"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"11:34:35.6018283 AM","svchost.exe","7612","UDP Receive","239.255.255.250:ssdp -> LPCW764DOUGS:54005","SUCCESS","Length: 133, seqnum: 0, connid: 0"
"11:34:35.6035343 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:35.6035977 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:35.6673537 AM","svchost.exe","1900","Thread Exit","","SUCCESS","Thread ID: 6720, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:35.7144006 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.7144184 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS","CreationTime: 6/4/2015 2:49:09 PM, LastAccessTime: 6/4/2015 2:49:09 PM, LastWriteTime: 9/5/2012 10:31:21 AM, ChangeTime: 6/4/2015 2:49:09 PM, FileAttributes: A"
"11:34:35.7144287 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS",""
"11:34:35.7145576 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.7145720 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS","CreationTime: 6/4/2015 2:49:09 PM, LastAccessTime: 6/4/2015 2:49:09 PM, LastWriteTime: 12/23/2015 2:20:12 PM, ChangeTime: 12/23/2015 2:20:12 PM, FileAttributes: A"
"11:34:35.7145804 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS",""
"11:34:35.7146750 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.7146883 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS","CreationTime: 12/29/2015 12:24:50 PM, LastAccessTime: 12/29/2015 12:24:50 PM, LastWriteTime: 12/29/2015 12:26:55 PM, ChangeTime: 12/29/2015 12:26:55 PM, FileAttributes: A"
"11:34:35.7146955 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS",""
"11:34:35.7147917 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.7148054 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS","CreationTime: 12/29/2015 12:30:02 PM, LastAccessTime: 12/29/2015 12:30:02 PM, LastWriteTime: 12/29/2015 12:31:10 PM, ChangeTime: 12/29/2015 12:31:10 PM, FileAttributes: A"
"11:34:35.7148130 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS",""
"11:34:35.7454761 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 5372, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:35.7748887 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.7749069 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:35.7749267 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:35.7749419 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:35.7828586 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.7828734 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:35.7828867 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:35.7828992 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:35.9804946 AM","devenv.exe","8460","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9805227 AM","devenv.exe","8460","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9809686 AM","itype.exe","3980","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9810237 AM","Explorer.EXE","1752","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\IvfhnyFghqvb.10.0","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 0D 00 00 00 5D 01 00 00 97 F1 A0 00"
"11:34:35.9810488 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\IvfhnyFghqvb.10.0","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 0D 00 00 00 5E 01 00 00 97 F1 A0 00"
"11:34:35.9810875 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9811054 AM","itype.exe","3980","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9811103 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1,612, Data: 0E 00 00 00 6C 01 00 00 6F 11 00 00 71 2C 31 09"
"11:34:35.9811149 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9811373 AM","Explorer.EXE","1752","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Hfref\Oelba Cbhygre\NccQngn\Ybpny\Grzc\Cebpzba64.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 00 00 00 00 57 00 00 00 61 66 18 00"
"11:34:35.9811761 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9811921 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9812039 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Hfref\Oelba Cbhygre\NccQngn\Ybpny\Grzc\Cebpzba64.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 00 00 00 00 57 00 00 00 15 83 18 00"
"11:34:35.9812107 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9812616 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1,612, Data: 0E 00 00 00 6C 01 00 00 6F 11 00 00 25 49 31 09"
"11:34:35.9812689 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9812833 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9812970 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9813745 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9813878 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9814008 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9814103 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9814217 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9814376 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9814528 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9814684 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9815266 AM","itype.exe","3980","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9816106 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9816296 AM","itype.exe","3980","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9816421 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9817048 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9817094 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9817220 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9817242 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9817398 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9817417 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9817489 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9817592 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9817740 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9817831 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9817919 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9817995 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9818006 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9818204 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9818348 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9818356 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9818462 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9818550 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9818569 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9818672 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9818770 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9819257 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9819401 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9819417 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9819572 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9820025 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9820127 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9820253 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9820329 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\EnableAccumulateScrolling","NAME NOT FOUND","Length: 144"
"11:34:35.9820412 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9821055 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9821241 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9821363 AM","itype.exe","3980","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9821393 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9822066 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9822222 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9822328 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9822393 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9822484 AM","itype.exe","3980","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9822575 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9822952 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9823092 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9823184 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9823244 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9823339 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9823480 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9823795 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9823929 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9823982 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9824107 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9824126 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9824255 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9824681 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9824738 AM","itype.exe","3980","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9824883 AM","itype.exe","3980","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9825023 AM","itype.exe","3980","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9825289 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9825392 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9825495 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9825533 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9825574 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9825673 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9825688 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9825753 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9825783 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9825841 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9825924 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9825993 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9826072 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9826179 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9826270 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9826342 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9826350 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9826418 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9826494 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9826506 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9826582 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9826639 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9826673 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9826764 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9826829 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9826916 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9827000 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9827083 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9827156 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9827220 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9827285 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9827304 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9827369 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9827433 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9827452 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9827524 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9827574 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9827597 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9827688 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9827756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9827832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9827901 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9827962 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9828053 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9828087 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9828281 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9828471 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9828942 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9829064 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9829106 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9829193 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9829246 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9829273 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\EnableAccumulateScrolling","NAME NOT FOUND","Length: 144"
"11:34:35.9829395 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9829417 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9829486 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9829588 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9829676 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9829771 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9829858 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9829931 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9830010 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9830094 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\Path","SUCCESS","Type: REG_SZ, Length: 150, Data: C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9830197 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Name: \Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9830200 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9830299 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9830383 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9830463 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9830524 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9830603 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9830664 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9830744 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9830816 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9830885 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9830961 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9831124 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9831170 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9831250 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9831291 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","CreationTime: 2/21/2011 3:04:48 PM, LastAccessTime: 6/4/2015 3:25:09 PM, LastWriteTime: 2/21/2011 3:04:48 PM, ChangeTime: 6/4/2015 3:25:09 PM, FileAttributes: A"
"11:34:35.9831337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9831390 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS",""
"11:34:35.9831402 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9831489 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9831565 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9831641 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9831709 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9831770 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9831846 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9831968 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9831991 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9832059 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9832143 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Filter: Common7, 1: Common7"
"11:34:35.9832154 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9832223 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9832314 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0","SUCCESS",""
"11:34:35.9832318 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9832390 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9832477 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9832546 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9832607 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9832679 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9832819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9832823 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9832899 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9832960 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Filter: IDE, 1: IDE"
"11:34:35.9832979 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9833040 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9833086 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7","SUCCESS",""
"11:34:35.9833116 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9833200 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9833279 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\","SUCCESS","Desired Access: Read"
"11:34:35.9833374 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9833439 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\GameMode","NAME NOT FOUND","Length: 144"
"11:34:35.9833507 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping","SUCCESS",""
"11:34:35.9833576 AM","ipoint.exe","3960","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9833705 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe","SUCCESS","Filter: devenv.exe, 1: devenv.exe"
"11:34:35.9833842 AM","ipoint.exe","3960","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE","SUCCESS",""
"11:34:35.9834135 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9834146 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9834245 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9834260 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9834328 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9834370 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9834484 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9834583 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9834663 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9834762 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9834845 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9834921 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9835005 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9835119 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9835241 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9835332 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9835404 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9835492 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9835583 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9835587 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9835678 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9835712 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9835769 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9835819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9835857 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9835929 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9835959 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9836092 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9836107 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9836172 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9836221 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9836263 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9836313 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9836396 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9836419 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9836484 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9836514 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9836575 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9836617 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9836662 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9836689 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9836746 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9836773 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9836818 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9836849 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9836902 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9836932 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9836978 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9837008 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9837069 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9837081 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9837157 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9837168 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9837229 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Timestamp","SUCCESS","Type: REG_DWORD, Length: 4, Data: 30492647"
"11:34:35.9837312 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9837385 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9837419 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9837483 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9837514 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:35.9837582 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9837601 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9837651 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9837681 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9837738 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9837772 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9837818 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9837856 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9837932 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9837947 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9838035 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9838046 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9838126 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9838137 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9838240 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9838263 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Path","BUFFER OVERFLOW","Length: 144"
"11:34:35.9838354 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\Path","SUCCESS","Type: REG_SZ, Length: 150, Data: C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe"
"11:34:35.9838365 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9838483 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9838491 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9838578 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9838639 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9838647 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9838734 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9838742 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9838818 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9838825 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9838901 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9838913 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9839012 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9839015 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9839103 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9839107 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9839209 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9839213 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9839289 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9839380 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9839384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9839475 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9839487 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9839566 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9839635 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9839654 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9839741 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9839817 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9839867 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9839977 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9840049 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9840133 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9840209 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9840292 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9840369 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9840433 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9840513 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9840627 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9840684 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9840707 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9840779 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9840847 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9840923 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9840996 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9841079 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9841155 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9841220 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9841296 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9841410 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9841490 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9841596 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9841631 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9841676 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9841840 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9841927 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9842060 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9842071 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9842182 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9842212 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9842265 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9842303 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9842353 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9842379 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9842455 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9842471 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9842528 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9842547 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9842615 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9842634 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9842718 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9842737 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9842816 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9842843 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9842904 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9842930 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9843010 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843048 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843105 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9843140 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9843185 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9843231 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9843269 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9843295 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9843371 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9843417 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9843444 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843523 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9843561 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843603 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9843645 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9843672 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9843725 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9843767 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9843790 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9843869 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9843904 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843942 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9843991 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9844040 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9844071 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9844120 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9844139 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9844185 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9844234 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9844269 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9844360 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9844402 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9844447 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9844527 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9844535 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9844626 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9844641 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9844713 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9844747 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9844793 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9844869 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9844873 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9844968 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9844995 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9845052 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9845082 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9845116 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9845147 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9845196 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9845226 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9845264 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9845340 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9845413 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9845454 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9845477 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9845549 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9845561 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9845652 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9845675 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9845736 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9845759 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9845819 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9845899 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9845903 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9846013 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9846101 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9846165 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9846241 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9846310 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9846390 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9846466 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9846538 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9846557 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9846637 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9846743 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9846819 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9846887 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9846956 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9847032 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9847097 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9847173 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9847268 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9847332 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9847393 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9847423 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9847465 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9847560 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9847644 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9847709 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9847735 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9847807 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9847823 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9847895 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9847902 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9848020 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9848142 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9848172 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9848226 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9848256 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9848317 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9848343 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9848397 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9848423 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9848469 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9848492 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9848556 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9848579 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9848674 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9848754 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9848761 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9848853 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9848860 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\106","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9848921 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9849009 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9849020 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9849107 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9849153 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9849195 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9849275 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9849305 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9849351 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9849385 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9849430 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9849522 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9849613 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9849621 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9849700 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9849833 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9849940 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9850027 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9850092 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9850179 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9850210 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9850404 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9850445 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9850563 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9850594 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9850677 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9850822 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9850825 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9850932 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9850943 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9851057 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9851076 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851133 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9851164 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9851225 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9851259 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9851304 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851339 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9851426 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9851430 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9851510 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851533 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9851597 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9851616 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9851704 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9851745 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851833 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\106","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9851863 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851939 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9851989 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9852042 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9852091 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9852144 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9852167 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9852224 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9852255 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9852323 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9852338 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9852441 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9852445 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9852521 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9852589 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9852665 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9852787 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9852867 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9852950 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9853015 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9853091 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9853159 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9853235 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9853308 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9853368 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9853444 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9853555 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9853635 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9853771 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9853851 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9853923 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9853988 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9854064 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9854129 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9854209 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9854285 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9854345 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9854364 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9854444 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9854528 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9854551 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9854627 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9854695 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9854703 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9854767 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9854866 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9854935 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9854950 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9855041 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9855049 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9855117 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9855220 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9855231 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9855315 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9855326 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9855413 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9855482 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9855535 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9855585 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9855626 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9855664 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9855710 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9855752 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9855805 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9855835 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9855900 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9855911 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9856006 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9856018 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9856109 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9856113 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9856204 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9856223 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9856276 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9856318 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9856360 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9856390 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9856482 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9856516 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9856558 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9856607 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9856649 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9856691 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9856767 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9856778 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9856858 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9856892 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9856942 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9856983 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9857037 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9857158 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9857166 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9857249 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9857257 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9857356 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9857386 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9857424 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9857504 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9857565 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9857611 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9857652 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9857725 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9857744 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9857820 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9857831 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9857896 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9857964 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9857987 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9858036 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9858120 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9858124 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9858215 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9858242 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9858325 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9858344 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9858428 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9858458 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9858519 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9858568 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9858595 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9858660 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9858679 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9858766 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9858895 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9858998 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9859127 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9859218 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9859321 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9859447 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9859523 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9859614 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9859773 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9859865 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9859948 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9860017 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9860070 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9860100 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9860169 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9860184 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9860271 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9860294 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9860351 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9860382 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9860420 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9860484 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9860511 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9860553 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9860629 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9860640 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9860735 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9860819 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9860830 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9860887 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9860921 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9860975 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9861005 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9861047 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9861073 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9861134 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9861157 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9861210 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9861233 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9861286 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9861324 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9861370 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9861416 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9861488 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9861492 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9861587 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9861590 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9861716 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9861735 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9861807 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9861826 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9861906 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9861921 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9861970 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9861993 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9862054 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9862081 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9862123 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9862153 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9862206 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9862237 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9862278 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9862313 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9862343 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9862381 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9862430 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9862476 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9862590 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9862647 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9862670 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9862738 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9862757 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9862833 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9862864 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9862909 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9862955 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9862997 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9863027 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9863069 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9863122 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9863156 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9863229 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9863236 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9863316 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9863343 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9863407 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9863430 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9863529 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9863613 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9863639 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9863689 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9863730 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9863757 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9863814 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9863844 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9863894 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9863917 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9863981 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9864008 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9864057 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9864088 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9864149 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9864164 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9864236 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9864301 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9864358 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9864460 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9864468 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9864620 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9864700 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9864780 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9864856 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9864935 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9865008 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9865087 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9865160 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9865224 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9865304 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9865468 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9865555 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9865680 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9865779 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9865832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\104","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9865931 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9865965 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9866015 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9866057 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9866114 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9866159 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9866205 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9866235 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9866323 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9866414 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9866768 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9866973 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9866999 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9867189 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9867421 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9867520 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9867657 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9867741 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9867824 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9867904 AM","ipoint.exe","3960","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9868033 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9868117 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9868223 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9868250 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9868307 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9868410 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9868459 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9868486 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9868706 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9868756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9868816 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9868873 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9869025 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9869113 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9869215 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9869307 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9869318 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9869459 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9869485 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9869565 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9869641 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9869664 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9869801 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9869854 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9869892 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\104","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9869945 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9870002 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9870086 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9870135 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9870192 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9870223 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9870272 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9870314 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9870360 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9870390 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9870470 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9870496 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9870572 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9870649 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9870721 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9870785 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9870877 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9870991 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9871032 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9871078 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9871150 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9871200 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9871215 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9871295 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9871356 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9871363 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9871454 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9871527 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9871599 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9871610 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9871724 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9871732 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9872492 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9872709 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9872838 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9872941 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9873017 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9873112 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9873199 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9873256 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9873294 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9873363 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9873378 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9873465 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9873473 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9873598 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9873610 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9873678 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9873731 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9873765 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9873815 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9873845 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9873895 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9873921 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9873959 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9874047 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9874054 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9874119 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9874184 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9874210 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9874271 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9874286 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9874374 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9874412 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9874453 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9874499 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9874537 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9874609 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9874689 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9874720 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9874765 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9874811 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9874834 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9874894 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9874921 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9874967 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9875050 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9875081 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9875119 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9875164 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9875198 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9875248 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9875275 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9875324 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9875366 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9875408 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9875457 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9875487 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9875575 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9875655 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9875731 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9875814 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9875886 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9875951 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9876027 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9876099 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9876160 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9876232 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9876441 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9876498 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9876647 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9876749 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9876863 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9877027 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9877126 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9877209 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9877274 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9877358 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9877430 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9877513 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9877586 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9877654 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9877730 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9877840 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9877928 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9878008 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9878133 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9878232 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9878312 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9878395 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9878464 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9878551 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9878555 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9878642 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9878696 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9878715 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9878794 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9878920 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9878927 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9879030 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9879064 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9879110 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9879190 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9879193 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9879277 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9879349 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9879425 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9879551 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9879653 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9879775 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9879878 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9879950 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9880011 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9880246 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9880345 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9880391 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9880509 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9880630 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9880722 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9880790 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9880931 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9881007 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9881090 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9881143 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9881223 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9881368 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9881455 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9881463 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9881550 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9881581 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9881622 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9881710 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9881778 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9881866 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9881877 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9881946 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9881999 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9882022 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9882120 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9882136 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9882227 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9882261 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9882326 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9882345 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9882424 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9882436 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9882508 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9882569 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9882637 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9882664 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9882710 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9882740 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9882789 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9882839 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9882865 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9882941 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9882976 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9883029 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9883109 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9883154 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9883196 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9883242 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9883268 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9883352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9883386 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9883432 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9883466 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9883519 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9883546 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9883618 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9883629 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9883690 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9883713 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9883781 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9883789 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9883877 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9883956 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9883987 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9884025 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9884082 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\801","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9884108 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9884222 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9884234 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9884317 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9884340 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9884393 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9884450 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9884469 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9884530 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9884565 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9884625 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9884671 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9884724 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9884758 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9884831 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9884891 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9884967 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9885177 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9885275 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9885336 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9885367 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9885431 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9885534 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9885557 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9885674 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9885705 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9885762 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9885853 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9885933 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9885979 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9886028 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9886146 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9886226 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9886294 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9886359 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9886435 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9886507 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9886587 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9886659 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9886724 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9886921 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9887115 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9887199 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9887275 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9887336 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9887419 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9887480 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9887583 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9887662 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9887723 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9887796 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9887872 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9888024 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9888115 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9888198 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9888267 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9888343 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9888392 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9888472 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9888590 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9888738 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9888826 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\801","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9888928 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9888932 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9889019 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9889122 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9889202 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9889286 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9889373 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9889460 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9889571 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9889677 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9889757 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9889856 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9889970 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9889981 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9890050 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9890152 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9890160 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9890323 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9890331 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9890418 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9890506 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9890578 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9890616 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9890696 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9890741 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9890871 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9890950 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9891038 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9891049 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9891156 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9891182 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9891262 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9891300 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9891338 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9891399 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9891426 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9891517 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9891547 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9891589 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9891673 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9891722 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9891791 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9891851 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9891874 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9891965 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9891969 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9892038 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9892068 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9892117 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9892186 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9892201 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9892288 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9892357 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9892368 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9892448 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9892479 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9892528 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9892585 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9892672 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9892684 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9892779 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9892790 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9892866 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9892938 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9892942 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9893041 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9893083 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9893113 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9893208 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9893277 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9893281 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9893398 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9893414 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9893486 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9893531 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9893619 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9893638 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9893702 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9893752 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9893779 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9893843 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9893851 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9893950 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9893991 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9894143 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9894223 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9894295 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9894360 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9894440 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9894558 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9894634 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9894717 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9894778 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9894850 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9894980 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9895060 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9895128 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9895193 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9895265 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9895333 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9895409 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9895478 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9895538 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9895614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9895725 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9895797 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9895869 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9895926 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9895998 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9896063 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9896071 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9896166 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9896192 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9896238 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9896314 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9896318 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9896398 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9896504 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9896610 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9896645 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9896705 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9896747 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9896789 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9896819 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9896857 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9896911 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9896956 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9896990 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9897040 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9897086 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9897127 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9897173 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9897211 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9897245 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9897279 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9897329 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9897363 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9897481 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9897561 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9897576 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9897656 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9897667 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9897758 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9897762 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9897861 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9897865 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9897956 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9897986 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9898070 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9898157 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9898188 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9898245 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9898336 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9898484 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9898507 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9898591 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9898606 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9898674 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9898724 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9898769 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9898819 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9898918 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9898937 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9898997 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9899024 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9899085 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9899108 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9899180 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9899188 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9899275 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9899347 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9899435 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9899507 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9899571 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9899651 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9899834 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9899914 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9899993 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9900066 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9900088 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9900157 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9900225 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9900275 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9900301 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9900396 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9900431 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9900476 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9900556 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9900662 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9900666 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9900765 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9900898 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9901001 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9901100 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9901172 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9901259 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9901343 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9901423 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9901559 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9901651 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9901780 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9901864 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9901970 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9902061 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9902168 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9902263 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9902555 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9902704 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9902795 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9902901 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9902996 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9903008 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9903114 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9903164 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9903205 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9903327 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9903331 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9903426 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9903555 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9903604 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9903650 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9903696 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9903787 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9903806 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9903855 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9903890 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9903947 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9904023 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9904061 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9904137 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9904163 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9904239 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9904251 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9904327 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9904338 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9904418 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9904441 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9904517 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9904566 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9904638 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9904654 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9904733 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9904741 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9904889 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9904931 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9904984 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9905022 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9905072 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9905102 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9905140 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9905186 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9905224 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9905262 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9905300 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9905349 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9905387 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9905433 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9905471 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9905543 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9905562 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9905634 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9905653 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9905790 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9905836 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9905881 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9905931 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9905961 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906014 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906030 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9906094 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9906121 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9906189 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9906212 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9906262 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9906296 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9906345 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9906372 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906425 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906440 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9906490 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9906524 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9906573 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9906642 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9906680 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9906737 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9906767 