"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"10:31:57.9592030 AM","w3wp.exe","9548","Thread Exit","","SUCCESS","Thread ID: 13172, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:01.4921801 AM","w3wp.exe","9548","Thread Exit","","SUCCESS","Thread ID: 1172, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:01.4922360 AM","w3wp.exe","9548","Thread Exit","","SUCCESS","Thread ID: 13024, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:01.4922854 AM","w3wp.exe","9548","Thread Exit","","SUCCESS","Thread ID: 10788, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:01.5061205 AM","w3wp.exe","9548","Thread Create","","SUCCESS","Thread ID: 13488"
"10:32:01.5062163 AM","w3wp.exe","9548","Thread Create","","SUCCESS","Thread ID: 13336"
"10:32:01.5062649 AM","w3wp.exe","9548","Thread Create","","SUCCESS","Thread ID: 13052"
"10:32:02.7061744 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 11540"
"10:32:02.7067229 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7067434 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7067559 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7067639 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7067742 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7067852 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7068027 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7068118 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7068206 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7068323 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7068407 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7068487 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7068586 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7068666 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7068761 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7068844 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7068947 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7069015 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7070395 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 7732"
"10:32:02.7244051 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 13352"
"10:32:02.7245221 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7245419 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7245533 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7245621 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7245651 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7245727 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7245788 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694\Software\Laserfiche\Client8\Profile\OCR","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7245830 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7245978 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7246050 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7246130 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7246244 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7246328 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7246404 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7246495 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7246575 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7246673 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7246757 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7246845 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7246909 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7259947 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 4836"
"10:32:02.7261449 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7261627 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7261756 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7262045 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7262152 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7262262 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7262342 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7262475 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7262589 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7262707 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7262855 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7262950 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7263026 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7263106 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7263186 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7263292 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7263383 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7263467 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7264862 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 13404"
"10:32:02.7265421 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 13460"
"10:32:02.7268112 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7268302 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7268443 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7269115 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7269237 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7269306 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7269389 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7269507 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7269594 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7270066 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7270142 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7270218 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7270339 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7281948 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7282439 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7282583 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7282678 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7282815 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7282914 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7283013 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7283081 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7444200 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7444455 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7444638 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7444816 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7444987 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7445162 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7445299 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7445508 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7445698 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7445873 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7446093 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7446242 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7446382 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7446511 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7446652 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7446804 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7446933 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7447066 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7447234 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7447405 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7447553 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7447868 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7448002 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7448127 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7448245 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7448374 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7448518 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7448678 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7448792 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7448918 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7449081 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7449207 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7449336 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7449480 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7449606 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7449773 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7449902 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7450043 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7450157 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7491901 AM","w3wp.exe","13232","Thread Create","","SUCCESS","Thread ID: 13428"
"10:32:02.7495786 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7495953 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7496067 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7496166 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7496272 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7496386 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7496478 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7496607 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7497135 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7497356 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7497607 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7497778 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7497941 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7498067 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7498219 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7498374 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7498515 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7498648 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7498834 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7499013 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7499169 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7499359 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7499492 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694\SOFTWARE\Laserfiche\DocumentProcessor","NAME NOT FOUND","Desired Access: Query Value"
