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0130409 PM","WebDev.WebServer40.exe","13188","QueryNetworkOpenInformationFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","CreationTime: 6/4/2015 3:16:08 PM, LastAccessTime: 6/4/2015 3:16:08 PM, LastWriteTime: 6/4/2015 3:16:08 PM, ChangeTime: 6/4/2015 3:16:08 PM, AllocationSize: 24576, EndOfFile: 22344, FileAttributes: A" "12:00:18.0130492 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll","SUCCESS","" "12:00:18.0131944 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0132077 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","CreationTime: 6/5/2015 9:07:29 AM, LastAccessTime: 6/5/2015 9:07:29 AM, LastWriteTime: 6/5/2015 9:07:29 AM, ChangeTime: 6/5/2015 9:07:29 AM, FileAttributes: A" "12:00:18.0132154 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","" "12:00:18.0132735 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0132959 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:18.0133298 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:18.0133720 PM","WebDev.WebServer40.exe","13188","Load Image","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Image Base: 0x6ace0000, Image Size: 0xf000" "12:00:18.0133841 PM","WebDev.WebServer40.exe","13188","QueryNameInformationFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Name: \Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll" "12:00:18.0134373 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.0135434 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole\cb3d402cb9c5109e96282bee89f63262\stdole.ni.dll","SUCCESS","" "12:00:18.0136168 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Windows\assembly\NativeImages_v4.0.30319_32\stdole","SUCCESS","" "12:00:18.0193071 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\assembly\GAC_MSIL\Interop.BPIClientLib\8.0.0.0__35de22b2ae3b724a\Interop.BPIClientLib.INI","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0218489 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Windows\assembly\GAC_MSIL\Laserfiche.BatchProcessor\8.0.2.0__35de22b2ae3b724a\Laserfiche.BatchProcessor.dll","SUCCESS","Offset: 49,664, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal" "12:00:18.0230490 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\oleaut32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.0233344 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0233500 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089","NAME NOT FOUND","Desired Access: Read" "12:00:18.0233652 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default","SUCCESS","Query: HandleTags, HandleTags: 0x100" "12:00:18.0233736 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089","NAME NOT FOUND","Desired Access: Read" "12:00:18.2437413 PM","w3wp.exe","7152","Thread Create","","SUCCESS","Thread ID: 14060" "12:00:18.8427729 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8428250 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","CreationTime: 12/31/2015 12:00:18 PM, LastAccessTime: 12/31/2015 12:00:18 PM, LastWriteTime: 12/31/2015 12:00:18 PM, ChangeTime: 12/31/2015 12:00:18 PM, FileAttributes: ANCI" "12:00:18.8428645 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","" "12:00:18.8429542 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8429683 PM","WebDev.WebServer40.exe","13188","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","CreationTime: 12/31/2015 12:00:18 PM, LastAccessTime: 12/31/2015 12:00:18 PM, LastWriteTime: 12/31/2015 12:00:18 PM, ChangeTime: 12/31/2015 12:00:18 PM, FileAttributes: ANCI" "12:00:18.8429778 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","" "12:00:18.8431321 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8432063 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","Offset: 0, Length: 3, Priority: Normal" "12:00:18.8432697 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8433302 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","AllocationSize: 32, EndOfFile: 32, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.8433731 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","" "12:00:18.8434282 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","Offset: 2, Length: 30" "12:00:18.8434704 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","END OF FILE","Offset: 32, Length: 4,096" "12:00:18.8435092 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.txt","SUCCESS","" "12:00:18.8437198 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 396, startime: 129827, endtime: 129827, seqnum: 0, connid: 0" "12:00:18.8437456 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 32, startime: 129827, endtime: 129827, seqnum: 0, connid: 0" "12:00:18.8519774 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 295, seqnum: 0, connid: 0" "12:00:18.8522447 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8522853 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","AllocationSize: 8, EndOfFile: 8, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.8523051 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Offset: 0, Length: 8, Priority: Normal" "12:00:18.8523564 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8523716 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:18.8523811 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name" "12:00:18.8523910 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:18.8523998 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1" "12:00:18.8524093 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8524180 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCU\Software\Classes\TypeLib","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:18.8524283 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes","SUCCESS","" "12:00:18.8524351 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: Name" "12:00:18.8524420 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8524484 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCU\Software\Classes\TypeLib","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8524556 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8524663 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8524773 PM","WebDev.WebServer40.exe","13188","RegSetInfoKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0" "12:00:18.8524834 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","Query: Name" "12:00:18.8524917 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8525043 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8525127 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8525203 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8525298 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: Name" "12:00:18.8525374 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8525484 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\409","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8525560 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8525643 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\409","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8525731 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: Name" "12:00:18.8525796 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8525898 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\9","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8525974 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8526043 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\9","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8526103 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: Name" "12:00:18.8526164 