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9906813 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906843 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9906889 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9906915 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9906976 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9906999 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9907060 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9907094 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9907151 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9907181 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9907227 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9907261 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9907292 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9907330 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9907371 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9907409 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9907485 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9907565 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9907626 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9907657 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9907740 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9907744 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9907831 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9907843 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9907915 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9908002 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9908010 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9908109 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9908135 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9908189 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9908257 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9908299 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9908341 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9908386 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9908413 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9908459 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9908497 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9908546 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9908580 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9908652 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9908668 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9908770 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9908839 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9908850 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9908926 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9909002 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9909021 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9909086 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9909101 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9909173 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9909200 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9909238 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9909340 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9909344 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9909420 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9909432 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9909523 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9909530 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9909641 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9909713 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9909766 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9909789 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9909892 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9910006 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9910063 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9910093 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9910196 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9910196 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9910264 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9910344 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9910352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9910439 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9910458 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9910526 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9910595 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9910606 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9910724 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9910735 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9910838 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9910971 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9911062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9911138 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9911207 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9911283 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9911359 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9911431 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9911439 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9911511 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9911587 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9911640 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9911667 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9911815 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9911842 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9911902 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9912005 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9912104 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9912130 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9912207 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9912267 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9912294 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9912400 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9912438 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9912492 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9912571 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9912685 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9912803 AM","ipoint.exe","3960","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9912967 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9913085 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9913210 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9913286 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9913332 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9913457 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9913476 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9913579 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9913617 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9913693 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9913826 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9913837 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9913932 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9914058 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9914153 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9914252 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9914339 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9914381 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9914464 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9914571 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9914594 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9914651 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9914791 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9914829 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9914928 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9915042 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9915050 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9915133 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9915160 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9915282 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9915361 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9915449 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9915540 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9915563 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9915639 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9915738 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9915814 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9915913 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9915989 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9916068 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9916141 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9916205 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9916297 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9916300 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9916403 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9916449 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9916479 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:35.9916551 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9916593 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9916612 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9916707 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9916798 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9916844 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9916874 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:35.9916943 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9916950 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9917015 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:35.9917106 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9917114 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:35.9917216 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9917311 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9917376 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9917551 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9917627 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9917714 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9917790 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9917855 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9917931 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9918026 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9918102 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9918178 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9918243 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9918319 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9918383 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9918459 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9918528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9918592 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9918668 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9918817 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9918897 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9918973 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9919037 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9919109 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9919185 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9919269 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9919337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9919398 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9919471 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9919596 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9919718 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9919908 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9919972 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9920052 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9920117 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9920193 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9920261 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9920333 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9920451 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9920561 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9920634 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9920717 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9920790 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9920862 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9920995 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9921071 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9921143 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9921204 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9921295 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9921367 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9921443 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9921512 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9921576 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9921675 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9921797 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9921884 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9921964 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9922040 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9922124 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9922204 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9922276 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9922356 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9922420 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9922500 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9922705 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9922789 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9922865 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9922930 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9923009 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9923082 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9923161 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9923234 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9923302 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9923386 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9923500 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9923580 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9923652 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9923716 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9923796 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9923865 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9923944 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9924017 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9924085 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9924176 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9924306 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9924389 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9924496 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9924575 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9924674 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9924743 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9924823 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9924910 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9925701 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9925853 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9926001 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9926221 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9926309 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9926438 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9926518 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9926601 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9926677 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9926761 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9926837 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9926913 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9927039 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9927130 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9927236 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9927324 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9927415 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9927487 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9927567 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9927666 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9928403 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9928548 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9928700 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9928916 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9929008 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9929148 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9929228 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9929315 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9929380 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9929468 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9929532 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9929616 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9929696 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9929756 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9929832 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9929931 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9930011 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9930087 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9930148 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9930232 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9930296 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9930384 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9930471 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9930539 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9930619 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9930764 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9930844 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9930916 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9930980 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9931056 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9931125 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9931205 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9931273 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9931334 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9931448 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9931570 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9931646 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9931718 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9931782 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9931862 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9931931 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9932014 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9932083 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9932144 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9932216 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9932318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9932391 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9932463 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9932524 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9932592 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9932904 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9932991 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9933060 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9933117 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9933189 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9933253 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9933333 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9933402 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9933459 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9933535 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9933649 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9933751 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9933827 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9933892 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9933964 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9934029 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9934101 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9934170 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9934227 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9934299 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9934508 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9934588 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9934668 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9934732 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9934808 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9934884 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9934964 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9935036 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9935105 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9935203 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9935318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9935394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9935466 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9935527 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9935610 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9935679 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9935762 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9935834 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9935907 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9935987 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9936146 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9936230 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9936332 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9936416 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9936507 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9936579 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9936656 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9936743 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9937522 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9937682 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9937857 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9938066 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9938153 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9938286 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9938381 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9938465 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9938533 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9938613 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9938685 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9938761 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9938879 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9938963 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9939073 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9939153 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9939248 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9939324 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9939537 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9939636 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9940388 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9940533 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9940685 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9940905 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9940993 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9941152 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9941236 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9941331 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9941510 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9941608 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9941681 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9941753 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9941829 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9941901 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9941981 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9942076 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9942152 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9942224 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9942285 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9942361 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9942426 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9942513 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9942582 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9942646 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9942718 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9942870 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9942946 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9943019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9943079 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9943163 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9943232 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9943308 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9943380 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9943444 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9943517 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9943623 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9943695 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9943764 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9943824 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9943897 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9943961 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9944034 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9944098 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9944159 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9944231 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9944341 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9944429 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9944509 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9944577 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9944646 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9944775 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9944862 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9944934 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9944991 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9945064 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9945128 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9945204 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9945273 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9945334 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9945410 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9945516 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9945592 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9945660 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9945733 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9945820 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9945881 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9945953 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9946022 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9946086 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9946162 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9946352 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9946436 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9946512 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9946588 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9946679 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9946751 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9946827 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9946896 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9946960 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9947040 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9947154 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9947230 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9947303 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9947363 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9947443 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9947508 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9947584 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9947660 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9947732 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9947816 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9948055 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9948146 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9948249 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9948333 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9948424 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9948641 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9948724 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9948812 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9949579 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9949724 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9949868 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9950115 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9950218 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9950343 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9950431 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9950522 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9950591 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9950678 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9950754 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9950834 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9950959 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9951043 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9951138 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9951222 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9951313 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9951396 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9951488 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9951590 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9952347 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9952499 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:35.9952655 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:35.9952871 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9952959 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9953107 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9953194 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9953278 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9953346 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9953434 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9953498 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9953578 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9953654 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9953734 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9953822 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9953932 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9954019 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9954103 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9954167 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9954247 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9954319 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9954411 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9954487 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9954548 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9954624 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9954768 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9954844 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9954920 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9954981 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9955057 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9955125 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9955198 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9955270 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9955334 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9955407 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9955521 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9955604 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9955684 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9955768 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9955844 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9955908 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9955988 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9956060 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9956125 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9956209 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9956319 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9956395 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9956467 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9956528 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9956593 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9956722 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9956813 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9956889 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9956950 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9957026 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9957094 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9957205 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9957281 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9957341 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9957425 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9957539 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9957619 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9957691 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9957760 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9957836 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9957900 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9957976 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9958045 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9958113 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9958185 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9958394 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9958489 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9958577 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9958649 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9958725 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9958805 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9958892 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9958976 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9959101 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9959185 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9959314 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9959409 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9959497 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9959599 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9959683 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9959755 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9959831 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9959907 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9959972 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9960052 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9960204 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9960287 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9960405 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9960496 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9960591 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9960664 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9960743 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9960842 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9961656 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9961842 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:35.9962005 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:35.9962233 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9962321 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9962454 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9962541 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9962636 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9962705 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9962796 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9962880 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9962959 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9963081 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9963169 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9963271 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9963351 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9963457 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9963545 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9963628 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9963724 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9964488 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9964632 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:35.9964773 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:35.9964982 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9965069 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9965214 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9965293 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9965381 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9965453 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9965548 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9965613 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9965696 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9965776 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9965837 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9965917 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9966019 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9966114 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9966198 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9966266 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9966343 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9966407 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9966487 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9966559 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9966631 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9966707 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9966856 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9966935 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9967012 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9967080 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9967160 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9967243 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9967319 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9967407 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9967483 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9967563 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9967688 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9967764 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9967833 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9967905 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9967985 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9968049 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9968125 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9968194 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9968254 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9968331 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9968429 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9968532 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9968612 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9968684 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9968775 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9968908 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9969003 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9969076 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9969136 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9969212 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9969277 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9969364 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9969444 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9969509 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9969615 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9969733 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9969809 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9969878 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9969938 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9970056 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9970132 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9970208 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9970281 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9970341 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9970414 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9970634 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9970725 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9970809 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9970892 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9970976 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9971048 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9971136 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9971216 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9971284 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9971364 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9971478 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9971558 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9971634 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9971695 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9971774 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9971843 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9971926 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9971999 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9972071 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9972166 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9972318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9972402 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\706","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9972512 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9972599 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9972690 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9972759 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9972842 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9972930 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9973515 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9973671 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9973838 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9974066 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9974169 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9974291 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9974374 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9974469 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9974595 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9974690 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9974777 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9974869 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9975009 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9975142 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\706","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9975283 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9975366 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9975458 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9975526 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9975617 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9975705 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9976180 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9976336 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9976507 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9976731 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9976830 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9976971 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9977047 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9977130 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9977199 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9977286 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9977351 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9977472 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9977548 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9977613 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9977716 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9977894 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9977989 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9978080 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9978149 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9978240 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9978309 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9978388 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9978468 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9978571 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9978651 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9978803 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9978879 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9978951 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9979012 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9979088 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9979156 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9979232 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9979297 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9979358 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9979434 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9979544 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9979620 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9979685 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9979745 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9979818 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9979878 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9979954 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9980019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9980080 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9980152 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9980251 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9980335 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9980407 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9980464 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9980532 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9980665 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9980745 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9980817 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9980878 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9980950 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9981019 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9981095 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9981171 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9981239 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9981315 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9981429 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9981505 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9981574 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9981631 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9981714 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9981783 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9981859 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9981923 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9981984 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9982056 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9982285 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9982383 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9982505 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9982592 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9982680 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9982756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9982840 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9982916 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9982995 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9983075 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9983193 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9983273 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9983349 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9983413 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9983493 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9983569 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9983649 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9983721 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9983782 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9983862 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9984014 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9984098 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\803","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9984216 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9984311 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9984413 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9984489 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9984573 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9984656 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9985192 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9985344 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9985512 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9985759 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9985877 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9986010 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9986112 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9986204 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9986280 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9986359 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9986443 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9986523 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9986686 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9986770 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\803","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9986876 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9986960 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9987055 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9987123 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9987207 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9987302 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9987846 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9988009 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9988161 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9988401 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9988503 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9988648 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9988728 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9988819 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9988883 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9988967 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9989043 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9989123 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9989195 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9989260 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9989343 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9989442 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9989522 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9989594 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9989659 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9989739 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9989818 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9989906 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9989982 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9990047 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:35.9990123 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:35.9990263 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9990339 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9990415 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9990476 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9990548 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9990617 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9990693 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9990757 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9990818 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9990902 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9991012 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9991088 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9991153 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9991213 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9991286 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9991354 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9991430 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9991499 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9991567 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9991651 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9991749 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9991825 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9991894 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9991955 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9992023 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9992145 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9992221 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9992293 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9992354 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9992430 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9992494 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9992570 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9992639 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9992711 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9992787 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9992913 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9993000 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9993080 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9993160 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9993270 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9993369 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9993487 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9993601 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9993677 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9993753 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9993977 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9994068 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9994148 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9994213 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9994292 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9994365 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9994452 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9994528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9994604 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9994688 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9994806 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9994885 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:35.9994958 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9995022 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9995129 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9995243 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9995326 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:35.9995402 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9995467 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:35.9995547 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:35.9995687 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9995771 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\100","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9995881 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9995969 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9996064 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9996140 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9996246 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9996337 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9996854 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9997029 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9997208 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9997444 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9997531 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9997653 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9997736 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:35.9997824 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9997896 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:35.9997976 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:35.9998048 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9998128 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9998242 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9998325 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\100","NAME NOT FOUND","Desired Access: Read"
"11:34:35.9998424 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9998504 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:35.9998599 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:35.9998675 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9998751 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:35.9998842 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:35.9999314 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:35.9999462 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:35.9999610 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:35.9999819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:35.9999903 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0000040 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0000120 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0000207 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0000275 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0000359 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0000424 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0000511 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0000587 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0000652 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0000728 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0000819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0000903 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0000986 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0001055 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0001134 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0001199 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0001275 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0001347 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0001412 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0001488 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0001629 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0001705 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0001781 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0001845 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0001918 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0001986 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0002062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0002142 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0002203 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0002279 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0002389 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0002461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0002537 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0002606 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0002682 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0002750 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0002822 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0002891 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0002948 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0003020 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0003164 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0003248 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0003324 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0003385 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0003453 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0003590 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0003670 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0003742 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0003829 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0003921 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0004001 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0004096 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0004164 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0004229 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0004308 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0004430 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0004502 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0004571 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0004632 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0004704 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0004768 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0004841 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0004909 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0004977 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0005053 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0005263 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0005354 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0005434 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0005498 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0005582 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0005650 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0005738 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0005817 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0005886 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0005970 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0006084 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0006163 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0006236 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0006312 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0006391 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0006486 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0006566 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0006642 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0006707 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0006794 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0006939 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0007030 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\101","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0007140 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0007235 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0007327 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0007406 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0007490 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0007581 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0008060 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0008212 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0008387 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0008608 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0008699 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0008828 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0008908 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0008991 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0009064 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0009147 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0009227 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0009318 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0009436 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0009520 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\101","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0009615 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0009710 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0009797 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0009873 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0009953 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0010041 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0010504 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0010649 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0010793 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0010998 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0011086 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0011223 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0011299 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0011390 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0011462 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0011546 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0011610 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0011686 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0011762 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0011823 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0011903 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0011998 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0012082 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0012158 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0012226 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0012310 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0012378 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0012454 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0012527 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0012587 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0012671 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0012812 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0012929 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0013005 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0013070 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0013158 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0013234 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0013321 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0013401 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0013465 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0013549 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0013667 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0013754 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0013830 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0013891 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0013963 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0014036 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0014108 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0014180 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0014241 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0014313 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0014412 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0014488 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0014560 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0014617 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0014689 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0014845 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0014921 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0014993 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0015058 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0015134 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0015210 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0015298 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0015374 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0015438 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0015514 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0015624 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0015700 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0015777 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0015845 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0015917 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0015982 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0016062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0016141 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0016233 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0016316 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0016529 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0016613 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0016693 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0016769 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0016848 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0016917 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0016997 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0017069 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0017137 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0017213 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0017335 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0017415 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0017487 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0017555 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0017635 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0017707 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0017787 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0017863 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0017932 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0018008 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0018145 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0018232 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\302","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0018335 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0018415 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0018506 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0018574 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0018654 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0018749 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0019274 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0019437 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0019589 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0019802 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0019893 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0020019 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0020106 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0020193 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0020277 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0020372 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0020475 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0020551 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0020672 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0020771 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\302","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0020866 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0020946 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0021034 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0021106 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0021186 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0021281 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0021752 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0021896 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0022067 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0022280 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0022364 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0022505 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0022588 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0022672 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0022736 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0022828 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0022896 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0022972 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0023044 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0023109 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0023196 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0023295 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0023375 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0023447 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0023508 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0023599 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0023698 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0023782 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0023858 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0023922 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0023998 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0024143 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0024219 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0024302 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0024367 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0024443 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0024508 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0024584 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0024660 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0024721 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0024797 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0024907 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0024987 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0025067 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0025131 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0025207 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0025268 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0025340 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0025409 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0025469 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0025542 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0025640 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0025713 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0025785 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0025861 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0025937 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0026066 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0026142 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0026222 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0026287 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0026363 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0026431 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0026503 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0026583 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0026648 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0026724 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0026838 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0026914 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0026982 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0027043 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0027115 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0027188 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0027264 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0027332 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0027393 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0027465 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0027678 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0027773 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0027860 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0027933 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0028020 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0028092 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0028176 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0028248 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0028362 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0028461 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0028586 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0028662 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0028738 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0028799 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0028875 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0028944 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0029031 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0029103 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0029168 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0029244 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0029381 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0029464 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\203","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0029567 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0029655 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0029746 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0029818 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0029909 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0029993 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0030495 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0030643 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0030795 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0031027 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0031122 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0031247 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0031338 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0031433 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0031506 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0031586 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0031658 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0031738 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0031852 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0031935 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\203","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0032030 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0032137 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0032232 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0032304 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0032388 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0032479 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0032931 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0033072 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0033216 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0033425 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0033520 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0033657 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0033733 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0033824 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0033893 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0033980 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0034045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0034121 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0034197 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0034262 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0034345 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0034444 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0034520 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0034596 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0034661 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0034737 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0034813 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0034889 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0034961 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0035022 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0035098 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0035246 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0035330 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0035432 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0035501 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0035588 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0035660 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0035740 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0035812 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0035881 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0035961 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0036078 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0036151 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0036223 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0036280 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0036352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0036417 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0036489 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0036557 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0036626 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0036702 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0036797 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0036873 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0036949 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0037010 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0037082 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0037204 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0037291 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0037371 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0037435 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0037515 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0037584 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0037660 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0037728 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0037789 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0037876 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0037987 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0038063 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0038131 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0038192 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0038264 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0038340 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0038428 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0038507 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0038572 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0038652 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0038853 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0038937 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0039024 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0039089 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0039165 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0039237 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0039317 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0039389 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0039454 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0039530 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0039655 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0039785 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0039864 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0039929 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0040016 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0040089 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0040169 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0040237 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0040305 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0040385 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0040530 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0040617 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\204","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0040720 