"10:32:02.7499617 AM","w3wp.exe","13232","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7499735 AM","w3wp.exe","13232","RegOpenKey","HKLM\SOFTWARE\Laserfiche\DocumentProcessor","SUCCESS","Desired Access: Query Value"
"10:32:02.7499910 AM","w3wp.exe","13232","RegQueryValue","HKLM\SOFTWARE\LASERFICHE\DocumentProcessor\UseOPFastMode","NAME NOT FOUND","Length: 144"
"10:32:02.7500032 AM","w3wp.exe","13232","RegCloseKey","HKLM\SOFTWARE\LASERFICHE\DocumentProcessor","SUCCESS",""
"10:32:02.7500332 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7500476 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7500606 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7500712 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7500841 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7500978 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7501126 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7501233 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7501351 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7501518 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7501640 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7501769 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7501917 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7502039 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7502206 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7502331 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7502495 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7502609 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7502818 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 5440, User Time: 0.0624004, Kernel Time: 0.0000000"
"10:32:02.7513404 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 11044, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:02.7515396 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 12956, User Time: 0.0312002, Kernel Time: 0.0000000"
"10:32:02.7545163 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7545376 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7545516 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7545634 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7545744 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7545858 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7545946 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7546086 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7546258 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7546432 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7547295 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7547535 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7547702 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7547831 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7547949 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 14228, User Time: 0.0156001, Kernel Time: 0.0000000"
"10:32:02.7547998 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7548504 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7548671 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7548804 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7556566 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7556825 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7557015 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7558573 AM","w3wp.exe","13232","CreateFile","C:\Windows\Temp","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:32:02.7558790 AM","w3wp.exe","13232","QueryBasicInformationFile","C:\Windows\Temp","SUCCESS","CreationTime: 7/13/2009 8:20:14 PM, LastAccessTime: 1/4/2016 10:31:22 AM, LastWriteTime: 1/4/2016 10:31:22 AM, ChangeTime: 1/4/2016 10:31:22 AM, FileAttributes: D"
"10:32:02.7558919 AM","w3wp.exe","13232","CloseFile","C:\Windows\Temp","SUCCESS",""
"10:32:02.7560843 AM","w3wp.exe","13232","CreateFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS","Desired Access: Generic Read, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"10:32:02.7564085 AM","w3wp.exe","13232","CloseFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS",""
"10:32:02.7564914 AM","w3wp.exe","13232","CreateFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:32:02.7565161 AM","w3wp.exe","13232","QueryAttributeTagFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS","Attributes: A, ReparseTag: 0x0"
"10:32:02.7565294 AM","w3wp.exe","13232","SetDispositionInformationFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS","Delete: True"
"10:32:02.7565841 AM","w3wp.exe","13232","CloseFile","C:\Windows\Temp\ldpC728.tmp","SUCCESS",""
"10:32:02.7567764 AM","w3wp.exe","13232","CreateFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created"
"10:32:02.7616522 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 12504, User Time: 0.0156001, Kernel Time: 0.0000000"
"10:32:02.7622543 AM","w3wp.exe","13232","WriteFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Offset: 0, Length: 4,096, Priority: Normal"
"10:32:02.7624706 AM","w3wp.exe","13232","WriteFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Offset: 4,096, Length: 3,298, Priority: Normal"
"10:32:02.7625139 AM","w3wp.exe","13232","CloseFile","C:\Windows\Temp\ldpC728.tif","SUCCESS",""
"10:32:02.7670970 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7671167 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7671285 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7671357 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7671456 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7671563 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"10:32:02.7671715 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7671794 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"10:32:02.7671878 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7671984 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7672068 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7672156 AM","w3wp.exe","13232","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"10:32:02.7672247 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"10:32:02.7672323 AM","w3wp.exe","13232","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7672418 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"10:32:02.7672505 AM","w3wp.exe","13232","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"10:32:02.7672608 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"10:32:02.7672676 AM","w3wp.exe","13232","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"10:32:02.7687725 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7687949 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7688136 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7688307 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7688500 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7688751 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7688911 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7689234 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7689485 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7689728 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7690032 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7690211 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7690371 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7690500 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7690667 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7690842 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7691017 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7691150 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7691340 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7691716 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7692153 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7694677 AM","w3wp.exe","13232","CreateFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"10:32:02.7695027 AM","w3wp.exe","13232","QueryAttributeTagFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Attributes: A, ReparseTag: 0x0"
"10:32:02.7695206 AM","w3wp.exe","13232","SetDispositionInformationFile","C:\Windows\Temp\ldpC728.tif","SUCCESS","Delete: True"
"10:32:02.7695419 AM","w3wp.exe","13232","CloseFile","C:\Windows\Temp\ldpC728.tif","SUCCESS",""
"10:32:02.7699668 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7699912 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7700090 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7700257 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7700440 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7700622 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7700771 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7700972 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7701177 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7701364 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:02.7701588 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:32:02.7701747 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7701869 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7701983 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7702124 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7702238 AM","w3wp.exe","13232","RegOpenKey","HKCR\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7702325 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"10:32:02.7702401 AM","w3wp.exe","13232","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"10:32:02.7702504 AM","w3wp.exe","13232","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7702607 AM","w3wp.exe","13232","RegOpenKey","HKCR\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"10:32:02.7702702 AM","w3wp.exe","13232","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"10:32:03.0701686 AM","w3wp.exe","9548","Thread Exit","","SUCCESS","Thread ID: 13488, User Time: 0.0000000, Kernel Time: 0.0000000"
"10:32:03.6591271 AM","w3wp.exe","9548","Thread Create","","SUCCESS","Thread ID: 13472"
"10:32:04.2711971 AM","w3wp.exe","13232","Thread Exit","","SUCCESS","Thread ID: 7732, User Time: 0.0000000, Kernel Time: 0.0000000"