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8526259 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8526328 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8526396 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8526476 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: Name" "12:00:18.8526541 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8526639 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8526715 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8526780 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8526905 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","" "12:00:18.8526978 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","" "12:00:18.8527042 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: Name" "12:00:18.8527107 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8527202 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8527274 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8527339 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access" "12:00:18.8527407 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: Name" "12:00:18.8527472 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8527563 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","NAME NOT FOUND","Desired Access: Query Value" "12:00:18.8527635 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8527700 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","Desired Access: Query Value" "12:00:18.8527776 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","Query: Name" "12:00:18.8527841 PM","WebDev.WebServer40.exe","13188","RegQueryKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","Query: HandleTags, HandleTags: 0x401" "12:00:18.8527936 PM","WebDev.WebServer40.exe","13188","RegOpenKey","HKCU\Software\Classes\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","NAME NOT FOUND","Desired Access: Maximum Allowed" "12:00:18.8528023 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32\(Default)","BUFFER OVERFLOW","Length: 144" "12:00:18.8528099 PM","WebDev.WebServer40.exe","13188","RegQueryValue","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32\(Default)","SUCCESS","Type: REG_SZ, Length: 136, Data: C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll" "12:00:18.8528194 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0\win32","SUCCESS","" "12:00:18.8528783 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8529061 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 0, Length: 64, Priority: Normal" "12:00:18.8529209 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 248, Length: 4" "12:00:18.8529293 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 252, Length: 20" "12:00:18.8529376 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 496, Length: 40" "12:00:18.8529475 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 536, Length: 40" "12:00:18.8529543 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 576, Length: 40" "12:00:18.8529608 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 616, Length: 40" "12:00:18.8529684 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,274,112, Length: 16" "12:00:18.8529768 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,274,128, Length: 8" "12:00:18.8529840 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,296,016, Length: 2" "12:00:18.8529912 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,274,136, Length: 8" "12:00:18.8529984 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,296,940, Length: 2" "12:00:18.8530049 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,296,942, Length: 14" "12:00:18.8530136 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,275,968, Length: 16" "12:00:18.8530205 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,275,984, Length: 8" "12:00:18.8530277 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,281,704, Length: 16" "12:00:18.8530334 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,281,720, Length: 8" "12:00:18.8530399 PM","WebDev.WebServer40.exe","13188","ReadFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","Offset: 5,289,280, Length: 16" "12:00:18.8530479 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","AllocationSize: 7,979,008, EndOfFile: 7,976,328, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.8530574 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: " "12:00:18.8530642 PM","WebDev.WebServer40.exe","13188","QueryStandardInformationFile","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","AllocationSize: 7,979,008, EndOfFile: 7,976,328, NumberOfLinks: 1, DeletePending: False, Directory: False" "12:00:18.8530779 PM","WebDev.WebServer40.exe","13188","CreateFileMapping","C:\Program Files (x86)\Common Files\Laserfiche\LFObjects\LFSO83.dll","SUCCESS","SyncType: SyncTypeOther" "12:00:18.8531159 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0\0","SUCCESS","" "12:00:18.8531235 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}\1.0","SUCCESS","" "12:00:18.8531296 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCR\TypeLib\{E37EDA25-6FE3-4247-A3E6-4F78F2BCBA8C}","SUCCESS","" "12:00:18.8531357 PM","WebDev.WebServer40.exe","13188","RegCloseKey","HKCU\Software\Classes\TypeLib","SUCCESS","" "12:00:18.8533022 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 398, startime: 129827, endtime: 129827, seqnum: 0, connid: 0" "12:00:18.8533265 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 8, startime: 129827, endtime: 129827, seqnum: 0, connid: 0" "12:00:18.8596642 PM","WebDev.WebServer40.exe","13188","TCP Receive","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 295, seqnum: 0, connid: 0" "12:00:18.8599101 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SHARING VIOLATION","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a" "12:00:18.8599379 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","" "12:00:18.8601051 PM","WebDev.WebServer40.exe","13188","TCP Send","LPCW764BRYON.mvi.local:54742 -> LPCW764BRYON.mvi.local:http","SUCCESS","Length: 322, startime: 129827, endtime: 129827, seqnum: 0, connid: 0" "12:00:18.8689094 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8689375 PM","WebDev.WebServer40.exe","13188","QueryAttributeTagFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Attributes: ANCI, ReparseTag: 0x0" "12:00:18.8689504 PM","WebDev.WebServer40.exe","13188","SetDispositionInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","Delete: True" "12:00:18.8689652 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.tif","SUCCESS","" "12:00:18.8692902 PM","WebDev.WebServer40.exe","13188","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened" "12:00:18.8693252 PM","WebDev.WebServer40.exe","13188","QueryAttributeTagFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Attributes: ANCI, ReparseTag: 0x0" "12:00:18.8693359 PM","WebDev.WebServer40.exe","13188","SetDispositionInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","Delete: True" "12:00:18.8693495 PM","WebDev.WebServer40.exe","13188","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\ldp16ED.loc","SUCCESS","" "12:00:19.6158638 PM","WebDev.WebServer40.exe","13188","Thread Exit","","SUCCESS","Thread ID: 13352, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:19.8189905 PM","w3wp.exe","7152","Thread Exit","","SUCCESS","Thread ID: 14060, User Time: 0.0000000, Kernel Time: 0.0000000" "12:00:20.0527182 PM","WebDev.WebServer40.exe","13188","Thread Create","","SUCCESS","Thread ID: 12588" "12:00:20.4894617 PM","w3wp.exe","7152","Thread Create","","SUCCESS","Thread ID: 7296"