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0040799 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0040898 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0040971 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0041050 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0041134 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0041624 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0041780 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0041928 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0042138 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0042221 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0042347 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0042426 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0042514 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0042582 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0042662 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0042738 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0042814 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0042932 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0043016 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\204","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0043111 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0043190 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0043278 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0043365 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0043457 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0043548 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0044008 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0044152 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0044312 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0044521 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0044604 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0044745 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0044859 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0044950 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0045019 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0045110 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0045178 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0045266 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0045353 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0045429 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0045517 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0045616 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0045695 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0045775 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0045847 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0045927 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0045996 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0046072 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0046144 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0046205 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0046281 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0046429 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0046509 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0046585 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0046646 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0046722 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0046798 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0046874 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0046942 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0047003 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0047079 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0047193 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0047269 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0047345 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0047406 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0047482 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0047547 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0047619 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0047691 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0047752 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0047824 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0047923 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0047999 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0048071 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0048136 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0048208 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0048341 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0048432 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0048504 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0048573 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0048679 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0048752 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0048843 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0048919 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0048983 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0049059 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0049173 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0049249 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0049318 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0049379 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0049451 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0049516 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0049588 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0049683 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0049747 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0049820 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0050052 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0050135 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0050211 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0050280 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0050359 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0050428 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0050508 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0050580 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0050644 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0050721 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0050835 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0050914 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0050987 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0051051 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0051127 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0051203 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0051325 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0051397 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0051462 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0051549 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0051690 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0051773 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\307","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0051872 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0051967 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0052074 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0052146 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0052230 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0052313 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0052815 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0052967 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0053115 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0053324 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0053416 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0053545 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0053632 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0053716 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0053788 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0053868 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0053944 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0054020 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0054138 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0054221 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\307","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0054320 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0054404 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0054491 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0054598 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0054681 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0054769 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0055236 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0055381 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0055529 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0055757 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0055844 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0055981 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0056061 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0056145 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0056209 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0056308 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0056384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0056472 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0056548 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0056608 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0056688 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0056783 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0056863 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0056935 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0057000 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0057076 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0057152 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0057236 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0057308 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0057373 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0057449 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0057593 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0057688 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0057775 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0057836 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0057916 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0057985 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0058057 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0058125 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0058194 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0058266 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0058384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0058460 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0058528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0058589 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0058684 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0058760 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0058840 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0058908 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0059030 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0059106 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0059208 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0059281 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0059357 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0059414 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0059482 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0059608 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0059687 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0059756 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0059817 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0059893 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0059957 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0060033 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0060102 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0060174 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0060258 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0060372 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0060448 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0060527 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0060626 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0060702 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0060767 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0060843 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0060919 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0060991 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0061071 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0061276 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0061360 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0061432 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0061501 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0061580 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0061653 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0061732 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0061816 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0061888 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0061968 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0062086 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0062170 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0062246 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0062310 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0062398 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0062470 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0062550 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0062622 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0062687 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0062763 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0062896 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0062979 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\308","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0063105 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0063192 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0063280 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0063352 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0063435 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0063519 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0064021 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0064173 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0064329 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0064545 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0064633 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0064758 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0064849 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0064937 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0065001 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0065081 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0065161 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0065241 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0065370 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0065450 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\308","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0065549 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0065629 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0065716 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0065788 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0065864 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0065967 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0066438 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0066583 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0066731 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0066940 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0067027 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0067164 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0067240 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0067332 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0067396 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0067480 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0067548 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0067651 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0067727 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0067791 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0067868 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0067974 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0068061 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0068137 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0068202 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0068282 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0068346 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0068422 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0068495 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0068556 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0068632 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0068776 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0068852 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0068924 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0068985 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0069061 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0069126 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0069202 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0069274 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0069335 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0069407 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0069517 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0069593 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0069665 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0069726 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0069798 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0069859 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0069935 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0070011 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0070114 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0070186 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0070293 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0070380 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0070460 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0070525 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0070597 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0070730 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0070806 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0070878 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0070939 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0071057 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0071129 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0071205 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0071277 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0071338 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0071414 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0071528 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0071615 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0071695 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0071767 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0071855 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0071931 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0072015 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0072083 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0072151 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0072227 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0072433 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0072516 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0072589 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0072657 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0072733 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0072813 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0072931 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0073007 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0073071 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0073166 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0073284 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0073364 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0073436 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0073505 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0073584 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0073657 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0073744 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0073816 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0073881 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0073957 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0074098 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0074185 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\309","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0074291 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0074371 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0074463 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0074539 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0074645 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0074748 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0075242 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0075394 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0075538 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0075747 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0075835 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0075960 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0076048 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0076135 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0076207 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0076295 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0076374 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0076458 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0076576 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0076663 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\309","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0076762 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0076846 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0076937 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0077009 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0077089 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0077177 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0077678 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0077842 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0077998 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0078226 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0078321 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0078461 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0078553 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0078648 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0078712 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0078800 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0078864 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0078940 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0079012 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0079089 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0079210 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0079309 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0079389 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0079469 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0079533 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0079609 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0079674 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0079754 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0079830 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0079898 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0079997 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0080141 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0080217 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0080290 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0080350 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0080430 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0080495 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0080571 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0080639 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0080700 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0080772 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0080894 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0080974 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0081042 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0081107 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0081183 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0081251 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0081324 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0081396 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0081464 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0081574 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0081681 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0081757 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0081829 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0081890 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0081955 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0082080 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0082160 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0082240 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0082300 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0082377 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0082441 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0082517 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0082589 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0082650 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0082734 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0082848 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0082931 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0083000 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0083057 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0083133 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0083194 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0083270 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0083353 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0083422 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0083498 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0083749 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0083844 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0083939 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0084015 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0084095 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0084167 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0084247 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0084319 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0084384 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0084463 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0084581 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0084661 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0084748 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0084809 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0084889 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0084969 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0085060 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0085136 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0085227 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0085307 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0085490 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0085577 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\900","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0085687 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0085771 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0085862 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0085931 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0086010 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0086105 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0086607 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0086763 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0086926 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0087158 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0087250 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0087375 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0087459 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0087546 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0087614 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0087694 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0087770 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0087846 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0087968 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0088055 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\900","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0088150 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0088261 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0088356 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0088432 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0088512 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0088610 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0089074 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0089268 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0089424 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0089633 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0089724 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0089869 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0089948 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0090040 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0090112 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0090203 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0090271 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0090359 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0090431 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0090496 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0090572 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0090667 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0090747 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0090819 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0090883 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0090960 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0091020 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0091100 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0091176 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0091237 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0091313 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0091461 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0091549 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0091632 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0091701 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0091777 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0091857 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0091933 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0092001 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0092066 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0092138 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0092248 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0092336 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0092404 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0092465 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0092537 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0092598 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0092681 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0092750 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0092814 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0092894 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0093001 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0093073 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0093145 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0093202 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0093271 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0093404 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0093483 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0093552 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0093624 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0093704 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0093769 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0093845 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0093913 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0093985 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0094061 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0094168 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0094244 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0094320 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0094396 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0094476 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0094548 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0094624 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0094692 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0094753 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0094829 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0095042 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0095122 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0095198 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0095266 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0095354 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0095426 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0095509 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0095589 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0095658 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0095741 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0095855 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0095943 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0096019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0096087 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0096163 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0096232 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0096308 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0096384 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0096448 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0096524 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0096654 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0096737 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\901","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0096840 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0096931 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0097026 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0097095 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0097174 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0097266 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0097760 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0097919 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0098068 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0098277 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0098364 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0098497 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0098596 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0098687 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0098759 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0098843 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0098923 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0098999 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0099121 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0099204 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\901","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0099299 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0099383 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0099470 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0099543 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0099622 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0099710 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0100204 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0100348 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0100497 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0100713 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0100801 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0100934 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0101010 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0101093 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0101162 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0101245 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0101318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0101394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0101466 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0101531 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0101610 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0101713 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0101804 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0101888 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0101960 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0102047 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0102116 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0102207 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0102283 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0102352 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0102428 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0102564 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0102644 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0102716 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0102808 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0102899 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0102990 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0103070 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0103142 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0103203 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0103283 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0103397 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0103473 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0103541 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0103610 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0103693 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0103758 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0103842 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0103910 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0103967 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0104039 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0104138 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0104226 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0104298 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0104359 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0104427 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0104587 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0104674 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0104761 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0104822 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0104910 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0104974 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0105069 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0105145 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0105210 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0105294 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0105411 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0105488 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0105556 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0105617 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0105784 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0105864 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0105944 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0106012 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0106073 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0106145 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0106354 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0106434 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0106510 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0106575 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0106654 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0106723 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0106807 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0106886 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0106955 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0107035 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0107149 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0107225 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0107301 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0107365 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0107445 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0107514 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0107590 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0107662 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0107730 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0107821 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0107958 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0108042 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\902","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0108145 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0108228 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0108327 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0108399 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0108479 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0108566 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0109091 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0109258 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0109422 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0109657 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0109741 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0109866 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0109950 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0110034 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0110102 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0110197 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0110273 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0110349 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0110471 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0110566 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\902","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0110661 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0110741 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0110832 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0110900 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0110988 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0111083 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0111558 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0111702 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0111847 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0112071 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0112170 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0112326 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0112417 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0112512 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0112577 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0112675 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0112744 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0112824 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0112896 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0112961 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0113037 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0113132 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0113211 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0113287 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0113348 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0113428 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0113493 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0113584 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0113660 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0113725 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0113797 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0113949 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0114033 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0114105 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0114166 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0114238 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0114310 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0114390 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0114462 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0114538 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0114614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0114724 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0114797 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0114865 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0114926 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0114998 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0115063 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0115139 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0115207 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0115264 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0115352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0115454 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0115526 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0115595 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0115656 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0115728 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0115853 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0115933 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0116005 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0116062 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0116138 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0116203 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0116279 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0116347 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0116408 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0116484 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0116591 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0116667 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0116743 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0116807 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0116880 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0116944 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0117016 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0117108 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0117176 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0117252 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0117469 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0117564 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0117644 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0117712 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0117792 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0117864 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0117944 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0118016 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0118096 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0118176 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0118294 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0118373 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0118446 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0118506 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0118594 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0118674 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0118757 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0118833 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0118902 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0118982 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0119115 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0119217 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\401","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0119335 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0119415 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0119502 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0119575 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0119651 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0119738 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0120228 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0120380 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0120525 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0120738 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0120833 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0120962 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0121046 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0121129 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0121198 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0121281 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0121357 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0121437 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0121555 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0121639 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\401","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0121741 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0121851 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0121950 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0122030 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0122118 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0122209 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0122669 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0122806 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0122946 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0123151 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0123235 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0123376 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0123467 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0123551 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0123615 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0123699 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0123763 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0123843 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0123923 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0124011 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0124094 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0124193 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0124273 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0124345 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0124417 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0124497 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0124562 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0124638 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0124710 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0124771 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0124858 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0125014 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0125113 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0125193 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0125257 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0125337 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0125417 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0125539 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0125611 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0125672 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0125748 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0125865 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0125938 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0126006 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0126067 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0126139 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0126200 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0126276 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0126341 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0126401 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0126474 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0126573 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0126649 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0126721 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0126778 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0126846 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0126972 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0127048 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0127120 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0127177 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0127253 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0127318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0127409 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0127477 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0127542 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0127614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0127724 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0127800 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0127872 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0127930 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0128002 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0128066 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0128161 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0128287 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0128370 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0128443 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0128656 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0128739 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0128815 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0128884 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0128960 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0129028 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0129119 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0129191 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0129256 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0129336 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0129450 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0129530 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0129602 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0129663 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0129739 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0129815 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0129914 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0129986 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0130058 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0130142 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0130279 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0130362 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\311","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0130491 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0130587 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0130682 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0130754 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0130834 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0130917 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0131419 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0131571 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0131727 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0131940 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0132027 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0132164 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0132251 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0132343 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0132411 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0132491 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0132567 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0132643 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0132768 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0132852 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\311","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0132951 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0133031 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0133118 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0133198 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0133289 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0133392 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0133856 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0134000 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0134141 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0134346 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0134429 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0134563 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0134639 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0134722 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0134798 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0134886 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0134946 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0135026 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0135102 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0135186 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0135266 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0135365 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0135444 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0135524 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0135608 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0135688 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0135783 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0135866 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0135935 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0135999 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0136075 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0136269 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0136353 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0136425 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0136486 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0136573 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0136646 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0136718 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0136786 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0136851 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0136934 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0137052 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0137147 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0137220 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0137280 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0137356 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0137425 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0137501 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0137569 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0137626 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0137729 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0137835 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0137919 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0138014 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0138075 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0138143 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0138276 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0138352 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0138424 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0138485 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0138561 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0138634 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0138725 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0138801 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0138862 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0138938 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0139048 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0139124 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0139192 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0139253 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0139325 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0139390 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0139466 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0139534 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0139626 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0139705 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0139915 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0140002 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0140078 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0140154 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0140238 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0140306 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0140386 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0140458 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0140527 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0140603 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0140717 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0140796 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0140872 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0140937 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0141013 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0141082 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0141173 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0141245 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0141325 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0141416 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0141553 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0141636 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\310","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0141739 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0141819 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0141910 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0141990 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0142070 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0142153 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0142640 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0142788 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0142936 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0143149 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0143233 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0143355 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0143438 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0143522 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0143602 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0143681 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0143758 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0143834 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0143963 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0144062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\310","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0144172 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0144255 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0144343 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0144415 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0144495 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0144586 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0145065 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0145210 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0145358 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0145571 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0145658 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0145791 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0145871 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0145955 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0146019 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0146103 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0146167 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0146247 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0146319 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0146384 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0146468 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0146563 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0146643 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0146715 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0146779 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0146859 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0146924 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0147008 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0147087 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0147152 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0147228 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0147369 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0147445 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0147528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0147593 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0147665 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0147734 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0147813 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0147886 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0147950 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0148022 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0148136 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0148212 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0148285 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0148361 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0148437 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0148501 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0148574 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0148642 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0148703 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0148775 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0148870 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0148946 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0149026 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0149087 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0149155 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0149277 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0149383 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0149459 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0149520 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0149596 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0149665 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0149771 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0149847 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0149919 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0149999 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0150113 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0150185 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0150254 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0150318 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0150402 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0150467 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0150539 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0150607 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0150683 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0150755 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0150961 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0151052 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0151132 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0151208 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0151291 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0151360 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0151440 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0151516 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0151580 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0151660 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0151770 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0151858 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0151957 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0152021 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0152097 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0152177 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0152264 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0152337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0152401 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0152477 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0152618 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0152702 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0152808 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0152888 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0152975 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0153044 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0153124 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0153211 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0153698 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0153853 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0154009 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0154222 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0154306 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0154427 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0154507 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0154595 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0154667 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0154750 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0154826 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0154902 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0155024 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0155108 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0155203 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0155283 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0155378 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0155473 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0155568 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0155663 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0156123 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0156271 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0156446 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0156659 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0156754 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0156902 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0156989 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0157073 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0157138 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0157221 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0157286 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0157358 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0157430 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0157495 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0157571 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0157666 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0157746 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0157818 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0157894 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0157978 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0158042 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0158118 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0158190 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0158251 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0158331 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0158483 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0158563 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0158635 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0158700 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0158772 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0158848 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0158936 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0159000 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0159065 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0159137 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0159251 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0159335 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0159437 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0159502 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0159582 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0159650 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0159734 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0159802 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0159863 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0159939 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0160045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0160121 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0160190 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0160247 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0160315 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0160441 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0160517 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0160597 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0160661 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0160733 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0160802 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0160878 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0160950 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0161011 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0161087 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0161197 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0161273 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0161342 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0161414 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0161494 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0161562 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0161638 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0161703 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0161764 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0161840 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0162041 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0162125 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0162197 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0162262 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0162341 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0162414 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0162501 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0162581 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0162653 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0162737 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0162855 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0162953 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0163029 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0163094 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0163181 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0163250 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0163330 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0163402 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0163466 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0163543 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0163672 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0163755 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0163858 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0163938 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0164029 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0164124 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0164212 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0164310 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0164843 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0165006 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0165177 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0165394 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0165481 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0165603 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0165698 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0165781 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0165850 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0165930 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0166006 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0166082 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0166211 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0166306 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0166401 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0166481 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0166572 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0166640 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0166724 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0166812 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0167306 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0167454 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0167602 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0167819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0167906 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0168039 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0168119 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0168203 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0168271 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0168381 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0168454 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0168530 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0168602 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0168666 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0168750 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0168845 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0168925 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0168997 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0169066 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0169149 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0169221 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0169301 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0169373 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0169438 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0169510 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0169651 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0169731 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0169803 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0169868 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0169944 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0170012 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0170088 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0170157 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0170225 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0170297 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0170411 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0170483 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0170559 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0170620 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0170711 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0170791 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0170871 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0170940 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0171000 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0171073 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0171175 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0171259 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0171331 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0171392 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0171460 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0171612 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0171688 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0171761 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0171821 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0171897 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0171970 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0172053 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0172137 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0172202 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0172278 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0172395 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0172471 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0172540 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0172601 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0172669 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0172760 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0172863 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0172935 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0172996 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0173072 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0173308 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0173403 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0173483 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0173547 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0173635 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0173711 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0173794 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0173870 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0173939 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0174015 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0174133 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0174212 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0174288 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0174357 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0174433 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0174501 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0174581 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0174661 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0174726 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0174802 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0174938 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0175026 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0175132 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0175216 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0175307 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0175376 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0175455 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0175539 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0176041 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0176227 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0176406 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0176634 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0176736 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0176866 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0176945 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0177033 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0177101 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0177181 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0177261 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0177341 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0177459 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0177542 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0177641 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0177725 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0177808 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0177884 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0177968 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0178055 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0178496 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0178637 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0178797 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0179009 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0179104 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0179256 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0179333 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0179416 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0179488 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0179587 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0179659 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0179739 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0179811 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0179872 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0179952 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0180043 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0180135 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0180211 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0180271 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0180347 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0180412 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0180492 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0180564 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0180629 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0180701 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0180845 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0180925 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0181001 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0181062 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0181134 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0181203 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0181279 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0181347 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0181408 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0181480 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0181606 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0181685 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0181754 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0181815 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0181887 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0181959 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0182031 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0182104 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0182172 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0182252 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0182354 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0182427 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0182499 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0182560 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0182628 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0182761 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0182837 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0182909 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0182970 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0183058 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0183153 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0183232 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0183305 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0183377 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0183457 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0183571 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0183647 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0183715 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0183776 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0183848 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0183913 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0183985 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0184061 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0184126 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0184194 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0184415 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0184498 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0184574 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0184639 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0184719 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0184791 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0184875 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0184958 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0185027 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0185106 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0185217 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0185297 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0185369 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0185452 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0185536 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0185608 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0185688 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0185768 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0185832 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0185908 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0186045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0186137 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\700","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0186239 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0186327 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0186410 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0186482 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0186562 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0186646 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0187144 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0187304 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0187452 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0187668 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0187763 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0187900 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0187988 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0188071 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0188140 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0188223 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0188307 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0188387 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0188505 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0188588 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\700","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0188683 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0188775 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0188870 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0188946 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0189033 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0189132 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0189603 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0189755 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0189904 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0190113 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0190211 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0190352 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0190428 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0190523 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0190595 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0190679 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0190744 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0190823 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0190903 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0190998 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0191082 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0191181 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0191261 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0191337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0191397 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0191473 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0191549 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0191625 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0191698 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0191762 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0191838 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0191990 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0192078 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0192169 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0192237 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0192325 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0192393 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0192469 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0192542 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0192614 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0192694 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0192808 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0192884 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0192952 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0193009 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0193081 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0193146 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0193218 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0193287 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0193347 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0193420 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0193518 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0193594 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0193667 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0193724 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0193803 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0193929 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0194005 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0194073 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0194146 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0194229 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0194301 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0194396 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0194469 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0194533 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0194606 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0194720 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0194796 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0194864 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0194929 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0195001 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0195065 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0195141 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0195214 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0195275 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0195351 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0195563 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0195670 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0195757 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0195826 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0195906 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0195974 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0196054 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0196126 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0196194 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0196270 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0196384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0196499 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0196571 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0196635 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0196711 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0196795 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0196875 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0196947 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0197012 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0197088 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0197236 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0197331 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\701","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0197441 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0197525 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0197612 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0197684 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0197764 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0197852 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0198357 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0198517 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0198677 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0198897 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0198984 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0199106 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0199190 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0199273 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0199349 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0199433 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0199505 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0199585 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0199710 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0199798 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\701","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0199893 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0199973 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0200068 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0200151 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0200243 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0200334 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0200813 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0200961 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0201106 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0201315 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0201406 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0201546 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0201634 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0201717 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0201782 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0201866 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0201930 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0202010 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0202082 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0202147 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0202223 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0202322 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0202402 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0202474 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0202535 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0202615 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0202683 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0202767 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0202839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0202911 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0202987 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0203128 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0203208 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0203280 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0203348 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0203432 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0203496 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0203572 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0203679 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0203744 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0203823 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0203945 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0204025 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0204089 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0204150 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0204226 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0204287 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0204363 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0204432 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0204492 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0204565 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0204667 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0204739 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0204812 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0204869 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0204945 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0205078 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0205165 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0205241 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0205310 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0205382 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0205450 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0205526 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0205595 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0205655 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0205743 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0205887 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0205963 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0206032 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0206096 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0206176 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0206245 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0206324 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0206397 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0206458 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0206530 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0206735 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0206819 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0206891 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0206959 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0207043 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0207115 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0207195 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0207271 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0207366 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0207453 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0207575 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0207651 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0207727 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0207803 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0207894 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0207967 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0208043 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0208115 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0208179 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0208259 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0208400 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0208484 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\702","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0208586 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0208674 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0208765 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0208833 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0208913 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0209004 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0209476 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0209624 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0209768 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0209989 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0210076 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0210202 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0210285 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0210369 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0210437 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0210517 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0210593 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0210681 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0210795 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0210878 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\702","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0210973 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0211057 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0211141 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0211217 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0211296 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0211384 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0211855 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0212007 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0212171 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0212372 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0212456 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0213250 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0213341 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0213440 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0213524 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0213615 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0213684 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0213763 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0213839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0213904 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0213995 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0214094 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0214174 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0214250 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0214322 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0214406 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0214470 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0214550 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0214630 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0214698 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0214782 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0214926 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0215006 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0215079 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0215143 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0215219 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0215288 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0215367 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0215440 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0215504 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0215576 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0215691 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0215774 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0215846 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0215915 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0215991 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0216055 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0216139 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0216211 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0216276 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0216363 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0216470 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0216542 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0216614 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0216675 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0216755 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0216888 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0216972 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0217044 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0217105 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0217184 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0217257 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0217344 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0217420 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0217496 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0217580 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0217698 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0217785 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0217853 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0217926 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0218002 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0218074 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0218150 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0218218 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0218279 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0218355 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0218564 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0218652 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0218728 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0218796 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0218891 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0218994 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0219074 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0219150 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0219214 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0219298 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0219419 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0219503 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0219579 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0219640 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0219720 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0219788 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0219872 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0219944 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0220039 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0220115 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0220263 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0220358 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0220465 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0220560 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0220670 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0220754 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0220833 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0220929 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0221415 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0221571 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0221731 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0221947 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0222035 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0222156 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0222240 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0222327 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0222400 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0222491 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0222586 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0222673 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0222795 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0222879 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0222977 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0223061 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0223148 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0223224 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0223308 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0223399 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0223874 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0224030 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0224179 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0224384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0224471 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0224604 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0224684 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0224771 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0224844 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0224927 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0224996 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0225072 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0225148 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0225212 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0225292 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0225387 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0225478 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0225566 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0225634 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0225726 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0225790 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0225870 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0225942 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0226011 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0226090 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0226235 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0226315 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0226391 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0226459 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0226539 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0226611 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0226699 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0226775 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0226843 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0226927 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0227041 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0227128 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0227208 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0227273 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0227345 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0227413 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0227489 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0227558 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0227619 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0227691 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0227801 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0227896 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0227968 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0228029 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0228101 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0228234 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0228314 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0228383 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0228447 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0228527 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0228599 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0228713 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0228797 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0228862 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0228938 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0229052 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0229139 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0229207 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0229272 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0229344 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0229409 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0229485 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0229561 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0229629 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0229713 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0229918 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0230006 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0230082 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0230150 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0230245 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0230314 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0230397 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0230469 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0230534 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0230614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0230728 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0230812 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0230884 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0230948 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0231040 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0231108 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0231188 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0231264 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0231332 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0231416 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0231549 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0231633 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0231747 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0231864 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0231967 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0232043 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0232127 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0232214 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0232693 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0232845 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0233005 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0233229 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0233316 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0233442 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0233533 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0233621 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0233693 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0233773 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0233849 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0233940 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0234058 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0234141 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0234240 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0234328 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0234419 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0234499 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0234624 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0234730 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0235213 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0235361 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0235514 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0235730 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0235818 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0235966 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0236046 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0236133 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0236198 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0236285 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0236357 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0236445 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0236528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0236597 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0236677 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0236772 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0236852 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0236935 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0237004 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0237080 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0237148 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0237224 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0237296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0237361 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0237441 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0237593 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0237673 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0237752 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0237817 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0237893 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0237969 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0238053 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0238125 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0238186 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0238262 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0238372 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0238448 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0238524 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0238585 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0238657 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0238722 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0238805 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0238893 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0238969 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0239052 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0239159 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0239235 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0239311 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0239379 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0239452 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0239577 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0239657 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0239729 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0239794 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0239866 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0239934 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0240010 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0240079 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0240151 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0240231 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0240341 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0240417 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0240493 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0240558 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0240630 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0240698 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0240771 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0240839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0240926 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0241010 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0241238 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0241322 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0241398 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0241466 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0241550 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0241622 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0241702 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0241774 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0241842 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0241922 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0242044 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0242128 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0242204 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0242268 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0242352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0242424 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0242504 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0242580 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0242652 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0242740 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0242873 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0242956 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\314","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0243059 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0243150 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0243245 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0243317 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0243420 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0243523 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0244005 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0244157 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0244302 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0244541 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0244640 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0244766 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0244853 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0244940 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0245016 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0245096 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0245176 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0245267 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0245397 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0245499 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\314","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0245598 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0245682 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0245769 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0245841 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0245925 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0246016 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0246484 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0246632 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0246773 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0246993 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0247084 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0247221 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0247297 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0247381 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0247457 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0247544 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0247609 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0247692 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0247776 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0247848 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0247932 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0248042 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0248122 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0248209 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0248282 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0248365 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0248430 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0248510 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0248582 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0248647 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0248726 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0248867 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0248943 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0249019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0249091 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0249175 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0249243 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0249319 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0249388 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0249479 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0249559 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0249677 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0249753 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0249825 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0249889 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0249973 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0250045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0250121 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0250190 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0250251 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0250334 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0250441 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0250520 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0250593 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0250650 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0250718 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0250844 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0250935 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0251018 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0251087 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0251178 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0251254 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0251342 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0251414 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0251478 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0251558 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0251672 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0251748 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0251820 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0251877 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0251954 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0252018 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0252094 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0252170 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0252231 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0252307 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0252512 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0252600 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0252676 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0252740 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0252832 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0252908 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0252995 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0253071 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0253136 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0253216 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0253333 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0253425 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0253501 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0253565 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0253645 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0253713 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0253793 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0253877 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0253949 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0254040 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0254177 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0254280 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0254379 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0254477 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0254576 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0254652 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0254732 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0254820 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0255306 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0255462 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0255610 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0255831 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0255918 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0256040 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0256127 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0256215 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0256287 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0256370 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0256443 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0256523 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0256648 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0256762 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0256865 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0256944 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0257032 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0257112 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0257195 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0257290 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0257762 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0257914 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:36.0258066 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:36.0258275 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0258362 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0258507 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0258587 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0258674 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0258742 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0258837 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0258906 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0258982 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0259065 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0259130 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0259214 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0259313 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0259400 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0259476 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0259537 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0259617 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0259681 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0259769 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0259841 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0259906 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe\(Default)","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.0259982 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\AppSpecific\devenv.exe","SUCCESS",""
"11:34:36.0260130 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0260206 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0260308 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0260510 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0260624 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0260700 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0260799 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0260879 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0260943 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0261015 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0261137 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0261213 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0261282 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0261342 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0261415 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0261483 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0261567 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0261635 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0261707 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0261787 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0261894 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0261981 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0262057 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0262118 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0262194 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0262369 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0262460 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0262536 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0262604 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0262688 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0262756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0262832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0262905 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0262965 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0263041 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0263152 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0263228 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0263296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0263361 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0263433 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0263498 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0263574 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0263653 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0263722 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0263794 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0264007 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0264094 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0264170 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0264239 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0264315 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0264387 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0264478 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0264566 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0264634 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0264718 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0264832 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0264912 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:36.0264984 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0265048 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0265128 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0265201 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0265280 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:36.0265356 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0265421 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:36.0265516 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:36.0265653 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0265737 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0265851 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0265938 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0266044 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0266117 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0266196 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0266284 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0267124 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0267287 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:36.0267455 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:36.0267671 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0267766 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0267899 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0267983 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:36.0268070 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0268139 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:36.0268222 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:36.0268306 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0268386 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0268519 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0268606 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0268705 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0268789 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:36.0268880 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0268964 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0269051 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:36.0269146 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:36.0269853 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0269994 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:36.0270138 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:36.0270363 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0270461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0462138 AM","devenv.exe","8460","Thread Exit","","SUCCESS","Thread ID: 11912, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.0925772 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\Default.asmx.cs","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0925989 AM","devenv.exe","8460","QueryNetworkOpenInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\Default.asmx.cs","SUCCESS","CreationTime: 12/29/2015 12:30:58 PM, LastAccessTime: 12/29/2015 12:30:58 PM, LastWriteTime: 12/29/2015 1:53:10 PM, ChangeTime: 12/29/2015 1:53:10 PM, AllocationSize: 4096, EndOfFile: 2267, FileAttributes: A"
"11:34:36.0926130 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\Default.asmx.cs","SUCCESS",""
"11:34:36.0966247 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0966452 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","Desired Access: Read"
"11:34:36.0966616 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0966711 AM","devenv.exe","8460","RegQueryKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.0966794 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger","SUCCESS","Desired Access: Read"
"11:34:36.0966916 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger\VBENCSUITESDUMPTASKLIST","NAME NOT FOUND","Length: 144"
"11:34:36.0967080 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger","SUCCESS",""
"11:34:36.0967156 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS",""
"11:34:36.0967931 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0968041 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","Desired Access: Read"
"11:34:36.0968129 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0968201 AM","devenv.exe","8460","RegQueryKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.0968277 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger","SUCCESS","Desired Access: Read"
"11:34:36.0968357 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger\VBENCSUITESDUMPTASKLIST","NAME NOT FOUND","Length: 144"
"11:34:36.0968471 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0\Debugger","SUCCESS",""
"11:34:36.0968554 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0","SUCCESS",""
"11:34:36.0991107 AM","devenv.exe","8460","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows\Control Panel\Desktop","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0991316 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop","SUCCESS","Desired Access: Read"
"11:34:36.0991491 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop\ForegroundLockTimeout","NAME NOT FOUND","Length: 16"
"11:34:36.0991605 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop","SUCCESS",""
"11:34:36.0995455 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0995584 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AD7Metrics\PortSupplier\{708C1ECA-FF48-11D2-904F-00C04FA302A1}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0995740 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0995831 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\PortSupplier\{708C1ECA-FF48-11D2-904F-00C04FA302A1}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0996010 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0996094 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.0996204 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.0996284 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}","SUCCESS","Desired Access: Read"
"11:34:36.0996405 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.0996489 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.0996573 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.0996637 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}\Name","SUCCESS","Type: REG_SZ, Length: 216, Data: resource=C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\*\vsdebugui.dll#6012"
"11:34:36.0998952 AM","devenv.exe","8460","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.0999135 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","CreationTime: 3/18/2010 6:51:28 PM, LastAccessTime: 6/4/2015 3:16:04 PM, LastWriteTime: 3/18/2010 6:51:28 PM, ChangeTime: 6/4/2015 3:16:04 PM, FileAttributes: A"
"11:34:36.0999226 AM","devenv.exe","8460","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS",""
"11:34:36.0999781 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{449EC4CC-30D2-4032-9256-EE18EB41B62B}","SUCCESS",""
"11:34:36.1003506 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1003662 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AD7Metrics\PortSupplier\{708C1ECA-FF48-11D2-904F-00C04FA302A1}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1003810 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1003909 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\PortSupplier\{708C1ECA-FF48-11D2-904F-00C04FA302A1}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1004069 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1004152 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1004255 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1004346 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}","SUCCESS","Desired Access: Read"
"11:34:36.1004494 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.1004582 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.1004658 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.1004715 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}\Name","SUCCESS","Type: REG_SZ, Length: 216, Data: resource=C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\*\vsdebugui.dll#6049"
"11:34:36.1006745 AM","devenv.exe","8460","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1006897 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","CreationTime: 3/18/2010 6:51:28 PM, LastAccessTime: 6/4/2015 3:16:04 PM, LastWriteTime: 3/18/2010 6:51:28 PM, ChangeTime: 6/4/2015 3:16:04 PM, FileAttributes: A"
"11:34:36.1006988 AM","devenv.exe","8460","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS",""
"11:34:36.1007364 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{FB0D4648-F776-4980-95F8-BB7F36EBC1EE}","SUCCESS",""
"11:34:36.1007509 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1007619 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1007756 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1007839 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}","SUCCESS","Desired Access: Read"
"11:34:36.1007950 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.1008022 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.1008094 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}\Name","BUFFER OVERFLOW","Length: 144"
"11:34:36.1008151 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}\Name","SUCCESS","Type: REG_SZ, Length: 216, Data: resource=C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\*\vsdebugui.dll#6007"
"11:34:36.1010029 AM","devenv.exe","8460","CreateFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1010169 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS","CreationTime: 3/18/2010 6:51:28 PM, LastAccessTime: 6/4/2015 3:16:04 PM, LastWriteTime: 3/18/2010 6:51:28 PM, ChangeTime: 6/4/2015 3:16:04 PM, FileAttributes: A"
"11:34:36.1010264 AM","devenv.exe","8460","CloseFile","C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\Packages\Debugger\1033\vsdebugui.dll","SUCCESS",""
"11:34:36.1010671 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AD7Metrics\Engine\{1202F5B4-3522-4149-BAD8-58B2079D704F}","SUCCESS",""
"11:34:36.1021744 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 12964"
"11:34:36.1222574 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1222772 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1222890 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1222962 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1223061 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1223159 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1223387 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1223479 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1223551 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1223669 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1223749 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1223828 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1223927 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1224003 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1224098 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1224186 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1224281 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1224349 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1227261 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 10704"
"11:34:36.1228211 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 10900"
"11:34:36.1230442 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1230602 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1231066 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 13084"
"11:34:36.1232069 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1232320 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1232522 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1232643 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1232799 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1234331 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1234814 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1234932 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1235597 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1236137 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1236615 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1237323 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a60000, Image Size: 0x8000"
"11:34:36.1237459 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1241713 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 7080"
"11:34:36.1243887 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1244062 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1244446 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1244518 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1244613 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1244708 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1244860 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1244932 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1245008 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1245122 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1245202 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1245278 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1245370 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1245548 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1245655 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1245734 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1245826 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1245890 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1248464 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1248585 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694\Software\Laserfiche\Client8\Profile\OCR","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1268367 AM","w3wp.exe","11796","Thread Create","","SUCCESS","Thread ID: 10488"
"11:34:36.1274528 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1274699 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1274821 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1274984 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1275136 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1275250 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1275418 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1276733 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1277212 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1277333 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1278185 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1281294 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1282606 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1283419 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a50000, Image Size: 0x8000"
"11:34:36.1283579 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1411115 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1411309 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1411427 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1411533 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1411719 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1411887 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1411966 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1412088 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1412214 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1412369 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1412510 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1412601 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1412677 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1412742 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1412822 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1412902 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1412981 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1413057 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1413152 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1413247 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1414718 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1414973 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1415068 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1415156 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1415251 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1415346 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1415429 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1415540 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1415612 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1415684 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1415790 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1415866 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1415939 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1465403 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1465593 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1465776 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1467691 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1467840 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1470010 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1495725 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1496337 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1496941 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1497462 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1498169 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1500279 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1500480 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1501833 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1504350 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1504817 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1505600 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1506113 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1506570 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1514563 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a60000, Image Size: 0x8000"
"11:34:36.1514772 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1518532 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1518722 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1518843 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1518946 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1519045 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1519151 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1519227 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1519349 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1519463 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1519573 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1525009 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 360, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.1525207 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1525351 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1525917 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 8112, User Time: 0.0312002, Kernel Time: 0.0000000"
"11:34:36.1526271 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1527449 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 2044, User Time: 0.0624004, Kernel Time: 0.0000000"
"11:34:36.1533497 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1533630 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1533744 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1533850 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1533942 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1534063 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1534185 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1534291 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1534565 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1534675 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1534751 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1534816 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1534900 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1534983 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1535093 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1535131 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 5884, User Time: 0.0156001, Kernel Time: 0.0000000"
"11:34:36.1535169 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1535493 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1535656 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1535740 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1535827 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1535930 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1536028 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1536131 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1536219 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1536314 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1536378 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1540423 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 13228, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.1541217 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 12772, User Time: 0.0156001, Kernel Time: 0.0000000"
"11:34:36.1542019 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 9180, User Time: 0.0468003, Kernel Time: 0.0000000"
"11:34:36.1543794 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1543935 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1544045 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1544174 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1544353 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1544707 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1544942 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1546174 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1546657 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1546771 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1547630 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1548409 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1548952 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1549644 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a50000, Image Size: 0x8000"
"11:34:36.1549773 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1556167 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1556330 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1556718 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1556859 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1556980 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1557094 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1557197 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1557334 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1557452 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1557566 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1557725 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1557836 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1557927 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1557992 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1558075 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1558159 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1558242 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1558318 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1558417 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1558550 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1558664 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1558797 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1558877 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694\SOFTWARE\Laserfiche\DocumentProcessor","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.1558972 AM","w3wp.exe","11796","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1559044 AM","w3wp.exe","11796","RegOpenKey","HKLM\SOFTWARE\Laserfiche\DocumentProcessor","SUCCESS","Desired Access: Query Value"
"11:34:36.1559197 AM","w3wp.exe","11796","RegQueryValue","HKLM\SOFTWARE\LASERFICHE\DocumentProcessor\UseOPFastMode","NAME NOT FOUND","Length: 144"
"11:34:36.1559280 AM","w3wp.exe","11796","RegCloseKey","HKLM\SOFTWARE\LASERFICHE\DocumentProcessor","SUCCESS",""
"11:34:36.1559463 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1559550 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1559622 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1559683 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1559759 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1559843 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1559938 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1560006 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1560078 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1560196 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1560280 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1560363 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1560451 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1560535 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1560645 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1560725 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1560816 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1560892 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1564803 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1564940 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1565050 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1565172 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1565316 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1565419 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1565575 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1566715 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1567392 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1567551 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1568395 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1568802 AM","w3wp.exe","11796","Thread Exit","","SUCCESS","Thread ID: 5524, User Time: 0.0468003, Kernel Time: 0.0000000"
"11:34:36.1569011 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1569498 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1570265 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a60000, Image Size: 0x8000"
"11:34:36.1570421 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1573648 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1573804 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1573915 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1574013 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1574120 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1574219 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1574295 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1574409 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1574515 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1574622 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1574755 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1574850 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1574922 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1574990 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1575070 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1575150 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1575241 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1575325 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1575427 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1575526 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1575621 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1576800 AM","w3wp.exe","11796","CreateFile","C:\Windows\Temp","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1576959 AM","w3wp.exe","11796","QueryBasicInformationFile","C:\Windows\Temp","SUCCESS","CreationTime: 7/13/2009 8:20:14 PM, LastAccessTime: 1/5/2016 11:30:35 AM, LastWriteTime: 1/5/2016 11:30:35 AM, ChangeTime: 1/5/2016 11:30:35 AM, FileAttributes: D"
"11:34:36.1577035 AM","w3wp.exe","11796","CloseFile","C:\Windows\Temp","SUCCESS",""
"11:34:36.1577598 AM","w3wp.exe","11796","CreateFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS","Desired Access: Generic Read, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Created"
"11:34:36.1578468 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1578598 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1578696 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1580088 AM","w3wp.exe","11796","CloseFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS",""
"11:34:36.1580472 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1580612 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1580863 AM","w3wp.exe","11796","CreateFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1580954 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1581076 AM","w3wp.exe","11796","QueryAttributeTagFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS","Attributes: A, ReparseTag: 0x0"
"11:34:36.1581179 AM","w3wp.exe","11796","SetDispositionInformationFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS","Delete: True"
"11:34:36.1581296 AM","w3wp.exe","11796","CloseFile","C:\Windows\Temp\ldpEA7.tmp","SUCCESS",""
"11:34:36.1581616 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1581711 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1581935 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1582448 AM","w3wp.exe","11796","CreateFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created"
"11:34:36.1582843 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1582919 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1582996 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1594091 AM","lfs.exe","6312","CreateFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TIF","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1594445 AM","lfs.exe","6312","QueryStandardInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TIF","SUCCESS","AllocationSize: 8,192, EndOfFile: 7,394, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1597505 AM","lfs.exe","6312","QueryStandardInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TIF","SUCCESS","AllocationSize: 8,192, EndOfFile: 7,394, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1601252 AM","lfs.exe","6312","CloseFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TIF","SUCCESS",""
"11:34:36.1603659 AM","w3wp.exe","11796","WriteFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Offset: 0, Length: 4,096, Priority: Normal"
"11:34:36.1604411 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1604563 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1604677 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1605673 AM","w3wp.exe","11796","WriteFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Offset: 4,096, Length: 3,298, Priority: Normal"
"11:34:36.1605966 AM","w3wp.exe","11796","CloseFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS",""
"11:34:36.1607882 AM","MsMpEng.exe","540","CreateFileMapping","C:\Windows\Temp\ldpEA7.tif","FILE LOCKED WITH WRITERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1608053 AM","MsMpEng.exe","540","QueryStandardInformationFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","AllocationSize: 16,384, EndOfFile: 7,394, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1620182 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1620304 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1620631 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1631369 AM","lfs.exe","6312","CreateFile","C:\lfwdb001\DEFAULT\00\03\3A","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1631559 AM","lfs.exe","6312","QueryNetworkOpenInformationFile","C:\lfwdb001\DEFAULT\00\03\3A","SUCCESS","CreationTime: 12/23/2015 2:52:31 PM, LastAccessTime: 1/5/2016 11:34:26 AM, LastWriteTime: 1/5/2016 11:34:26 AM, ChangeTime: 1/5/2016 11:34:26 AM, AllocationSize: 49152, EndOfFile: 49152, FileAttributes: D"
"11:34:36.1631673 AM","lfs.exe","6312","CloseFile","C:\lfwdb001\DEFAULT\00\03\3A","SUCCESS",""
"11:34:36.1632296 AM","lfs.exe","6312","CreateFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","Desired Access: Generic Read/Write, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Created"
"11:34:36.1632935 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1633076 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1633213 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1633817 AM","lfs.exe","6312","QueryStandardInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1633965 AM","lfs.exe","6312","SetEndOfFileInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","EndOfFile: 0"
"11:34:36.1634220 AM","lfs.exe","6312","SetAllocationInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","AllocationSize: 0"
"11:34:36.1636573 AM","lfs.exe","6312","WriteFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","Offset: 0, Length: 0, Priority: Normal"
"11:34:36.1636877 AM","lfs.exe","6312","QueryStandardInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1638439 AM","sqlservr.exe","3004","ReadFile","C:\lfwdb001\Main8.mdf","SUCCESS","Offset: 1,220,608, Length: 8,192, I/O Flags: Non-cached, Priority: Normal"
"11:34:36.1740367 AM","sqlservr.exe","3004","WriteFile","C:\lfwdb001\Main8_log.ldf","SUCCESS","Offset: 331,441,664, Length: 512, I/O Flags: Non-cached, Write Through, Priority: Normal"
"11:34:36.1742716 AM","sqlservr.exe","3004","WriteFile","C:\lfwdb001\Main8_log.ldf","SUCCESS","Offset: 331,442,176, Length: 512, I/O Flags: Non-cached, Write Through, Priority: Normal"
"11:34:36.1745008 AM","sqlservr.exe","3004","WriteFile","C:\lfwdb001\Main8_log.ldf","SUCCESS","Offset: 331,442,688, Length: 512, I/O Flags: Non-cached, Write Through, Priority: Normal"
"11:34:36.1746650 AM","lfs.exe","6312","QueryStandardInformationFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.1746818 AM","lfs.exe","6312","CloseFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS",""
"11:34:36.1747422 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1747570 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1747947 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1751885 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1752097 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1752230 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1752310 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1752420 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\BPOmniOCR82.BPProcessEx80","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1752527 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Desired Access: Read"
"11:34:36.1752675 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1752755 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: Name"
"11:34:36.1752835 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1752949 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1753032 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1753109 AM","w3wp.exe","11796","RegOpenKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.1753204 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: Name"
"11:34:36.1753280 AM","w3wp.exe","11796","RegQueryKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1753378 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes\BPOmniOCR82.BPProcessEx80\CLSID","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.1753462 AM","w3wp.exe","11796","RegQueryValue","HKCR\BPOmniOCR82.BPProcessEx80\CLSID\(Default)","SUCCESS","Type: REG_SZ, Length: 78, Data: {25CA57CC-AB34-4221-95AF-99736B5B84AD}"
"11:34:36.1753561 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80\CLSID","SUCCESS",""
"11:34:36.1753629 AM","w3wp.exe","11796","RegCloseKey","HKCR\BPOmniOCR82.BPProcessEx80","SUCCESS",""
"11:34:36.1757419 AM","svchost.exe","1088","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1757548 AM","svchost.exe","1088","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1757651 AM","svchost.exe","1088","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\eventlog\System\DCOM","REPARSE","Desired Access: Query Value"
"11:34:36.1757795 AM","svchost.exe","1088","RegOpenKey","HKLM\System\CurrentControlSet\Services\eventlog\System\DCOM","SUCCESS","Desired Access: Query Value"
"11:34:36.1757928 AM","svchost.exe","1088","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1758031 AM","svchost.exe","1088","RegQueryValue","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM\ProviderGuid","SUCCESS","Type: REG_EXPAND_SZ, Length: 78, Data: {1B562E86-B7AA-4131-BADC-B6F3A001407E}"
"11:34:36.1758183 AM","svchost.exe","1088","RegCloseKey","HKLM\System\CurrentControlSet\services\eventlog\System\DCOM","SUCCESS",""
"11:34:36.1759460 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1759951 AM","svchost.exe","1088","QueryBasicInformationFile","C:\Windows\System32\oleres.dll","SUCCESS","CreationTime: 7/13/2009 4:59:12 PM, LastAccessTime: 7/13/2009 4:59:12 PM, LastWriteTime: 7/13/2009 6:31:56 PM, ChangeTime: 6/4/2015 1:57:59 PM, FileAttributes: A"
"11:34:36.1760072 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1760817 AM","svchost.exe","1088","CreateFile","C:\Windows\System32\oleres.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1761380 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.1761878 AM","svchost.exe","1088","CreateFileMapping","C:\Windows\System32\oleres.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.1762767 AM","svchost.exe","1088","Load Image","C:\Windows\System32\oleres.dll","SUCCESS","Image Base: 0x74a50000, Image Size: 0x8000"
"11:34:36.1762984 AM","svchost.exe","1088","CloseFile","C:\Windows\System32\oleres.dll","SUCCESS",""
"11:34:36.1766534 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1766713 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1766842 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1766948 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1767066 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1767180 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1767264 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1767397 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1767511 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1767625 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1767766 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1767865 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1767944 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1768013 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1768093 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1768188 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1768271 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1768355 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1768454 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1768560 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{9D48CA7F-B654-45AF-89AD-2FA6497736D7}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1768659 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1770149 AM","w3wp.exe","11796","CreateFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.1770411 AM","w3wp.exe","11796","QueryAttributeTagFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Attributes: A, ReparseTag: 0x0"
"11:34:36.1770522 AM","w3wp.exe","11796","SetDispositionInformationFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS","Delete: True"
"11:34:36.1770674 AM","w3wp.exe","11796","CloseFile","C:\Windows\Temp\ldpEA7.tif","SUCCESS",""
"11:34:36.1771267 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.1771384 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1771738 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.1773547 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1773696 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1773798 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1773901 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1773992 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1774178 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1774220 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1774266 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1774368 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1774399 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1774471 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.1774520 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1774631 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1774691 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1774726 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1774824 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1774840 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_Classes","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"11:34:36.1774927 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1774977 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1774999 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1775094 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.1775121 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1775201 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1775205 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1775292 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1775300 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1775391 AM","w3wp.exe","11796","RegOpenKey","HKCR\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1775398 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.1775486 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: Name"
"11:34:36.1775509 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1775562 AM","w3wp.exe","11796","RegQueryKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1775589 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.1775676 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1775680 AM","w3wp.exe","11796","RegOpenKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1775760 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1775798 AM","w3wp.exe","11796","RegOpenKey","HKCR\Wow6432Node\CLSID\{2633E1AF-1385-49A5-A9D2-FC6BF2D20A0A}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1775836 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1775915 AM","w3wp.exe","11796","RegCloseKey","HKU\S-1-5-82-794271414-2547205055-1060673776-2579641347-304524694_CLASSES","SUCCESS",""
"11:34:36.1775923 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1776178 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1776269 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1776353 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.1776463 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.1776619 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1776767 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1776873 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1776949 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1777014 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1777117 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.1777212 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1777322 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1777402 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1777497 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1777656 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.1821069 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1821199 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1821301 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.1821423 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1821499 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1821579 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1821647 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1821712 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.1821799 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.1821890 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1821978 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1822065 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.1822164 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1822232 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.1822320 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1822392 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1822468 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1822529 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.1822742 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1822822 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1822901 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.1823000 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.1823084 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1823145 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1823213 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1823282 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1823361 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.1823491 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.1823582 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.1823658 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.1823742 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.1823848 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.1823992 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.2188154 AM","iexplore.exe","8220","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2188321 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2188363 AM","iexplore.exe","8220","RegCreateKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections","SUCCESS","Desired Access: Query Value, Disposition: REG_OPENED_EXISTING_KEY"
"11:34:36.2188477 AM","IEXPLORE.EXE","6244","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I","SUCCESS","CreationTime: 6/5/2015 12:39:52 PM, LastAccessTime: 1/5/2016 11:34:14 AM, LastWriteTime: 1/5/2016 11:34:14 AM, ChangeTime: 1/5/2016 11:34:14 AM, FileAttributes: HSDNCI"
"11:34:36.2188572 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings","BUFFER OVERFLOW","Length: 144"
"11:34:36.2188576 AM","IEXPLORE.EXE","6244","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I","SUCCESS",""
"11:34:36.2188698 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings","BUFFER OVERFLOW","Length: 144"
"11:34:36.2188793 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings","SUCCESS","Type: REG_BINARY, Length: 447, Data: 46 00 00 00 95 28 00 00 09 00 00 00 00 00 00 00"
"11:34:36.2188971 AM","iexplore.exe","8220","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections","SUCCESS",""
"11:34:36.2189298 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: NCI, ShareMode: Read, Write, Delete, AllocationSize: 0, OpenResult: Created"
"11:34:36.2190104 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2190249 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2190359 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2192586 AM","IEXPLORE.EXE","6244","WriteFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","Offset: 0, Length: 100, Priority: Normal"
"11:34:36.2192951 AM","IEXPLORE.EXE","6244","ReadFile","C:","SUCCESS","Offset: 41,750,528, Length: 112, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
"11:34:36.2193297 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2193442 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2193552 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2193567 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2193708 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCR\PROTOCOLS\Filter\text/xml","SUCCESS","Desired Access: Read"
"11:34:36.2193864 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCR\PROTOCOLS\Filter\text/xml","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2193966 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\MINIE","SUCCESS",""
"11:34:36.2194061 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\PROTOCOLS\Filter\text/xml\CLSID","SUCCESS","Type: REG_SZ, Length: 78, Data: {807583E5-5146-11D5-A672-00B0D022E945}"
"11:34:36.2195833 AM","IEXPLORE.EXE","6244","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2195988 AM","IEXPLORE.EXE","6244","QueryBasicInformationFile","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","SUCCESS","CreationTime: 1/23/2014 2:56:14 PM, LastAccessTime: 6/4/2015 4:15:17 PM, LastWriteTime: 1/23/2014 2:56:14 PM, ChangeTime: 12/9/2015 11:48:07 AM, FileAttributes: A"
"11:34:36.2196076 AM","IEXPLORE.EXE","6244","CloseFile","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","SUCCESS",""
"11:34:36.2196855 AM","IEXPLORE.EXE","6244","CreateFile","C:\Program Files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL","SUCCESS","Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2197098 AM","IEXPLORE.EXE","6244","CreateFileMapping","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.2197414 AM","IEXPLORE.EXE","6244","CreateFileMapping","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.2197729 AM","IEXPLORE.EXE","6244","Load Image","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","SUCCESS","Image Base: 0x3370000, Image Size: 0xc000"
"11:34:36.2198258 AM","IEXPLORE.EXE","6244","CloseFile","C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL","SUCCESS",""
"11:34:36.2199413 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2199569 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Policies\Microsoft\Security","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2199683 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2199797 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Security","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2199976 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2200063 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2200143 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2200238 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID","SUCCESS","Desired Access: Read"
"11:34:36.2200345 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes\Wow6432Node\CLSID","SUCCESS","Query: Name"
"11:34:36.2200413 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes\Wow6432Node\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2200474 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes\Wow6432Node\CLSID","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2200554 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7b8a2d94-0ac9-11d1-896c-00c04fb6bfc4}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2200687 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCR\Wow6432Node\CLSID\{7b8a2d94-0ac9-11d1-896c-00c04fb6bfc4}","SUCCESS","Desired Access: Read"
"11:34:36.2200808 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2200869 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}","SUCCESS","Query: Name"
"11:34:36.2200937 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}","SUCCESS","Query: HandleTags, HandleTags: 0xe01"
"11:34:36.2201071 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2201150 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InsecureQI","NAME NOT FOUND","Length: 144"
"11:34:36.2201238 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCR\Wow6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}","SUCCESS",""
"11:34:36.2201306 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Classes\Wow6432Node\CLSID","SUCCESS",""
"11:34:36.2201462 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2201542 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2201641 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2201698 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2201766 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2201842 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2201918 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2202002 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2202063 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2202154 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2202925 AM","IEXPLORE.EXE","6244","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","CreationTime: 1/5/2016 11:34:36 AM, LastAccessTime: 1/5/2016 11:34:36 AM, LastWriteTime: 1/5/2016 11:34:36 AM, ChangeTime: 1/5/2016 11:34:36 AM, FileAttributes: ANCI"
"11:34:36.2203028 AM","IEXPLORE.EXE","6244","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS",""
"11:34:36.2205704 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2205814 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2206464 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2207114 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2207301 AM","taskhost.exe","3396","QueryNetworkOpenInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","CreationTime: 1/5/2016 11:34:36 AM, LastAccessTime: 1/5/2016 11:34:36 AM, LastWriteTime: 1/5/2016 11:34:36 AM, ChangeTime: 1/5/2016 11:34:36 AM, AllocationSize: 104, EndOfFile: 100, FileAttributes: ANCI"
"11:34:36.2207411 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS",""
"11:34:36.2209175 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2209353 AM","taskhost.exe","3396","QueryNetworkOpenInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS","CreationTime: 1/5/2016 11:34:01 AM, LastAccessTime: 1/5/2016 11:34:01 AM, LastWriteTime: 1/5/2016 11:34:01 AM, ChangeTime: 1/5/2016 11:34:01 AM, AllocationSize: 176, EndOfFile: 175, FileAttributes: ANCI"
"11:34:36.2209452 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS",""
"11:34:36.2210083 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2210292 AM","taskhost.exe","3396","QueryAttributeTagFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS","Attributes: ANCI, ReparseTag: 0x0"
"11:34:36.2210406 AM","taskhost.exe","3396","SetDispositionInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS","Delete: True"
"11:34:36.2210554 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J9RBJQYV\CreateDoc00000000[1].xml","SUCCESS",""
"11:34:36.2210988 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2211098 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2211486 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2214663 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PJJ4HI9I\CreateDoc00000000[1].xml","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2215800 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2215941 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2216066 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2216157 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2216260 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2216347 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2216454 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2216549 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2216610 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2216686 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2217716 AM","IEXPLORE.EXE","6244","Thread Create","","SUCCESS","Thread ID: 8640"
"11:34:36.2220198 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Internet Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2220316 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3","SUCCESS","Desired Access: Read"
"11:34:36.2220453 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Main","SUCCESS",""
"11:34:36.2220540 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSize","NAME NOT FOUND","Length: 144"
"11:34:36.2220677 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSizePrivate","NAME NOT FOUND","Length: 144"
"11:34:36.2220768 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IEPropFontName","SUCCESS","Type: REG_SZ, Length: 32, Data: Times New Roman"
"11:34:36.2220875 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFixedFontName","SUCCESS","Type: REG_SZ, Length: 24, Data: Courier New"
"11:34:36.2220958 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IESerifFontName","NAME NOT FOUND","Length: 144"
"11:34:36.2221057 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IESansSerifFontName","NAME NOT FOUND","Length: 144"
"11:34:36.2221156 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\International\Scripts\3\IEUIFontName","NAME NOT FOUND","Length: 144"
"11:34:36.2222121 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2222239 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2222342 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2222403 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2222486 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2222574 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2222669 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","Desired Access: Read"
"11:34:36.2222752 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2222806 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck","NAME NOT FOUND","Length: 144"
"11:34:36.2222878 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security","SUCCESS",""
"11:34:36.2224360 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2224455 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2224546 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2224657 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\.js","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2224778 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCR\.js","SUCCESS","Desired Access: Read"
"11:34:36.2224896 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCR\.js","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2224991 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN","SUCCESS",""
"11:34:36.2225075 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\.js","SUCCESS","Query: Name"
"11:34:36.2225147 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\.js","SUCCESS","Query: HandleTags, HandleTags: 0x401"
"11:34:36.2225284 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\.js","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2225364 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\.js\Content Type","SUCCESS","Type: REG_SZ, Length: 46, Data: application/javascript"
"11:34:36.2225474 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\.js","SUCCESS","Query: Name"
"11:34:36.2225539 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\.js","SUCCESS","Query: HandleTags, HandleTags: 0x401"
"11:34:36.2225729 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\.js","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2225793 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\.js\Content Type","SUCCESS","Type: REG_SZ, Length: 46, Data: application/javascript"
"11:34:36.2226896 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2227044 AM","IEXPLORE.EXE","6244","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL","SUCCESS","CreationTime: 6/8/2015 2:11:12 PM, LastAccessTime: 1/5/2016 11:34:14 AM, LastWriteTime: 1/5/2016 11:34:14 AM, ChangeTime: 1/5/2016 11:34:14 AM, FileAttributes: HSDNCI"
"11:34:36.2227127 AM","IEXPLORE.EXE","6244","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL","SUCCESS",""
"11:34:36.2228082 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Create, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: NCI, ShareMode: Read, Write, Delete, AllocationSize: 0, OpenResult: Created"
"11:34:36.2228720 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2228846 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2228937 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2230100 AM","IEXPLORE.EXE","6244","SetAllocationInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","AllocationSize: 16,535"
"11:34:36.2230548 AM","IEXPLORE.EXE","6244","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS",""
"11:34:36.2230906 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2230993 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2231472 AM","IEXPLORE.EXE","6244","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: None, AllocationSize: 0, OpenResult: Overwritten"
"11:34:36.2231487 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2231734 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2231810 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2231890 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2231913 AM","IEXPLORE.EXE","6244","WriteFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","Offset: 0, Length: 16,535, Priority: Normal"
"11:34:36.2232183 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2232255 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2232331 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2233506 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2233692 AM","taskhost.exe","3396","QueryNetworkOpenInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","CreationTime: 1/5/2016 11:34:36 AM, LastAccessTime: 1/5/2016 11:34:36 AM, LastWriteTime: 1/5/2016 11:34:36 AM, ChangeTime: 1/5/2016 11:34:36 AM, AllocationSize: 20480, EndOfFile: 16535, FileAttributes: ANCI"
"11:34:36.2233795 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS",""
"11:34:36.2235349 AM","MsMpEng.exe","540","CreateFileMapping","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","FILE LOCKED WITH WRITERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.2235501 AM","MsMpEng.exe","540","QueryStandardInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS","AllocationSize: 20,480, EndOfFile: 16,535, NumberOfLinks: 1, DeletePending: False, Directory: False"
"11:34:36.2274847 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2275018 AM","taskhost.exe","3396","QueryNetworkOpenInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS","CreationTime: 1/5/2016 11:34:01 AM, LastAccessTime: 1/5/2016 11:34:01 AM, LastWriteTime: 1/5/2016 11:34:01 AM, ChangeTime: 1/5/2016 11:34:01 AM, AllocationSize: 20480, EndOfFile: 16535, FileAttributes: ANCI"
"11:34:36.2275121 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS",""
"11:34:36.2275740 AM","taskhost.exe","3396","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2275961 AM","taskhost.exe","3396","QueryAttributeTagFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS","Attributes: ANCI, ReparseTag: 0x0"
"11:34:36.2276075 AM","taskhost.exe","3396","SetDispositionInformationFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS","Delete: True"
"11:34:36.2276212 AM","taskhost.exe","3396","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB5ZQHSB\xmltreeview[1]","SUCCESS",""
"11:34:36.2276824 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2276949 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2277394 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2277443 AM","IEXPLORE.EXE","6244","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5J0HASL\xmltreeview[1]","SUCCESS",""
"11:34:36.2277884 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_QUERY_USN_JOURNAL"
"11:34:36.2277991 AM","SearchIndexer.exe","8172","FileSystemControl","C:","SUCCESS","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2278439 AM","SearchIndexer.exe","8172","FileSystemControl","C:","","Control: FSCTL_READ_USN_JOURNAL"
"11:34:36.2279363 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Internet Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2279504 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\PhishingFilter","SUCCESS","Desired Access: Read"
"11:34:36.2279671 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\BrowserEmulation","SUCCESS",""
"11:34:36.2279754 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\PhishingFilter\EnabledV9","NAME NOT FOUND","Length: 144"
"11:34:36.2279865 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2279944 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter","SUCCESS","Desired Access: Read"
"11:34:36.2280051 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\BrowserEmulation","SUCCESS",""
"11:34:36.2280116 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter\EnabledV9","NAME NOT FOUND","Length: 144"
"11:34:36.2281115 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Internet Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2281237 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Suggested Sites","SUCCESS","Desired Access: Read"
"11:34:36.2281393 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCR\MIME\Database\Content Type\text/xml","SUCCESS",""
"11:34:36.2281476 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Suggested Sites\DataStreamEnabledState","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.2283346 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\Locale\00000409","SUCCESS","Type: REG_SZ, Length: 4, Data: 1"
"11:34:36.2283445 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\Language Groups\1","SUCCESS","Type: REG_SZ, Length: 4, Data: 1"
"11:34:36.2319032 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2319191 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Feed Discovery","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2319328 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2319435 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS","Desired Access: Query Value"
"11:34:36.2319587 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2319674 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery\Sound","NAME NOT FOUND","Length: 144"
"11:34:36.2319773 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS",""
"11:34:36.2319910 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2320001 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Feed Discovery","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2320081 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2320157 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS","Desired Access: Read"
"11:34:36.2320225 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2320294 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery\Enabled","NAME NOT FOUND","Length: 144"
"11:34:36.2320370 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS",""
"11:34:36.2320434 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2320518 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery\","SUCCESS","Desired Access: Read"
"11:34:36.2320598 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2320659 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2320738 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Feed Discovery\","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2320811 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery","SUCCESS",""
"11:34:36.2321001 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Internet Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2321073 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\MINIE","SUCCESS","Desired Access: Read"
"11:34:36.2321172 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings","SUCCESS",""
"11:34:36.2321244 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\MINIE\LinksBandEnabled","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.2321369 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2321445 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Ftp","SUCCESS","Desired Access: Read"
"11:34:36.2321525 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\FTP","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2321597 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings","SUCCESS",""
"11:34:36.2321658 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\FTP\Use Web Based FTP","NAME NOT FOUND","Length: 144"
"11:34:36.2321734 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2321818 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\Software\Wow6432Node\Microsoft\Ftp","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2323384 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Suggested Sites\DataStreamEnabledState","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"11:34:36.2325802 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2325927 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2326018 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2326147 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2326326 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:36.2326471 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2326539 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2326619 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401"
"11:34:36.2326759 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2326854 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\SysWOW64\ieframe.dll"
"11:34:36.2326934 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2326995 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x401"
"11:34:36.2327098 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2327170 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:36.2327265 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCR\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:36.2327478 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2327573 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2328630 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Policies","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2328709 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2328839 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Policies","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2328907 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2328991 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2329071 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2329154 AM","IEXPLORE.EXE","6244","RegQueryKey","HKLM\SOFTWARE\Wow6432Node","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2329226 AM","IEXPLORE.EXE","6244","RegOpenKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","SUCCESS","Desired Access: Read"
"11:34:36.2329344 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2329405 AM","IEXPLORE.EXE","6244","RegQueryValue","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep","SUCCESS","Type: REG_DWORD, Length: 4, Data: 20"
"11:34:36.2329492 AM","IEXPLORE.EXE","6244","RegCloseKey","HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History","SUCCESS",""
"11:34:36.2331507 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2331644 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","Desired Access: Query Value"
"11:34:36.2331773 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2331857 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)","NAME NOT FOUND","Length: 144"
"11:34:36.2331948 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS",""
"11:34:36.2332100 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2332184 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1","SUCCESS","Desired Access: Query Value"
"11:34:36.2332286 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1","SUCCESS","Query: HandleTags, HandleTags: 0x400"
"11:34:36.2332359 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace\NameCustomizations","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2332438 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1","SUCCESS",""
"11:34:36.2332514 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2332594 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","Desired Access: Query Value"
"11:34:36.2332666 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2332742 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)","NAME NOT FOUND","Length: 144"
"11:34:36.2332822 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS",""
"11:34:36.2332895 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2332971 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2333031 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x1"
"11:34:36.2333123 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2333259 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","Desired Access: Read"
"11:34:36.2333354 AM","IEXPLORE.EXE","6244","RegSetInfoKey","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2333415 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","Query: Name"
"11:34:36.2333487 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS","Query: HandleTags, HandleTags: 0x401"
"11:34:36.2333598 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2333678 AM","IEXPLORE.EXE","6244","RegQueryValue","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString","SUCCESS","Type: REG_EXPAND_SZ, Length: 82, Data: @%SystemRoot%\system32\shell32.dll,-9216"
"11:34:36.2334905 AM","IEXPLORE.EXE","6244","CreateFile","C:\Windows\SysWOW64\shell32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2335316 AM","IEXPLORE.EXE","6244","QueryBasicInformationFile","C:\Windows\SysWOW64\shell32.dll","SUCCESS","CreationTime: 10/13/2015 2:06:34 PM, LastAccessTime: 10/13/2015 2:06:34 PM, LastWriteTime: 8/6/2015 10:44:51 AM, ChangeTime: 10/13/2015 3:03:02 PM, FileAttributes: A"
"11:34:36.2335403 AM","IEXPLORE.EXE","6244","CloseFile","C:\Windows\SysWOW64\shell32.dll","SUCCESS",""
"11:34:36.2336011 AM","IEXPLORE.EXE","6244","CreateFile","C:\Windows\SysWOW64\shell32.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.2336517 AM","IEXPLORE.EXE","6244","CreateFileMapping","C:\Windows\SysWOW64\shell32.dll","FILE LOCKED WITH ONLY READERS","SyncType: SyncTypeCreateSection, PageProtection: "
"11:34:36.2336886 AM","IEXPLORE.EXE","6244","CreateFileMapping","C:\Windows\SysWOW64\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
"11:34:36.2337699 AM","IEXPLORE.EXE","6244","Load Image","C:\Windows\SysWOW64\shell32.dll","SUCCESS","Image Base: 0xaa80000, Image Size: 0xc4b000"
"11:34:36.2337950 AM","IEXPLORE.EXE","6244","CloseFile","C:\Windows\SysWOW64\shell32.dll","SUCCESS",""
"11:34:36.2338277 AM","IEXPLORE.EXE","6244","RegCloseKey","HKCR\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","SUCCESS",""
"11:34:36.2341584 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2341804 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2341956 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2342131 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2342348 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:36.2342595 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2342770 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2342979 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2343139 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:36.2343310 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2343458 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2343625 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2343796 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:36.2343952 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:36.2344271 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2344416 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2345666 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2345822 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2345948 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2346096 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2346263 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:36.2346442 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2346601 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2346788 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2346883 AM","iexplore.exe","8220","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2346951 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:36.2347107 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2347122 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\CaretBrowsing","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2347274 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2347350 AM","iexplore.exe","8220","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2347445 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2347529 AM","iexplore.exe","8220","RegOpenKey","HKLM\Software\Microsoft\Internet Explorer\CaretBrowsing","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2347601 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:36.2347757 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:36.2347970 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed","SUCCESS","Type: REG_BINARY, Length: 8, Data: 90 EA E2 DF 93 47 D1 01"
"11:34:36.2347981 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2348130 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2348715 AM","iexplore.exe","8220","RegQueryKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2348761 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:36.2348852 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\Exclude","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2348916 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2349053 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2349072 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\NumRows","NAME NOT FOUND","Length: 144"
"11:34:36.2349198 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2349205 AM","iexplore.exe","8220","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2349365 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:36.2349388 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage","SUCCESS","Desired Access: Read"
"11:34:36.2349509 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV","BUFFER OVERFLOW","Length: 144"
"11:34:36.2349536 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2349608 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV","BUFFER OVERFLOW","Length: 144"
"11:34:36.2349684 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2349684 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV","SUCCESS","Type: REG_BINARY, Length: 4,018, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0"
"11:34:36.2349825 AM","iexplore.exe","8220","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage","SUCCESS",""
"11:34:36.2349889 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2350042 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:36.2350186 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:36.2350319 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2350479 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:36.2350619 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:36.2350764 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:36.2350950 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2351087 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.2351976 AM","iexplore.exe","8220","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2352227 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Safety\PrivacIE","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2352451 AM","iexplore.exe","8220","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2352645 AM","iexplore.exe","8220","RegOpenKey","HKLM\Software\Microsoft\Internet Explorer\Safety\PrivacIE","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2353406 AM","iexplore.exe","8220","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2353637 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Main","SUCCESS","Desired Access: Read"
"11:34:36.2353850 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Main\AutoSearch","NAME NOT FOUND","Length: 144"
"11:34:36.2354075 AM","iexplore.exe","8220","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Main","SUCCESS",""
"11:34:36.2354223 AM","iexplore.exe","8220","RegQueryKey","HKLM\SOFTWARE","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2354398 AM","iexplore.exe","8220","RegOpenKey","HKLM\SOFTWARE\Microsoft\Internet Explorer\Main","SUCCESS","Desired Access: Read"
"11:34:36.2354572 AM","iexplore.exe","8220","RegQueryValue","HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\AutoSearch","NAME NOT FOUND","Length: 144"
"11:34:36.2354622 AM","IEXPLORE.EXE","6244","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2354751 AM","iexplore.exe","8220","RegCloseKey","HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN","SUCCESS",""
"11:34:36.2354804 AM","IEXPLORE.EXE","6244","RegOpenKey","HKCU\Software\Microsoft\Avalon.Graphics","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2358491 AM","iexplore.exe","8220","RegQueryKey","HKCU\Software","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2358780 AM","iexplore.exe","8220","RegOpenKey","HKCU\Software\Microsoft\Internet Explorer\Main","SUCCESS","Desired Access: Read"
"11:34:36.2359043 AM","iexplore.exe","8220","RegQueryValue","HKCU\Software\Microsoft\Internet Explorer\Main\AutoSearch","NAME NOT FOUND","Length: 144"
"11:34:36.2359297 AM","iexplore.exe","8220","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\Main","SUCCESS",""
"11:34:36.2359453 AM","iexplore.exe","8220","RegQueryKey","HKLM\SOFTWARE","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2359601 AM","iexplore.exe","8220","RegOpenKey","HKLM\SOFTWARE\Microsoft\Internet Explorer\Main","SUCCESS","Desired Access: Read"
"11:34:36.2359727 AM","iexplore.exe","8220","RegQueryValue","HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\AutoSearch","NAME NOT FOUND","Length: 144"
"11:34:36.2359837 AM","iexplore.exe","8220","RegCloseKey","HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN","SUCCESS",""
"11:34:36.2360689 AM","lsass.exe","772","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2360913 AM","lsass.exe","772","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1793018381-2388940469-1395372725-1133","SUCCESS","Desired Access: Read"
"11:34:36.2361175 AM","lsass.exe","772","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1793018381-2388940469-1395372725-1133\ProfileImagePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 46, Data: C:\Users\Bryon Poulter"
"11:34:36.2361358 AM","lsass.exe","772","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1793018381-2388940469-1395372725-1133\ProfileImagePath","SUCCESS","Type: REG_EXPAND_SZ, Length: 46, Data: C:\Users\Bryon Poulter"
"11:34:36.2361544 AM","lsass.exe","772","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1793018381-2388940469-1395372725-1133","SUCCESS",""
"11:34:36.2362962 AM","lsass.exe","772","CreateFile","C:\Users\Bryon Poulter\AppData\Roaming\Microsoft\Protect\S-1-5-21-1793018381-2388940469-1395372725-1133\Preferred","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: HS, ShareMode: Read, AllocationSize: n/a, Impersonating: MVI\Bryon Poulter, OpenResult: Opened"
"11:34:36.2363399 AM","lsass.exe","772","CloseFile","C:\Users\Bryon Poulter\AppData\Roaming\Microsoft\Protect\S-1-5-21-1793018381-2388940469-1395372725-1133\Preferred","SUCCESS",""
"11:34:36.2364752 AM","lsass.exe","772","CreateFile","C:\Users\Bryon Poulter\AppData\Roaming\Microsoft\Protect\S-1-5-21-1793018381-2388940469-1395372725-1133\Preferred","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: HS, ShareMode: Read, AllocationSize: n/a, Impersonating: MVI\Bryon Poulter, OpenResult: Opened"
"11:34:36.2365136 AM","lsass.exe","772","ReadFile","C:\Users\Bryon Poulter\AppData\Roaming\Microsoft\Protect\S-1-5-21-1793018381-2388940469-1395372725-1133\Preferred","SUCCESS","Offset: 0, Length: 24, Priority: Normal"
"11:34:36.2365451 AM","lsass.exe","772","CloseFile","C:\Users\Bryon Poulter\AppData\Roaming\Microsoft\Protect\S-1-5-21-1793018381-2388940469-1395372725-1133\Preferred","SUCCESS",""
"11:34:36.2370427 AM","iexplore.exe","8220","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2370621 AM","iexplore.exe","8220","RegCreateKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage","SUCCESS","Desired Access: Read/Write, Disposition: REG_OPENED_EXISTING_KEY"
"11:34:36.2370906 AM","iexplore.exe","8220","RegSetValue","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV","SUCCESS","Type: REG_BINARY, Length: 4,018, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0"
"11:34:36.2371545 AM","iexplore.exe","8220","RegCloseKey","HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage","SUCCESS",""
"11:34:36.2418173 AM","CCC.exe","6192","Thread Exit","","SUCCESS","Thread ID: 11184, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.2626773 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.2626944 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2627054 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.2627214 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.2627313 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.2627396 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.2627484 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.2627552 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.2627643 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.2627735 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.2627818 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2627898 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.2628001 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.2628065 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.2628134 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.2628198 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.2628267 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.2628328 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.2628567 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.2628677 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2628780 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.2628898 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.2628985 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.2629058 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.2629130 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.2629202 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.2629274 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.2629392 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.2629483 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.2629559 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.2629639 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.2629730 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.2629898 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.3509309 AM","RAVBg64.exe","8524","Thread Exit","","SUCCESS","Thread ID: 7472, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.3509416 AM","MOM.exe","1856","Thread Exit","","SUCCESS","Thread ID: 12956, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.5068945 AM","devenv.exe","8460","Thread Create","","SUCCESS","Thread ID: 8216"
"11:34:36.6324557 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6324732 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6324842 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.6325158 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6325253 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6325336 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6325416 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6325481 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6325568 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.6325659 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6325739 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6325815 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.6325922 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6325990 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.6326017 AM","MsMpEng.exe","540","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6326059 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6326135 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6326188 AM","MsMpEng.exe","540","RegOpenKey","HKLM\System\CurrentControlSet\Services\NisSrv\Parameters","REPARSE","Desired Access: Read"
"11:34:36.6326199 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6326268 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6326359 AM","MsMpEng.exe","540","RegOpenKey","HKLM\System\CurrentControlSet\Services\NisSrv\Parameters","SUCCESS","Desired Access: Read"
"11:34:36.6326530 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6326553 AM","MsMpEng.exe","540","RegQueryValue","HKLM\System\CurrentControlSet\services\NisSrv\Parameters\ServiceID","SUCCESS","Type: REG_BINARY, Length: 32, Data: 01 06 00 00 00 00 00 05 50 00 00 00 37 BF 7E 57"
"11:34:36.6326617 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6326701 AM","MsMpEng.exe","540","RegCloseKey","HKLM\System\CurrentControlSet\services\NisSrv\Parameters","SUCCESS",""
"11:34:36.6326709 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.6326815 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.6326891 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6326952 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6327024 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6327092 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6327161 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6327454 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.6327609 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6327723 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6327822 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.6327932 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6328092 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.6341160 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6341290 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6341389 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.6341514 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6341594 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6341670 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6341746 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6341810 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.6341890 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.6341974 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6342054 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6342130 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.6342217 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6342278 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.6342346 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6342411 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6342476 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6342537 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.6342738 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6342818 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6342894 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.6342981 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.6343057 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6343122 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6343190 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6343263 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6343327 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.6343422 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.6343517 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6343597 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6343677 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.6343764 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6343894 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.6373056 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6373216 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6373337 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Function Discovery\Categories\Provider\Microsoft.PnPX.Association","SUCCESS","Desired Access: Read"
"11:34:36.6373501 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6373634 AM","svchost.exe","1168","RegEnumValue","HKLM\SOFTWARE\Microsoft\Function Discovery\Categories\Provider\Microsoft.PnPX.Association","SUCCESS","Index: 0, Name: 00000000, Type: REG_SZ, Length: 118, Data: <provider type=""{681FD532-7EC2-4548-9ECE-44AABCFBD254}"" />"
"11:34:36.6373752 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Function Discovery\Categories\Provider\Microsoft.PnPX.Association\00000000","SUCCESS","Type: REG_SZ, Length: 118, Data: <provider type=""{681FD532-7EC2-4548-9ECE-44AABCFBD254}"" />"
"11:34:36.6374314 AM","svchost.exe","1168","RegEnumValue","HKLM\SOFTWARE\Microsoft\Function Discovery\Categories\Provider\Microsoft.PnPX.Association","NO MORE ENTRIES","Index: 1, Length: 520"
"11:34:36.6374413 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Function Discovery\Categories\Provider\Microsoft.PnPX.Association","SUCCESS",""
"11:34:36.6374709 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Policies\Microsoft\SQMClient\Windows","SUCCESS","Desired Access: Read"
"11:34:36.6374858 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows\CEIPEnable","NAME NOT FOUND","Length: 20"
"11:34:36.6374945 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\SQMClient\Windows","SUCCESS","Desired Access: Read"
"11:34:36.6375044 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable","NAME NOT FOUND","Length: 20"
"11:34:36.6375147 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows","SUCCESS",""
"11:34:36.6375230 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\SQMClient\Windows","SUCCESS",""
"11:34:36.6375504 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.6375595 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6375683 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Function Discovery\RegistryStore\Association DB","SUCCESS","Desired Access: Read"
"11:34:36.6375785 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.6375865 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Function Discovery\RegistryStore\Association DB\urn:uuid:ad4b3900-d757-42b4-b91a-c0e34189650d","NAME NOT FOUND","Length: 144"
"11:34:36.6375937 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Function Discovery\RegistryStore\Association DB","SUCCESS",""
"11:34:36.6379613 AM","lsass.exe","772","RegQueryKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6379788 AM","lsass.exe","772","RegOpenKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache\GlobalStore\IdentityCache","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.6379974 AM","lsass.exe","772","RegQueryKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.6380080 AM","lsass.exe","772","RegOpenKey","HKLM\SOFTWARE\Microsoft\IdentityStore\Cache\S-1-5-21-1793018381-2388940469-1395372725-1133\IdentityCache","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.6940861 AM","svchost.exe","5988","Thread Exit","","SUCCESS","Thread ID: 11592, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.6940876 AM","svchost.exe","5988","Thread Exit","","SUCCESS","Thread ID: 12532, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.7722830 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.7722971 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS","CreationTime: 6/4/2015 2:49:09 PM, LastAccessTime: 6/4/2015 2:49:09 PM, LastWriteTime: 9/5/2012 10:31:21 AM, ChangeTime: 6/4/2015 2:49:09 PM, FileAttributes: A"
"11:34:36.7723051 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotate\LFAnnotate.vbproj","SUCCESS",""
"11:34:36.7724263 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.7724400 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS","CreationTime: 6/4/2015 2:49:09 PM, LastAccessTime: 6/4/2015 2:49:09 PM, LastWriteTime: 12/23/2015 2:20:12 PM, ChangeTime: 12/23/2015 2:20:12 PM, FileAttributes: A"
"11:34:36.7724472 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFAnnotateC\LFAnnotateC.csproj","SUCCESS",""
"11:34:36.7725369 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.7725510 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS","CreationTime: 12/29/2015 12:24:50 PM, LastAccessTime: 12/29/2015 12:24:50 PM, LastWriteTime: 12/29/2015 12:26:55 PM, ChangeTime: 12/29/2015 12:26:55 PM, FileAttributes: A"
"11:34:36.7725582 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWeb\LFWeb.vbproj","SUCCESS",""
"11:34:36.7726479 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:36.7726612 AM","devenv.exe","8460","QueryBasicInformationFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS","CreationTime: 12/29/2015 12:30:02 PM, LastAccessTime: 12/29/2015 12:30:02 PM, LastWriteTime: 12/29/2015 12:31:10 PM, ChangeTime: 12/29/2015 12:31:10 PM, FileAttributes: A"
"11:34:36.7726684 AM","devenv.exe","8460","CloseFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.csproj","SUCCESS",""
"11:34:36.7790973 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.7791133 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.7791232 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:36.7791391 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.7791486 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.7791574 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.7791650 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.7791726 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:36.7791825 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:36.7791908 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.7791984 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.7792057 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:36.7792148 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.7792209 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.7792277 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.7792338 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.7792399 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.7792471 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:36.7792707 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.7792786 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.7792870 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:36.7792973 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:36.7793045 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.7793106 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.7793178 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.7793258 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.7793330 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:36.7793429 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:36.7793516 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:36.7793588 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.7793665 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:36.7793752 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:36.7793912 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:36.8148601 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.8148780 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:36.8148947 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:36.8149095 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:36.9107845 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9108057 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:36.9108282 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:36.9108438 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:36.9109677 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9109859 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer","SUCCESS","Desired Access: Query Value"
"11:34:36.9110053 AM","Explorer.EXE","1752","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTabSettings","NAME NOT FOUND","Length: 144"
"11:34:36.9110171 AM","Explorer.EXE","1752","RegCloseKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer","SUCCESS",""
"11:34:36.9110608 AM","Dwm.exe","3364","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9110745 AM","Dwm.exe","3364","RegOpenKey","HKCU\Software\Microsoft\Windows\DWM","SUCCESS","Desired Access: Query Value"
"11:34:36.9110912 AM","Dwm.exe","3364","RegQueryValue","HKCU\Software\Microsoft\Windows\DWM\EnableAeroPeek","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:36.9111019 AM","Dwm.exe","3364","RegCloseKey","HKCU\Software\Microsoft\Windows\DWM","SUCCESS",""
"11:34:36.9116139 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9116344 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\CTF\KnownClasses","NAME NOT FOUND","Desired Access: Read"
"11:34:36.9117180 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9117279 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9117408 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9117522 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9117598 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9117678 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9117758 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9117853 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9117921 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9117994 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118058 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118134 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118203 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118275 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118340 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118412 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118476 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118545 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118609 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118682 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118743 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118815 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9118883 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9118952 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9119016 AM","Explorer.EXE","1752","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:36.9119088 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AltTab","NAME NOT FOUND","Desired Access: Query Value"
"11:34:36.9125125 AM","svchost.exe","1168","CloseFile","C:\Windows\System32\stdole2.tlb","SUCCESS",""
"11:34:36.9126645 AM","svchost.exe","1168","CloseFile","C:\Windows\System32\es.dll","SUCCESS",""
"11:34:36.9126999 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Program Files (x86)\Trillian\trillian.exe","SUCCESS","Name: \Program Files (x86)\Trillian\trillian.exe"
"11:34:36.9127402 AM","svchost.exe","1168","Thread Exit","","SUCCESS","Thread ID: 11788, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:36.9127459 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Windows\explorer.exe","SUCCESS","Name: \Windows\explorer.exe"
"11:34:36.9127789 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.EXE","SUCCESS","Name: \Program Files (x86)\Common Files\microsoft shared\DevServer\10.0\WebDev.WebServer40.EXE"
"11:34:36.9128071 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Program Files (x86)\Trillian\trillian.exe","SUCCESS","Name: \Program Files (x86)\Trillian\trillian.exe"
"11:34:36.9128340 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Windows\explorer.exe","SUCCESS","Name: \Windows\explorer.exe"
"11:34:36.9128603 AM","Explorer.EXE","1752","QueryNameInformationFile","C:\Program Files (x86)\Trillian\trillian.exe","SUCCESS","Name: \Program Files (x86)\Trillian\trillian.exe"
"11:34:36.9439149 AM","w3wp.exe","6984","Thread Exit","","SUCCESS","Thread ID: 2104, User Time: 0.0000000, Kernel Time: 0.0000000"
"11:34:37.0151637 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:37.0151903 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0152014 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS","Desired Access: Read"
"11:34:37.0152169 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:37.0152261 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:37.0152348 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:37.0152424 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:37.0152485 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001\Name","SUCCESS","Type: REG_SZ, Length: 80, Data: Microsoft Strong Cryptographic Provider"
"11:34:37.0152565 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001","SUCCESS",""
"11:34:37.0152648 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:37.0152724 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0152800 AM","svchost.exe","1168","RegOpenKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS","Desired Access: Read"
"11:34:37.0152892 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:37.0152956 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Type","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1"
"11:34:37.0153021 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:37.0153082 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:37.0153257 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:37.0153325 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider\Image Path","SUCCESS","Type: REG_SZ, Length: 66, Data: %SystemRoot%\system32\rsaenh.dll"
"11:34:37.0153568 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:37.0153648 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0153728 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography","SUCCESS","Desired Access: Read"
"11:34:37.0153827 AM","svchost.exe","1168","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0153907 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:37.0153967 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:37.0154040 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:37.0154108 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:37.0154173 AM","svchost.exe","1168","RegQueryValue","HKLM\SOFTWARE\Microsoft\Cryptography\MachineGuid","SUCCESS","Type: REG_SZ, Length: 74, Data: 5975e8af-5aa5-4f2b-a2df-ed058c27fadf"
"11:34:37.0154302 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography","SUCCESS",""
"11:34:37.0154389 AM","svchost.exe","1168","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: Read"
"11:34:37.0154469 AM","svchost.exe","1168","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0154557 AM","svchost.exe","1168","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0154652 AM","svchost.exe","1168","RegCloseKey","HKLM","SUCCESS",""
"11:34:37.0154807 AM","svchost.exe","1168","RegCloseKey","HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider","SUCCESS",""
"11:34:37.0388016 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0388187 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:37.0388358 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:37.0388510 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:37.0494562 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0494764 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AutomationOptions","SUCCESS","Desired Access: Read"
"11:34:37.0494946 AM","devenv.exe","8460","RegSetInfoKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AutomationOptions","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0495030 AM","devenv.exe","8460","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0495121 AM","devenv.exe","8460","RegOpenKey","HKCU\Software\Microsoft\VisualStudio\10.0\AutomationOptions","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0495235 AM","devenv.exe","8460","RegQueryValue","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AutomationOptions\RunMacros","NAME NOT FOUND","Length: 144"
"11:34:37.0495341 AM","devenv.exe","8460","RegCloseKey","HKCU\Software\Microsoft\VisualStudio\10.0_Config\AutomationOptions","SUCCESS",""
"11:34:37.0568054 AM","devenv.exe","8460","CreateFile","C:\Users\Bryon Poulter\Documents\Visual Studio 2010\Projects\LFAnnotate\LFWebC\LFWebC.Publish.xml","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.0708464 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0708651 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:37.0708844 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:37.0708989 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""
"11:34:37.0737182 AM","itype.exe","3980","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0737262 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0737399 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0737551 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0737646 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0737756 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0737851 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0737927 AM","Explorer.EXE","1752","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Hfref\Oelba Cbhygre\NccQngn\Ybpny\Grzc\Cebpzba64.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 00 00 00 00 57 00 00 00 15 83 18 00"
"11:34:37.0737954 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0738053 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0738125 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0738235 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0738360 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0738471 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0738505 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0738569 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0738642 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0738748 AM","itype.exe","3980","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0738779 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0738798 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Hfref\Oelba Cbhygre\NccQngn\Ybpny\Grzc\Cebpzba64.rkr","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 00 00 00 00 58 00 00 00 15 83 18 00"
"11:34:37.0738862 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0738866 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0738953 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0739056 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0739121 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0739208 AM","itype.exe","3980","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0739216 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0739383 AM","itype.exe","3980","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0739630 AM","itype.exe","3980","CloseFile","C:\","SUCCESS",""
"11:34:37.0739649 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1,612, Data: 0E 00 00 00 6C 01 00 00 70 11 00 00 25 49 31 09"
"11:34:37.0739873 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0739892 AM","Explorer.EXE","1752","RegQueryValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\IvfhnyFghqvb.10.0","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 0D 00 00 00 5E 01 00 00 97 F1 A0 00"
"11:34:37.0740029 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\IvfhnyFghqvb.10.0","SUCCESS","Type: REG_BINARY, Length: 72, Data: 0E 00 00 00 0D 00 00 00 5E 01 00 00 CB F5 A0 00"
"11:34:37.0740204 AM","Explorer.EXE","1752","RegSetValue","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA","SUCCESS","Type: REG_BINARY, Length: 1,612, Data: 0E 00 00 00 6C 01 00 00 70 11 00 00 59 4D 31 09"
"11:34:37.0740246 AM","itype.exe","3980","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0740485 AM","itype.exe","3980","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0740641 AM","itype.exe","3980","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0741074 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0741150 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0741245 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0741291 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0741341 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0741462 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0741660 AM","ipoint.exe","3960","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0741808 AM","ipoint.exe","3960","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0742002 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0742013 AM","ipoint.exe","3960","CloseFile","C:\","SUCCESS",""
"11:34:37.0742146 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0742272 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0742602 AM","ipoint.exe","3960","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0742747 AM","ipoint.exe","3960","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0742812 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0742891 AM","ipoint.exe","3960","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0742956 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0743100 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0743439 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0743579 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0743640 AM","itype.exe","3980","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0743728 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0744264 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0744408 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0744556 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0744579 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0745130 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0745168 AM","itype.exe","3980","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0745271 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0745294 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0745431 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0745552 AM","itype.exe","3980","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0745689 AM","itype.exe","3980","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0745830 AM","itype.exe","3980","CloseFile","C:\","SUCCESS",""
"11:34:37.0745970 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0746328 AM","itype.exe","3980","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0746453 AM","itype.exe","3980","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0746582 AM","itype.exe","3980","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0746955 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0747092 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0747118 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0747217 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0747228 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0747362 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0747491 AM","ipoint.exe","3960","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0747631 AM","ipoint.exe","3960","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0747795 AM","ipoint.exe","3960","CloseFile","C:\","SUCCESS",""
"11:34:37.0747863 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0747996 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0748110 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0748354 AM","ipoint.exe","3960","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0748498 AM","ipoint.exe","3960","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0748650 AM","ipoint.exe","3960","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0748658 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0748795 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0748916 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0749163 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0749296 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0749433 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0749935 AM","itype.exe","3980","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0749946 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0750079 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0750201 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0750710 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0750840 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0750855 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0750999 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0751052 AM","itype.exe","3980","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0751140 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0751395 AM","itype.exe","3980","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0751535 AM","itype.exe","3980","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0751680 AM","itype.exe","3980","CloseFile","C:\","SUCCESS",""
"11:34:37.0751896 AM","ipoint.exe","3960","QueryNameInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Name: \Users\BRYONP~1\AppData\Local\Temp\Procmon64.exe"
"11:34:37.0752212 AM","itype.exe","3980","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0752337 AM","itype.exe","3980","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0752466 AM","itype.exe","3980","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0752839 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0753021 AM","ipoint.exe","3960","QueryBasicInformationFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS","CreationTime: 1/5/2016 11:24:32 AM, LastAccessTime: 1/5/2016 11:24:32 AM, LastWriteTime: 1/5/2016 11:24:32 AM, ChangeTime: 1/5/2016 11:24:32 AM, FileAttributes: HA"
"11:34:37.0753044 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0753120 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local\Temp\Procmon64.exe","SUCCESS",""
"11:34:37.0753177 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0753307 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0753402 AM","ipoint.exe","3960","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0753538 AM","ipoint.exe","3960","QueryDirectory","C:\Users","SUCCESS","Filter: Users, 1: Users"
"11:34:37.0753694 AM","ipoint.exe","3960","CloseFile","C:\","SUCCESS",""
"11:34:37.0753812 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0754093 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0754272 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0754276 AM","ipoint.exe","3960","CreateFile","C:\Users","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0754420 AM","ipoint.exe","3960","QueryDirectory","C:\Users\BRYONP~1","SUCCESS","Filter: BRYONP~1, 1: Bryon Poulter"
"11:34:37.0754588 AM","ipoint.exe","3960","CloseFile","C:\Users","SUCCESS",""
"11:34:37.0754800 AM","itype.exe","3980","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0754941 AM","itype.exe","3980","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0755070 AM","itype.exe","3980","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0755135 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0755306 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData","SUCCESS","Filter: AppData, 1: AppData"
"11:34:37.0755443 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter","SUCCESS",""
"11:34:37.0755853 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0755986 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0756009 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0756104 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0756146 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Filter: Local, 1: Local"
"11:34:37.0756188 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0756275 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData","SUCCESS",""
"11:34:37.0756290 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0756389 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0756477 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0756557 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0756629 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0756712 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0756769 AM","ipoint.exe","3960","CreateFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0756838 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0756918 AM","ipoint.exe","3960","QueryDirectory","C:\Users\Bryon Poulter\AppData\Local\Temp","SUCCESS","Filter: Temp, 1: Temp"
"11:34:37.0756929 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0757009 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0757047 AM","ipoint.exe","3960","CloseFile","C:\Users\Bryon Poulter\AppData\Local","SUCCESS",""
"11:34:37.0757073 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0757172 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0757252 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0757340 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0757419 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0757480 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0757556 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0757674 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0757727 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0757758 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0757845 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0757849 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0757906 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0757971 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0757986 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0758073 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0758085 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0758187 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\","SUCCESS","Desired Access: Read"
"11:34:37.0758191 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0758282 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0758297 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0758343 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\GameMode","NAME NOT FOUND","Length: 144"
"11:34:37.0758411 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0758427 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping","SUCCESS",""
"11:34:37.0758560 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0758643 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0758738 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0758868 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0758959 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0759027 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0759077 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0759145 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0759160 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0759244 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0759263 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0759316 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0759347 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0759396 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0759438 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0759472 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0759518 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0759586 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0759597 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0759673 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0759692 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0759738 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0759822 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0759826 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0759955 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0760080 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0760114 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0760175 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0760217 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0760255 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0760316 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0760403 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0760476 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0760555 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0760658 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0760742 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0760780 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0760821 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0760848 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0760894 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0760932 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0760981 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0761053 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0761129 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0761194 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0761217 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0761285 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0761293 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0761380 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0761392 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0761449 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0761517 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0761547 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0761623 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0761635 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0761707 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0761722 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0761772 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0761798 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0761878 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0761882 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0761966 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0762026 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0762053 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0762125 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0762152 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0762194 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0762235 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0762273 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0762311 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0762380 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0762384 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0762475 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0762490 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0762543 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0762631 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0762642 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0762711 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0762733 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0762775 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0762813 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0762866 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0762897 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0762980 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0763060 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0763133 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0763285 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0763399 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0763509 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0763589 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0763695 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0763832 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0763919 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0763999 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0764068 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0764151 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0764166 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0764223 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0764299 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0764311 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0764402 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0764417 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0764467 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0764550 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0764615 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0764729 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0764797 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0764934 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0765060 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0765147 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0765254 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0765345 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0765440 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0765520 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0765596 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0765694 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0765801 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0765828 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0765907 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0765923 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0766048 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0766063 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0766143 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0766162 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0766242 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0766261 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0766337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0766348 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0766413 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0766451 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0766500 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0766542 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0766633 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0766717 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0766763 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0766797 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0766918 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0766926 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0767033 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0767105 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0767185 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0767211 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0767268 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0767299 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0767337 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0767382 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0767420 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0767451 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0767530 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0767599 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0767690 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0767789 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0767800 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0767876 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0767899 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0767949 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0767971 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0768036 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0768059 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0768112 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0768184 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0768207 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0768275 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0768291 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0768363 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0768371 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0768443 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0768466 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0768523 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0768595 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0768599 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0768705 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0768914 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0768986 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0769066 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0769138 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0769218 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0769290 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0769355 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0769435 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0769549 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0769606 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0769701 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\106","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0769709 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0769807 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0769849 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0769918 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0769944 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0770077 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0770085 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0770229 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0770336 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0770340 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0770435 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0770514 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0770617 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0770708 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0770780 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0770868 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0770940 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0771035 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0771039 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0771111 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0771180 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0771229 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0771271 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0771385 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0771419 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0771468 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0771548 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0771617 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0771655 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0771700 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0771773 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0771792 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0771894 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0771951 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0771974 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0772050 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0772061 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0772134 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0772160 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0772232 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0772316 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0772343 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0772430 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0772480 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0772525 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0772571 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0772662 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0772689 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0772761 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0772784 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\106","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0772852 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0772890 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0772955 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0772981 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0773035 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0773092 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0773114 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0773168 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0773202 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0773263 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0773365 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0773620 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0773764 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0773852 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0773890 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0774023 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0774065 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0774182 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0774209 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0774327 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0774426 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0774456 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0774521 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\20","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0774574 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0774665 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0774760 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0774768 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0774882 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0774969 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0775057 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0775080 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0775171 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0775194 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0775254 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0775311 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0775346 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0775391 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0775429 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0775494 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0775501 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0775597 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0775600 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0775695 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0775726 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0775790 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0775851 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0775866 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0775961 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0775996 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0776026 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0776113 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0776132 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0776193 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0776220 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0776273 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0776304 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0776357 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0776380 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0776425 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0776463 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0776513 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0776562 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0776646 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0776668 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0776748 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0776763 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0776839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0776847 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0776931 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0776961 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0777018 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0777098 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777151 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777185 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0777239 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0777318 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0777334 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777387 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0777425 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0777467 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0777508 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0777539 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777577 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0777619 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0777672 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0777702 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0777744 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777767 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0777828 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0777851 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0777908 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0777972 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0777980 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0778071 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0778079 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0778158 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0778181 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0778223 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0778265 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0778299 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0778341 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0778375 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0778413 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0778459 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0778508 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0778535 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0778580 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0778607 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0778664 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0778691 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0778740 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0778805 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0778884 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0778915 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0778999 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0779086 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0779090 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0779177 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0779204 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0779261 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0779287 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0779337 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0779363 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0779420 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0779447 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0779500 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0779534 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0779573 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0779622 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0779656 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0779702 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0779782 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0779785 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0779896 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0779918 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0780021 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0780048 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0780101 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0780154 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0780196 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0780242 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0780302 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0780356 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0780394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0780447 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0780473 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0780530 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0780546 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0780633 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0780641 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0780717 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0780819 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0780827 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0780922 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0780941 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\104","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0781055 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0781097 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0781139 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0781192 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0781237 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0781313 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0781340 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0781397 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0781431 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0781488 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0781538 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0781614 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0781713 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0781804 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0782039 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0782199 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0782355 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0782522 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0782598 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0782697 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0782716 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0782834 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0782895 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0782929 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0783024 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0783096 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0783130 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783180 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0783229 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783263 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783347 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783374 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783469 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783480 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783575 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783583 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\104","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783663 AM","ipoint.exe","3960","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783689 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783773 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0783811 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0783868 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0783902 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0783944 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0784005 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0784027 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0784092 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0784122 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0784214 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0784301 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0784396 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0784495 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0784609 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0784757 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0784928 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0785031 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0785172 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0785217 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0785267 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\18","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0785373 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0785495 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0785582 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0785613 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0785673 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0785704 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0785746 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0785844 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0785886 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0785924 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0785970 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0786008 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0786065 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0786088 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0786141 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0786156 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0786244 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0786255 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0786369 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0786388 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0786468 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0786475 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0786578 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0786616 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0786650 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0786696 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0786734 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0786802 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0786821 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0786920 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0786932 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0787004 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0787030 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0787072 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0787110 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0787156 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0787179 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0787266 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0787270 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0787388 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0787422 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0787471 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0787509 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0787547 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0787574 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0787623 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0787673 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0787703 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0787821 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0787908 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0787988 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0788057 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0788140 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0788213 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0788311 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0788395 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0788467 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0788555 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0788676 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0788752 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0788787 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0788832 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0788874 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0788901 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0788965 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0788988 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0789030 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0789056 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0789113 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0789140 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0789182 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0789216 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0789258 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0789281 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0789330 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0789360 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0789395 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0789467 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0789573 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0789577 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0789676 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0789706 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0789756 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0789782 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0789828 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0789874 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0789915 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0789976 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0790007 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0790048 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0790098 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0790125 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0790178 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0790197 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0790246 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0790258 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0790341 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0790353 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0790467 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0790546 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0790577 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0790626 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0790668 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0790695 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0790763 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0790805 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0790828 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0790892 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0790923 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0790984 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0790999 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0791094 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0791128 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0791170 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0791204 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0791253 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0791272 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0791345 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0791402 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0791455 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0791489 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\801","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0791535 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0791599 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0791607 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0791698 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0791710 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0791793 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0791816 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0791865 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0791892 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0791960 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0791987 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0792033 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0792082 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0792105 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0792185 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0792390 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0792481 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0792569 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0792603 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0792637 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0792713 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0792759 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0792789 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0792865 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0792918 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0792945 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0793013 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0793093 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0793150 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0793200 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0793245 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0793276 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0793352 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0793374 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0793416 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0793466 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0793492 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0793565 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0793568 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0793663 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0793698 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0793755 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0793781 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0793842 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0793853 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0793937 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0793941 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0794051 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0794082 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0794146 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0794173 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\801","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0794279 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0794294 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0794378 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0794389 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0794488 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0794511 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0794568 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0794579 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0794667 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0794667 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0794751 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0794770 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0794838 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0794922 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0794986 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0795070 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0795176 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0795256 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0795264 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0795332 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0795401 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0795420 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0795477 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0795560 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0795583 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0795636 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0795708 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0795773 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0795800 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0795849 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0795891 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\21","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0796043 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0796104 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0796142 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0796187 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0796241 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0796290 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0796313 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0796374 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0796404 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0796472 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0796488 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0796567 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0796617 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0796655 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0796720 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0796739 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0796796 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0796853 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0796887 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0796944 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0797001 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0797073 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0797119 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0797157 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0797206 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0797236 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0797274 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0797305 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0797358 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0797396 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0797438 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0797476 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0797525 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0797556 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0797605 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0797632 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0797681 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0797700 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0797799 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0797807 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0797928 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798004 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0798035 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798088 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0798118 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0798153 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0798198 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0798240 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0798297 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0798392 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798403 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0798495 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0798510 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798593 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0798628 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0798662 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0798704 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0798746 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0798768 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0798818 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798848 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0798905 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0798958 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0798981 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0799053 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0799065 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0799148 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0799152 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0799217 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0799281 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0799300 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0799377 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0799396 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0799464 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0799483 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0799536 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0799559 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0799639 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0799643 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0799726 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0799730 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0799814 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0799890 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0799912 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0799954 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0799992 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0800057 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0800125 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0800209 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0800289 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0800323 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0800384 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0800399 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0800475 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0800486 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0800562 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0800570 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0800661 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0800677 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0800741 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0800760 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0800832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0800832 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0800924 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0800935 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0801030 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0801064 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0801117 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0801152 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0801228 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0801247 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0801292 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0801338 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0801368 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0801437 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0801452 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0801539 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0801562 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0801612 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0801650 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0801676 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0801726 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0801764 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0801809 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0801889 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0801977 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0801984 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0802083 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0802087 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0802170 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0802246 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0802258 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0802383 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0802406 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0802459 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0802547 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0802566 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0802638 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0802649 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0802722 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0802737 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0802824 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0802851 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0802908 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0802965 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0803014 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0803048 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0803136 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0803242 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0803322 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0803398 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0803489 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0803569 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0803630 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0803721 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0803915 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0803923 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0804033 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0804124 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0804132 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0804208 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0804295 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0804310 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0804371 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0804504 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0804565 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0804584 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0804694 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0804702 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0804786 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0804846 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0804896 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0804938 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0804979 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0805036 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0805059 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0805112 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0805124 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0805253 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0805284 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0805344 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0805394 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0805439 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0805477 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0805553 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0805584 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0805622 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0805671 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0805698 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0805778 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0805800 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0805873 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0805884 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0805968 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0806017 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0806044 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0806097 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0806131 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0806173 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0806226 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0806241 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0806317 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0806390 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0806466 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0806542 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0806606 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0806686 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0806796 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0806880 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0806952 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0806956 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0807017 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0807104 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0807123 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0807176 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0807268 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0807283 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0807340 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0807405 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0807484 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0807511 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0807602 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\78","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0807663 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0807743 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0807819 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0807826 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0807918 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0807941 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0808024 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0808039 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0808104 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0808119 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0808214 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0808229 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0808298 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0808317 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0808378 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0808404 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0808457 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0808484 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0808556 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0808602 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0808644 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0808693 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0808777 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0808819 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0808864 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0808906 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0808948 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0808993 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0809012 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0809077 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0809096 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0809168 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0809172 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0809263 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0809275 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0809358 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0809427 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0809453 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0809507 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0809609 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0809613 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0809693 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0809769 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0809822 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0809841 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0809936 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0809982 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0810077 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0810119 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0810168 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0810229 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0810248 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0810328 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0810350 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0810411 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0810442 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0810495 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0810537 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0810582 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0810647 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0810658 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0810723 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0810803 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0810909 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0810985 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0811057 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0811114 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0811213 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0811270 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0811282 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0811358 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0811441 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0811457 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0811506 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0811590 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0811631 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0811799 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0811875 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0811917 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0812004 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0812019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0812126 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0812160 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812209 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0812251 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0812285 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812342 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812373 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0812422 AM","ipoint.exe","3960","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0812452 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0812525 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0812567 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812608 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0812665 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\Components\Commands\504","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0812730 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812776 AM","ipoint.exe","3960","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0812814 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0812863 AM","ipoint.exe","3960","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0812893 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0812973 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0812981 AM","ipoint.exe","3960","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0813064 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0813072 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0813144 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0813167 AM","ipoint.exe","3960","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0813228 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0813274 AM","ipoint.exe","3960","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0813319 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0813395 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0813486 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0813642 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0813737 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0813768 AM","ipoint.exe","3960","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0813840 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0813931 AM","ipoint.exe","3960","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0813935 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0814038 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0814083 AM","ipoint.exe","3960","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0814110 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0814201 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0814292 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0814353 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0814444 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint\ModelSpecific\13\EventMapping\4","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0814748 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0814840 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0814935 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0815011 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0815052 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0815106 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0815197 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0815224 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0815326 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0815379 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0815497 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0815600 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0815607 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0815733 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0815740 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0815877 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0815893 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0816037 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0816045 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Read"
"11:34:37.0816147 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0816155 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0816238 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0816250 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0816364 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0816387 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0816455 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0816482 AM","ipoint.exe","3960","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0816554 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0816588 AM","ipoint.exe","3960","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliPoint","SUCCESS","Desired Access: Query Value"
"11:34:37.0816717 AM","ipoint.exe","3960","RegSetInfoKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0816725 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0816790 AM","ipoint.exe","3960","RegQueryValue","HKCU\Software\Microsoft\IntelliPoint\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 13"
"11:34:37.0816828 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0816869 AM","ipoint.exe","3960","RegCloseKey","HKCU\Software\Microsoft\IntelliPoint","SUCCESS",""
"11:34:37.0816934 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0817021 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0817200 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0817272 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0817348 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0817440 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0818177 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0818318 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0818485 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0818690 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0818778 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\79","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0818975 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0819051 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0819135 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0819200 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0819287 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0819359 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0819435 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0819504 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0819580 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0819690 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0819808 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0819884 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0819948 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0820009 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0820081 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0820146 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0820218 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0820283 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0820344 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0820416 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0820515 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0820587 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0820659 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0820720 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0820792 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0820914 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0820990 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0821058 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0821127 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0821210 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0821279 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0821362 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0821427 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0821492 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0821564 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0821670 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0821746 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0821815 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0821872 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0821944 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0822009 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0822104 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0822176 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0822237 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0822309 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0822526 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0822647 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0822723 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0822788 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0822864 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0822936 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0823012 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0823084 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0823149 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0823225 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0823339 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0823415 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0823594 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0823666 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0823746 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0823814 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0823890 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0823962 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0824027 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0824118 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0824259 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0824350 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0824453 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0824536 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0824624 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0824696 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0824783 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0824871 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0825764 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0825912 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0826053 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0826254 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0826342 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0826475 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0826562 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0826646 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0826718 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0826806 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0826882 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0826958 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0827072 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0827171 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0827277 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0827368 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0827459 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0827532 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0827608 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0827695 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0828414 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0828562 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0828710 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0828908 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0828995 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\80","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0829189 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0829265 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0829356 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0829428 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0829512 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0829580 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0829664 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0829736 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0829801 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0829877 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0829995 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0830082 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0830151 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0830215 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0830287 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0830348 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0830421 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0830485 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0830546 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0830630 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0830728 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0830797 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0830869 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0830934 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0831002 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0831124 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0831200 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0831272 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0831352 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0831443 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0831511 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0831584 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0831652 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0831713 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0831785 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0831895 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0831968 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0832036 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0832093 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0832173 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0832234 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0832310 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0832374 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0832439 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0832515 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0832713 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0832804 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0832887 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0832956 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0833040 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0833218 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0833302 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0833374 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0833439 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0833518 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0833636 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0833716 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0833788 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0833853 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0833933 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0834001 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0834077 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0834149 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0834222 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0834309 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0834454 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0834537 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0834636 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0834720 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0834807 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0834879 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0835043 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0835130 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0835875 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0836016 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0836160 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0836404 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0836491 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0836609 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0836689 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0836776 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0836844 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0836920 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0836997 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0837076 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0837190 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0837270 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0837369 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0837472 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0837574 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0837647 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0837723 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0837810 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0838536 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0838677 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0838813 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0839026 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0839129 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\81","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0839327 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0839406 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0839490 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0839562 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0839646 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0839714 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0839787 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0839961 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0840049 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0840132 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0840300 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0840482 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0840608 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0840699 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0840817 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0840916 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0841003 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0841083 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0841151 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0841235 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0841360 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0841451 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0841527 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0841592 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0841664 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0841805 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0841927 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0842003 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0842067 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0842147 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0842227 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0842326 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0842402 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0842463 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0842542 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0842656 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0842736 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0842808 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0842869 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0842945 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0843010 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0843086 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0843162 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0843234 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0843318 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0843546 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0843637 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0843717 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0843797 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0843888 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0843960 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0844044 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0844116 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0844181 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0844261 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0844375 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0844454 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0844523 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0844587 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0844663 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0844732 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0844812 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0844884 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0844949 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0845025 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0845165 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0845249 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0845359 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0845446 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0845545 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0845618 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0845697 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0845789 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0846716 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0846883 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0847039 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0847260 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0847355 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0847484 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0847568 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0847655 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0847727 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0847818 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0847894 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0847974 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0848111 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0848202 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\417","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0848324 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0848423 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0848518 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0848594 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0848685 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0848784 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0849556 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0849704 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar\dpgfavbar.dll","SUCCESS","Filter: dpgfavbar.dll, 1: DPGFavBar.dll"
"11:34:37.0849863 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFavBar","SUCCESS",""
"11:34:37.0850080 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0850168 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\82","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0850380 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0850460 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0850544 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0850624 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0850711 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0850783 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0850867 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0850954 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0851023 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0851103 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0851213 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0851289 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0851361 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0851422 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0851494 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0851559 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0851631 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0851703 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0851764 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0851840 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0851946 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0852034 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0852110 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0852175 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0852247 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0852376 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0852456 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0852536 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0852600 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0852680 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0852748 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0852832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0852901 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0852965 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0853041 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0853151 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0853227 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0853296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0853357 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0853440 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0853509 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0853585 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0853649 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0853714 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0853801 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0854026 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0854117 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0854197 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0854269 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0854444 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0854524 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0854603 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0854676 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0854740 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0854816 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0854930 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0855010 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0855082 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0855143 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0855219 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0855291 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0855367 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0855440 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0855501 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0855580 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0855717 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0855812 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0855915 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0855995 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0856086 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0856154 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0856230 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0856318 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0857097 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0857264 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:37.0857424 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:37.0857633 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0857720 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0857884 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0857967 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0858051 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0858123 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0858203 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0858313 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0858389 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0858519 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0858614 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0858716 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0858796 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0858884 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0858956 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0859036 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0859123 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0859876 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0860028 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:37.0860168 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:37.0860374 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0860461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0860670 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0860746 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0860830 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0860898 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0860997 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0861065 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0861141 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0861214 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0861274 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0861354 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0861476 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0861552 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0861620 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0861677 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0861750 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0861814 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0861886 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0861951 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0862012 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0862084 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0862183 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0862255 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0862327 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0862384 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0862464 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0862586 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0862772 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0862844 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0862920 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0863019 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0863088 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0863171 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0863240 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0863304 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0863380 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0863491 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0863578 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0863646 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0863707 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0863779 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0863855 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0863931 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0864000 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0864061 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0864133 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0864338 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0864513 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0864589 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0864654 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0864730 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0864798 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0864874 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0864946 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0865011 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0865102 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0865216 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0865296 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0865365 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0865433 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0865509 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0865574 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0865653 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0865722 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0865794 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0865878 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0866011 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0866094 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\706","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0866193 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0866269 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0866360 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0866429 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0866509 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0866588 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0867083 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0867231 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0867391 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0867634 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0867717 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0867835 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0867915 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0867999 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0868067 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0868147 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0868219 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0868295 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0868413 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0868493 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\706","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0868584 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0868675 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0868767 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0868839 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0868960 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0869052 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0869553 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0869705 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0869861 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0870082 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0870173 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\25","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0870374 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0870458 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0870538 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0870606 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0870690 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0870758 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0870831 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0870903 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0870964 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0871040 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0871150 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0871222 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0871294 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0871351 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0871435 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0871500 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0871682 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0871754 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0871815 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0871899 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0872020 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0872150 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0872229 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0872290 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0872359 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0872488 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0872579 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0872651 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0872716 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0872792 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0872860 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0872936 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0873016 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0873088 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0873168 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0873286 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0873374 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0873537 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0873594 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0873674 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0873742 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0873822 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0873887 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0873948 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0874020 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0874217 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0874301 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0874388 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0874453 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0874529 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0874598 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0874677 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0874750 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0874814 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0874890 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0875004 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0875092 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0875171 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0875236 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0875308 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0875377 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0875453 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0875525 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0875590 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0875666 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0875791 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0875871 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\803","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0875981 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0876069 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0876171 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0876251 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0876338 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0876422 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0876897 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0877038 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0877179 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0877384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0877467 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0877585 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0877661 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0877745 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0877817 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0877897 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0877969 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0878045 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0878155 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0878239 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\803","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0878330 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0878410 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0878494 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0878574 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0878688 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0878790 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0879258 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0879398 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0879539 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0879744 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0879832 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\31","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0880029 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0880113 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0880200 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0880276 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0880371 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0880550 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0880630 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0880706 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0880778 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0880858 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0880972 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0881048 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0881116 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0881177 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0881250 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0881314 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0881386 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0881455 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0881516 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0881588 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0881687 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0881763 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0881839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0881896 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0881968 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0882090 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0882169 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0882329 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0882390 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0882462 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0882527 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0882610 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0882683 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0882751 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0882831 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0882949 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0883025 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0883093 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0883150 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0883222 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0883283 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0883355 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0883424 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0883481 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0883553 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0883758 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0883838 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0883914 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0883983 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0884070 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0884150 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0884233 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0884309 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0884374 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0884450 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0884564 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0884644 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0884716 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0884777 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0884849 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0884918 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0884994 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0885062 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0885127 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0885199 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0885324 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0885412 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\100","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0885514 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0885590 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0885678 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0885754 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0885830 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0885917 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0886385 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0886526 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0886666 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0886871 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0886955 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0887069 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0887153 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0887236 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0887301 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0887381 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0887464 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0887552 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0887677 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0887765 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\100","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0887856 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0887932 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0888019 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0888088 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0888164 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0888251 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0888707 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0888852 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0888989 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0889198 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0889445 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\14","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0889654 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0889734 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0889817 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0889886 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0889973 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0890045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0890121 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0890194 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0890270 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0890346 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0890460 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0890532 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0890612 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0890684 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0890764 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0890832 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0890904 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0890973 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0891125 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0891197 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0891296 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0891364 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0891437 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0891494 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0891562 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0891684 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0891760 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0891828 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0891900 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0891980 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0892049 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0892121 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0892189 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0892250 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0892334 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0892444 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0892524 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0892592 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0892653 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0892721 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0892786 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0892858 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0892927 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0892991 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0893067 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0893265 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0893349 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0893421 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0893485 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0893561 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0893637 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0893725 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0893828 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0893896 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0893972 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0894086 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0894162 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0894234 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0894295 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0894371 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0894436 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0894512 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0894584 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0894645 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0894717 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0894850 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0894941 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\101","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0895040 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0895120 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0895207 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0895276 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0895348 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0895432 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0895911 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0896059 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0896203 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0896405 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0896488 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0896606 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0896690 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0896773 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0896846 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0896933 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0897013 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0897100 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0897963 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0898066 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\101","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0898176 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0898260 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0898442 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0898514 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0898606 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0898704 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0899206 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0899480 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0899662 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0899887 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0899970 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\15","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0900179 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0900290 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0900377 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0900445 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0900533 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0900613 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0900692 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0900765 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0900841 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0900928 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0901050 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0901130 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0901293 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0901358 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0901430 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0901502 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0901582 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0901654 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0901715 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0901783 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0901882 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0901954 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0902027 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0902087 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0902152 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0902274 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0902350 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0902422 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0902483 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0902555 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0902620 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0902699 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0902772 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0902832 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0902905 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0903011 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0903099 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0903171 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0903232 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0903311 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0903376 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0903448 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0903517 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0903574 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0903646 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0903847 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0903927 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0903999 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0904075 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0904159 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0904228 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0904307 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0904376 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0904448 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0904532 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0904657 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0904741 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0904813 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0904874 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0904950 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0905014 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0905090 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0905163 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0905223 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0905299 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0905429 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0905508 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\302","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0905607 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0905687 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0905775 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0905843 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0905923 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0906006 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0906508 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0906660 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0906805 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0907010 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0907143 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0907284 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0907375 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0907470 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0907538 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0907614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0907687 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0907763 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0907877 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0907956 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\302","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0908051 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0908131 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0908215 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0908283 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0908473 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0908584 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0909059 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0909222 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0909370 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0909583 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0909671 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\42","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0909872 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0909952 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0910036 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0910100 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0910184 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0910252 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0910332 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0910404 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0910469 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0910545 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0910655 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0910743 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0910815 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0910876 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0910948 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0911013 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0911085 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0911153 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0911214 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0911286 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0911385 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0911461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0911530 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0911590 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0911666 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0911796 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0911875 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0911951 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0912024 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0912103 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0912168 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0912244 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0912313 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0912377 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0912453 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0912560 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0912636 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0912704 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0912765 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0912837 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0912902 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0912978 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0913092 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0913164 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0913244 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0913461 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0913548 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0913647 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0913723 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0913806 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0913879 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0913962 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0914046 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0914114 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0914194 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0914327 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0914415 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0914491 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0914555 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0914631 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0914700 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0914780 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0914859 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0914924 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0915000 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0915137 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0915232 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\203","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0915338 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0915418 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0915509 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0915582 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0915661 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0915749 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0916239 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0916387 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0916539 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0916768 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0916855 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0916984 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0917079 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0917178 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0917246 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0917326 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0917402 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0917482 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0917600 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0917684 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\203","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0917779 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0917862 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0917957 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0918037 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0918117 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0918204 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0918683 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0918851 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0919003 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0919208 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0919295 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\54","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0919497 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0919577 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0919660 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0919736 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0919824 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0919892 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0919968 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0920040 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0920109 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0920196 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0920314 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0920386 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0920458 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0920515 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0920591 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0920656 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0920728 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0920797 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0920858 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0920930 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0921032 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0921108 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0921177 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0921238 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0921314 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0921447 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0921534 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0921618 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0921682 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0921755 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0921823 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0921895 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0921967 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0922028 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0922108 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0922218 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0922294 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0922363 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0922427 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0922507 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0922576 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0922655 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0922728 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0922789 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0922861 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0923062 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0923142 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0923218 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0923283 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0923363 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0923439 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0923518 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0923591 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0923655 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0923743 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0923857 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0923936 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0924009 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0924085 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0924210 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0924294 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0924374 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0924446 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0924510 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0924586 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0924727 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0924811 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\204","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0924913 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0924993 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0925088 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0925160 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0925244 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0925335 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0925826 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0925985 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0926130 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0926335 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0926434 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0926555 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0926635 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0926727 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0926799 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0926879 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0926951 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0927027 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0927148 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0927232 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\204","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0927335 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0927422 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0927513 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0927589 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0927669 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0927757 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0928209 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0928353 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0928498 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0928756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0928851 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\55","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0929064 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0929152 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0929235 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0929304 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0929384 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0929456 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0929562 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0929672 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0929779 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0929862 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0929980 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0930060 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0930132 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0930193 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0930269 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0930334 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0930410 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0930478 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0930539 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0930615 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0930722 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0930801 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0930874 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0930946 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0931022 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0931147 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0931223 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0931296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0931398 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0931482 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0931573 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0931649 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0931721 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0931782 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0931862 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0931984 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0932079 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0932155 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0932215 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0932295 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0932360 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0932443 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0932519 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0932622 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0932698 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0932911 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0932995 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0933082 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0933154 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0933234 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0933303 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0933394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0933470 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0933534 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0933614 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0933728 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0933808 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0933888 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0933960 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0934044 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0934112 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0934192 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0934264 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0934333 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0934416 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0934549 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0934633 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\307","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0934736 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0934823 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0934918 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0934998 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0935081 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0935176 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0935682 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0935834 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0935982 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0936191 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0936305 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0936431 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0936514 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0936598 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0936667 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0936746 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0936822 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0936898 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0937020 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0937104 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\307","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0937199 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0937279 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0937370 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0937442 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0937522 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0937613 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0938107 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0938252 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0938400 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0938624 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0938712 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\45","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0938917 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0939000 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0939088 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0939164 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0939255 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0939324 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0939400 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0939476 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0939536 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0939628 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0939742 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0939818 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0939890 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0939947 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0940023 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0940095 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0940175 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0940247 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0940319 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0940403 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0940506 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0940586 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0940654 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0940722 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0940795 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0940920 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0941000 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0941068 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0941129 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0941205 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0941274 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0941346 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0941426 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0941490 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0941562 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0941673 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0941752 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0941825 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0941886 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0941958 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0942022 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0942098 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0942171 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0942243 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0942342 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0942555 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0942634 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0942710 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0942786 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0942866 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0942938 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0943018 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0943090 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0943155 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0943246 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0943364 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0943452 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0943528 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0943592 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0943672 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0943744 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0943836 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0943915 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0943980 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0944056 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0944189 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0944269 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\308","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0944368 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0944451 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0944539 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0944607 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0944695 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0944797 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0945291 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0945443 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0945592 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0945801 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0945896 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0946017 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0946101 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0946192 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0946264 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0946352 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0946432 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0946515 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0946641 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0946736 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\308","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0946838 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0946930 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0947017 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0947085 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0947165 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0947257 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0947716 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0947861 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0948024 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0948241 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0948328 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\46","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0948526 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0948606 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0948693 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0948815 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0948910 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0948990 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0949074 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0949172 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0949245 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0949321 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0949461 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0949537 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0949613 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0949674 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0949746 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0949815 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0949887 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0949955 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0950016 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0950088 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0950191 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0950263 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0950335 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0950408 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0950476 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0950602 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0950678 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0950761 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0950826 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0950902 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0950966 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0951042 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0951115 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0951183 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0951267 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0951377 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0951453 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0951521 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0951582 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0951654 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0951719 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0951791 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0951864 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0951924 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0951997 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0952202 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0952293 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0952369 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0952434 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0952510 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0952586 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0952677 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0952764 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0952833 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0952909 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0953023 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0953099 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0953175 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0953236 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0953312 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0953384 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0953464 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0953540 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0953608 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0953684 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0953814 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0953920 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\309","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0954030 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0954110 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0954201 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0954277 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0954365 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0954456 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0954958 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0955110 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0955262 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0955478 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0955577 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0955703 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0955798 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0955889 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0955957 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0956045 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0956121 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0956204 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0956322 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0956406 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\309","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0956501 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0956585 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0956672 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0956744 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0956824 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0956911 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0957497 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0957653 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0957801 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0958021 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0958105 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\47","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0958310 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0958394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0958478 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0958554 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0958641 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0958713 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0958797 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0958873 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0958937 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0959021 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0959139 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0959215 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0959283 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0959344 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0959416 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0959481 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0959557 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0959622 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0959683 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0959755 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0959861 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0959941 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0960013 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0960074 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0960142 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0960268 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0960348 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0960420 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0960481 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0960564 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0960637 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0960716 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0960796 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0960861 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0960937 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0961047 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0961123 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0961195 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0961256 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0961332 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0961397 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0961469 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0961537 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0961606 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0961682 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0961895 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0961997 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0962077 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0962146 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0962233 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0962324 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0962408 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0962484 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0962552 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0962628 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0962742 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0962822 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0962906 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0962971 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0963047 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0963142 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0963229 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0963309 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0963381 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0963491 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0963640 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0963742 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\900","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0963849 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0963928 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0964020 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0964096 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0964179 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0964267 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0964765 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0964917 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0965069 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0965282 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0965377 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0965502 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0965582 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0965669 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0965742 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0965825 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0965905 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0965992 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0966110 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0966194 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\900","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0966285 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0966369 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0966456 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0966528 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0966608 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0966696 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0967175 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0967338 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0967482 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0967695 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0967783 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\48","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0967980 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0968060 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0968151 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0968243 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0968326 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0968406 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0968501 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0968585 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0968661 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0968748 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0968862 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0968938 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0969018 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0969079 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0969155 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0969220 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0969296 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0969364 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0969425 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0969497 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0969600 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0969672 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0969744 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0969805 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0969881 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0970033 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0970113 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0970185 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0970288 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0970371 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0970440 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0970516 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0970588 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0970656 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0970748 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0970873 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0970987 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0971059 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0971120 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0971192 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0971265 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0971344 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0971413 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0971485 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0971561 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0971782 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0971873 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0971953 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0972021 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0972105 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0972177 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0972264 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0972337 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0972413 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0972504 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0972622 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0972701 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0972774 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0972838 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0972914 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0972983 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0973078 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0973150 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0973215 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0973294 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0973431 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0973519 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\901","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0973618 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0973701 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0973792 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0973872 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0973960 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0974051 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0974556 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0974708 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0974876 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0975108 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0975199 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0975336 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0975419 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0975511 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0975587 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0975689 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0975765 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0975841 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0975963 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0976046 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\901","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0976142 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0976225 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0976313 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0976396 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0976487 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0976579 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0977050 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0977198 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0977354 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0977571 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0977654 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\49","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0977856 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0977939 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0978019 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0978137 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0978221 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0978293 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0978377 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0978460 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0978529 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0978616 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0978741 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0978837 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0978913 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0978973 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0979049 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0979133 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0979247 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0979315 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0979376 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0979452 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0979555 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0979631 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0979707 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0979764 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0979836 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0979969 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0980057 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0980133 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0980239 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0980323 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0980391 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0980490 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0980562 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0980631 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0980707 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0980817 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0980893 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0980961 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0981022 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0981106 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0981174 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0981250 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0981319 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0981379 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0981467 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0981672 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0981756 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0981874 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0981953 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0982045 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0982121 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0982201 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0982273 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0982337 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0982417 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0982539 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0982619 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0982691 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0982752 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0982828 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0982908 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0982999 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0983079 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0983147 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0983231 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0983368 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0983451 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\902","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0983565 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0983653 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0983744 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0983816 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0983896 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0983979 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0984508 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0984667 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0984820 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0985032 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0985120 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0985241 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0985321 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0985405 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0985477 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0985557 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0985629 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0985717 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0985838 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0985918 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\902","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0986017 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0986101 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0986188 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0986260 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0986340 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0986439 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0986895 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0987039 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0987184 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0987385 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0987477 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\50","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0987678 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0987769 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0987860 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0987940 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0988039 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0988108 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0988187 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0988260 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0988324 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0988400 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0988510 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0988586 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0988655 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0988716 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0988792 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0988856 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0988932 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0988997 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0989065 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0989141 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0989240 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0989316 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0989385 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0989453 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0989537 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0989662 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0989753 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0989826 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0989886 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0989974 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0990039 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0990115 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0990183 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0990248 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0990346 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0990468 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0990544 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0990616 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0990677 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0990749 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0990814 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0990909 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0990981 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0991046 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0991122 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0991335 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0991422 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0991502 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0991582 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0991662 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0991734 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0991814 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0991893 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0991958 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0992046 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0992163 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0992243 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0992319 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0992380 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0992456 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0992524 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0992604 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0992673 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0992737 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0992813 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0992950 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0993030 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\401","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0993133 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0993212 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0993308 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0993376 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0993456 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0993539 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0994022 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0994170 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0994322 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0994535 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0994619 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0994748 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0994836 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0994923 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0994995 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0995079 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0995155 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0995235 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0995372 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0995463 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\401","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0995562 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0995641 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.0995729 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0995869 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0995949 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.0996041 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.0996508 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.0996664 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.0996812 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.0997021 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0997112 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\51","NAME NOT FOUND","Desired Access: Read"
"11:34:37.0997318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0997394 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0997477 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0997546 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0997629 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0997698 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0997781 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0997857 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0997918 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0997994 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0998116 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0998196 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0998264 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0998325 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0998397 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0998473 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0998561 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0998629 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0998701 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0998907 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0999017 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0999093 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.0999169 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0999230 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.0999302 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.0999431 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0999511 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.0999610 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.0999674 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.0999750 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.0999845 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.0999925 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.0999998 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1000058 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1000134 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1000252 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1000332 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1000408 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1000476 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1000549 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1000613 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1000689 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1000762 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1000830 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1000902 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1001107 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1001187 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1001309 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1001393 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1001491 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1001586 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1001674 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1001750 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1001822 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1001902 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1002020 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1002103 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1002176 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1002236 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1002316 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1002385 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1002461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1002533 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1002605 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1002685 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1002822 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1002905 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\311","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1003012 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1003092 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1003183 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1003251 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1003331 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1003422 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1003939 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1004103 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1004266 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1004532 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1004631 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1004757 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1004840 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1004928 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1005000 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1005087 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1005163 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1005239 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1005361 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1005445 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\311","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1005540 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1005619 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1005711 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1005779 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1005870 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1005962 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1006433 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1006585 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1006752 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1006969 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1007052 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\52","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1007254 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1007334 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1007417 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1007486 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1007573 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1007645 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1007763 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1007839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1007908 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1007988 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1008105 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1008185 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1008257 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1008318 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1008390 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1008455 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1008531 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1008596 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1008657 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1008733 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1008850 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1008938 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1009010 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1009071 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1009139 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1009272 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1009352 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1009421 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1009481 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1009569 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1009649 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1009732 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1009805 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1009892 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1009968 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1010082 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1010158 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1010238 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1010302 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1010375 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1010439 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1010515 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1010588 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1010648 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1010721 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1010933 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1011021 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1011105 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1011181 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1011257 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1011329 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1011405 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1011481 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1011545 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1011621 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1011736 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1011819 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1011891 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1011956 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1012032 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1012104 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1012184 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1012256 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1012317 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1012397 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1012541 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1012636 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\310","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1012743 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1012823 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1012914 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1012982 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1013062 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1013157 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1013655 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1013815 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1013963 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1014180 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1014263 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1014385 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1014469 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1014556 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1014624 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1014716 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1014811 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1014887 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1015008 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1015092 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\310","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1015191 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1015271 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1015358 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1015434 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1015518 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1015609 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1016092 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1016240 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1016384 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1016593 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1016681 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\53","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1016890 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1016989 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1017072 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1017141 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1017224 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1017293 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1017373 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1017449 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1017513 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1017593 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1017722 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1017802 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1017871 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1017931 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1018004 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1018076 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1018167 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1018239 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1018304 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1018380 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1018479 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1018581 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1018657 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1018722 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1018790 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1018920 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1019007 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1019106 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1019171 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1019247 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1019334 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1019425 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1019509 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1019604 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1019684 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1019798 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1019874 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1019942 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1020003 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1020075 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1020140 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1020216 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1020284 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1020341 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1020414 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1020623 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1020706 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1020782 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1020854 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1020934 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1021003 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1021083 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1021166 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1021235 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1021314 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1021428 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1021508 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1021580 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1021645 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1021729 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1021801 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1021881 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1021953 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1022018 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1022094 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1022223 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1022322 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1022436 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1022527 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1022622 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1022694 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1022774 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1022861 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1023340 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1023492 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1023645 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1023865 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1023971 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1024101 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1024192 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1024287 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1024355 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1024435 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1024511 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1024587 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1024705 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1024800 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1024895 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1024979 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1025062 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1025138 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1025218 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1025309 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1025769 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1025914 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1026073 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1026283 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1026370 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1026583 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1026666 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1026750 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1026822 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1026910 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1026986 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1027062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1027134 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1027214 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1027290 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1027404 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1027480 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1027548 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1027609 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1027693 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1027761 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1027837 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1027932 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1028004 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1028088 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1028198 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1028282 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1028354 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1028419 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1028491 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1028616 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1028696 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1028765 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1028829 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1028902 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1028966 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1029042 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1029114 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1029175 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1029259 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1029373 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1029449 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1029517 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1029578 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1029654 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1029719 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1029795 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1029863 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1029920 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1030042 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1030262 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1030346 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1030426 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1030490 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1030574 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1030646 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1030726 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1030798 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1030863 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1030943 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1031064 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1031159 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1031243 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1031315 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1031399 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1031486 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1031570 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1031642 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1031718 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1031798 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1031931 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1032015 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1032117 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1032197 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1032285 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1032368 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1032448 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1032532 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1033030 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1033189 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1033334 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1033554 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1033638 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1033763 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1033843 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1033930 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1033995 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1034075 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1034155 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1034235 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1034368 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1034463 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1034561 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1034656 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1034748 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1034824 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1034900 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1034991 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1035439 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1035592 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1035736 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1035945 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1036032 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1036230 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1036321 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1036413 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1036489 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1036576 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1036644 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1036720 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1036793 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1036861 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1036945 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1037059 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1037131 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1037203 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1037264 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1037348 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1037424 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1037511 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1037591 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1037656 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1037735 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1037838 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1037922 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1037994 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1038058 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1038131 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1038252 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1038332 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1038404 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1038492 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1038572 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1038674 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1038765 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1038838 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1038899 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1038975 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1039092 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1039168 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1039237 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1039298 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1039377 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1039442 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1039533 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1039617 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1039682 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1039754 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1039967 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1040050 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1040130 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1040195 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1040275 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1040343 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1040423 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1040499 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1040571 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1040658 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1040780 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1040871 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1040947 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1041008 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1041099 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1041172 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1041255 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1041327 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1041388 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1041464 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1041597 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1041677 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1041787 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1041867 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1041958 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1042038 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1042118 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1042202 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1042700 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1042859 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1043011 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1043220 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1043308 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1043433 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1043513 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1043601 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1043669 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1043753 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1043832 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1043924 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1044045 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1044140 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1044266 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1044349 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1044444 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1044543 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1044627 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1044718 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1045216 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1045368 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1045509 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1045733 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1045820 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1046022 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1046106 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1046193 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1046261 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1046349 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1046417 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1046493 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1046573 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1046638 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1046714 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1046824 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1046900 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1046980 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1047041 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1047117 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1047189 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1047272 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1047349 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1047417 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1047489 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1047592 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1047683 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1047755 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1047816 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1047881 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1048006 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1048082 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1048151 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1048215 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1048287 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1048356 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1048432 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1048504 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1048569 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1048641 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1048751 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1048831 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1048899 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1048960 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1049032 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1049097 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1049184 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1049268 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1049329 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1049424 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1049637 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1049720 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1049796 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1049872 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1049948 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1050017 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1050097 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1050180 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1050245 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1050325 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1050435 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1050522 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1050602 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1050675 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1050758 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1050827 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1050906 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1050979 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1051043 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1051119 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1051252 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1051332 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\700","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1051435 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1051518 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1051610 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1051678 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1051758 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1051841 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1052328 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1052480 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1052628 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1052845 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1052944 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1053065 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1053145 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1053229 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1053297 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1053389 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1053472 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1053560 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1053681 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1053776 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\700","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1053875 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1053985 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1054077 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1054160 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1054251 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1054346 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1054844 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1055023 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1055175 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1055392 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1055521 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\24","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1055726 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1055806 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1055893 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1055970 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1056057 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1056125 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1056205 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1056277 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1056357 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1056433 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1056547 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1056623 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1056692 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1056753 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1056829 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1056901 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1056984 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1057057 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1057125 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1057205 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1057304 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1057384 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1057471 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1057532 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1057596 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1057722 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1057798 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1057866 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1057931 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1058003 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1058072 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1058148 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1058220 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1058281 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1058357 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1058467 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1058550 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1058619 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1058680 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1058752 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1058817 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1058900 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1058980 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1059045 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1059117 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1059318 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1059402 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1059478 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1059543 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1059622 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1059691 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1059774 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1059850 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1059919 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1060003 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1060120 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1060208 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1060284 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1060348 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1060424 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1060493 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1060573 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1060645 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1060710 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1060786 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1060915 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1060998 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\701","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1061097 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1061181 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1061268 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1061341 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1061417 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1061508 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1061979 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1062127 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1062298 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1062534 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1062622 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1062751 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1062831 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1062918 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1062986 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1063066 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1063157 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1063241 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1063367 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1063450 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\701","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1063549 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1063629 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1063724 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1063796 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1063876 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1063963 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1064427 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1064579 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1064727 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1064936 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1065024 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\23","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1065225 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1065309 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1065404 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1065480 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1065594 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1065674 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1065769 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1065845 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1065913 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1065993 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1066111 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1066187 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1066255 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1066316 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1066388 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1066453 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1066529 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1066594 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1066658 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1066734 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1066833 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1066905 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1066985 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1067046 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1067114 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1067240 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1067327 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1067453 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1067517 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1067597 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1067666 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1067742 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1067810 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1067875 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1067962 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1068107 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1068190 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1068259 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1068319 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1068403 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1068479 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1068555 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1068627 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1068692 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1068768 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1068985 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1069076 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1069163 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1069228 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1069308 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1069376 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1069456 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1069532 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1069597 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1069673 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1069787 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1069882 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1069958 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1070022 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1070098 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1070167 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1070250 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1070323 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1070387 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1070463 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1070608 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1070707 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\702","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1070851 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1070946 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1071037 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1071113 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1071193 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1071296 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1071817 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1071972 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1072128 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1072352 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1072444 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1072592 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1072676 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1072759 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1072828 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1072907 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1072987 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1073063 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1073181 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1073265 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\702","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1073360 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1073466 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1073554 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1073630 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1073709 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1073797 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1074268 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1074417 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1074580 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1074789 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1074876 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\22","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1075751 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1075842 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1075933 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1076009 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1076097 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1076165 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1076245 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1076321 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1076386 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1076465 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1076579 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1076659 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1076735 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1076796 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1076872 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1076937 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1077039 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1077115 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1077191 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1077283 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1077397 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1077473 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1077545 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1077606 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1077678 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1077803 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1077891 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1077963 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1078024 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1078100 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1078180 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1078259 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1078335 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1078412 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1078499 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1078609 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1078685 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1078757 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1078818 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1078890 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1078955 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1079031 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1079103 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1079168 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1079248 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1079449 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1079540 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1079616 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1079685 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1079765 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1079837 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1079924 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1080000 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1080073 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1080164 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1080278 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1080358 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1080430 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1080502 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1080586 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1080654 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1080734 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1080814 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1080882 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1080962 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1081103 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1081202 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1081308 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1081407 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1081502 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1081570 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1081650 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1081738 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1082224 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1082372 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1082524 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1082730 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1082817 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1082939 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1083022 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1083110 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1083178 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1083266 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1083342 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1083418 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1083535 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1083650 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\403","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1083752 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1083836 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1083923 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1084007 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1084098 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1084204 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1084676 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1084820 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1084961 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1085178 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1085265 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\75","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1085470 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1085561 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1085645 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1085714 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1085801 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1085873 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1085949 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1086025 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1086086 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1086166 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1086280 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1086356 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1086428 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1086489 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1086569 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1086633 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1086709 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1086774 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1086839 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1086915 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1087017 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1087097 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1087169 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1087230 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1087299 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1087424 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1087515 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1087588 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1087652 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1087728 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1087797 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1087876 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1087949 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1088009 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1088089 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1088203 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1088283 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1088367 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1088428 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1088504 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1088568 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1088644 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1088713 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1088773 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1088849 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1089051 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1089135 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1089211 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1089279 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1089363 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1089435 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1089515 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1089591 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1089663 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1089800 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1089921 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1090001 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1090077 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1090142 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1090218 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1090286 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1090370 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1090450 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1090518 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1090598 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1090735 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1090818 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1090921 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1091012 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1091142 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1091221 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1091309 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1091396 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1091906 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1092073 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1092229 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1092438 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1092525 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1092651 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1092730 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1092818 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1092886 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1092966 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1093046 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1093122 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1093240 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1093323 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\313","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1093430 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1093517 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1093605 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1093677 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1093761 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1093859 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1094335 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1094483 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1094631 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1094840 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1094928 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\73","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1095129 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1095213 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1095296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1095384 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1095471 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1095547 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1095627 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1095707 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1095821 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1095916 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1096037 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1096113 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1096186 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1096247 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1096338 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1096444 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1096558 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1096634 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1096699 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1096775 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1096881 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1096961 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1097033 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1097094 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1097166 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1097307 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1097402 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1097482 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1097547 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1097623 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1097691 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1097767 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1097839 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1097900 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1097984 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1098094 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1098170 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1098246 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1098311 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1098390 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1098459 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1098535 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1098611 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1098675 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1098751 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1098964 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1099048 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1099124 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1099192 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1099272 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1099341 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1099424 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1099508 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1099573 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1099656 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1099770 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1099850 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1099926 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1099991 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1100070 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1100139 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1100223 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1100295 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1100386 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1100473 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1100614 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1100698 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\314","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1100800 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1100888 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1100979 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1101047 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1101139 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1101272 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1101800 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1101952 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1102100 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1102313 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1102404 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1102530 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1102613 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1102701 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1102769 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1102857 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1102933 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1103013 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1103130 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1103218 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\314","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1103317 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1103400 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1103488 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1103560 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1103640 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1103731 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1104214 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1104362 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1104514 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1104723 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1104811 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\72","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1105012 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1105103 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1105187 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1105251 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1105339 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1105415 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1105495 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1105567 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1105628 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1105715 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1105841 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1105924 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1106004 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1106065 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1106137 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1106206 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1106278 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1106346 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1106418 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1106494 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1106593 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1106669 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1106745 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1106802 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1106875 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1106996 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1107080 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1107156 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1107228 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1107308 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1107376 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1107452 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1107525 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1107585 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1107661 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1107772 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1107848 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1107920 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1107981 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1108057 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1108121 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1108209 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1108296 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1108365 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1108441 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1108657 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1108749 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1108828 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1108897 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1108977 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1109049 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1109129 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1109205 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1109273 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1109353 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1109467 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1109558 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1109642 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1109706 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1109786 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1109855 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1109938 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1110018 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1110140 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1110220 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1110360 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1110448 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1110546 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1110630 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1110718 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1110790 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1110866 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1110953 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1111428 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1111573 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1111717 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1111926 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1112014 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1112135 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1112215 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1112299 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1112367 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1112451 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1112527 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1112603 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1112717 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1112804 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\312","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1112903 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1112987 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1113074 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1113146 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1113226 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1113318 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1113789 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1113933 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll","SUCCESS","Filter: dpgcmd.dll, 1: dpgcmd.dll"
"11:34:37.1114078 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center","SUCCESS",""
"11:34:37.1114291 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1114382 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\74","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1114579 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1114663 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1114743 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1114811 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1114895 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1114967 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1115055 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1115131 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1115195 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1115275 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1115389 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1115477 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1115556 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1115617 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1115701 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1115765 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1115841 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1115910 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1115971 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1116047 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1116149 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1116225 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1116298 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1116355 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1116442 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1116598 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1116689 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1116773 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1116841 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1116917 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1116986 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1117062 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1117134 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1117195 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1117271 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1117381 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1117461 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1117533 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1117594 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1117670 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1117746 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1117826 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1117894 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1117955 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1118031 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1118232 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1118320 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1118400 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1118464 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1118548 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1118616 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1118700 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1118776 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1118844 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1118928 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1119053 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1119133 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Read"
"11:34:37.1119205 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1119270 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1119350 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1119422 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1119506 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro","SUCCESS","Desired Access: Query Value"
"11:34:37.1119586 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1119650 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\Model","SUCCESS","Type: REG_DWORD, Length: 4, Data: 1016"
"11:34:37.1119730 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro","SUCCESS",""
"11:34:37.1119855 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1119939 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1120042 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1120122 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1120209 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1120281 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1120357 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1120445 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1121228 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1121384 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:37.1121528 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:37.1121756 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1121843 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1121965 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1122056 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","Desired Access: Read"
"11:34:37.1122148 AM","itype.exe","3980","RegSetInfoKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1122220 AM","itype.exe","3980","RegQueryValue","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016\ApplicationBank","NAME NOT FOUND","Length: 144"
"11:34:37.1122300 AM","itype.exe","3980","RegCloseKey","HKCU\Software\Microsoft\IntelliType Pro\ModelSpecific\1016","SUCCESS",""
"11:34:37.1122379 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1122467 AM","itype.exe","3980","RegOpenKey","HKLM\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1122596 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1122687 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\Components\Commands\407","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1122786 AM","itype.exe","3980","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1122870 AM","itype.exe","3980","RegOpenKey","HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\IType.exe","SUCCESS","Desired Access: Query Value"
"11:34:37.1122957 AM","itype.exe","3980","RegSetInfoKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS","KeySetInformationClass: KeySetHandleTagsInformation, Length: 0"
"11:34:37.1123029 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1123109 AM","itype.exe","3980","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe\Path","SUCCESS","Type: REG_SZ, Length: 108, Data: C:\Program Files\Microsoft Mouse and Keyboard Center\"
"11:34:37.1123201 AM","itype.exe","3980","RegCloseKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\itype.exe","SUCCESS",""
"11:34:37.1123957 AM","itype.exe","3980","CreateFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1124124 AM","itype.exe","3980","QueryDirectory","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs\dpgfvs.dll","SUCCESS","Filter: dpgfvs.dll, 1: DPGFvs.dll"
"11:34:37.1124280 AM","itype.exe","3980","CloseFile","C:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\DPGFvs","SUCCESS",""
"11:34:37.1124485 AM","itype.exe","3980","RegQueryKey","HKCU","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1124577 AM","itype.exe","3980","RegOpenKey","HKCU\SOFTWARE\Microsoft\IntelliType Pro\ModelSpecific\1016\EventMapping\83","NAME NOT FOUND","Desired Access: Read"
"11:34:37.1467357 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1467497 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1467593 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1467722 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1467870 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS","Desired Access: Query Value"
"11:34:37.1468060 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS",""
"11:34:37.1468193 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1468281 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1468368 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1468474 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1468577 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1468699 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1468786 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1468923 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1469029 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1469132 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1469212 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1469333 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1469421 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1469512 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1469759 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1469866 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1470307 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1470398 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1470470 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1470569 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1470668 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1470774 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1470858 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1470972 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1471063 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1471150 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1471242 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1471363 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1471458 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1471553 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1471683 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1471766 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1474150 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1474264 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1474351 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1474469 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1474575 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS","Desired Access: Query Value"
"11:34:37.1474697 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS",""
"11:34:37.1474815 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1474910 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1475069 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1475157 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1475248 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1475351 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1475434 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1475548 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1475640 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1475731 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1475818 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1475928 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1476023 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1476122 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1476259 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1476347 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1476681 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1476769 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1476837 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1476921 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1477012 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1477217 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1477312 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1477422 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1477514 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1477601 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1477681 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1477783 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1477871 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1477958 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1478107 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1478194 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1480429 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1480543 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1480627 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1480729 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1480832 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS","Desired Access: Query Value"
"11:34:37.1480992 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}","SUCCESS",""
"11:34:37.1481106 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1481185 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1481258 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1481341 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1481433 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1481539 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1481626 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1481740 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1481839 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1481957 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1482037 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1482143 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1482231 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1482322 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1482463 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1482546 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1482896 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.1482980 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1483052 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1483135 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1483227 AM","Explorer.EXE","1752","RegOpenKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Desired Access: Query Value"
"11:34:37.1483325 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1483417 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1483527 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1483618 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)","SUCCESS","Type: REG_SZ, Length: 64, Data: C:\Windows\System32\ieframe.dll"
"11:34:37.1483709 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: Name"
"11:34:37.1483793 AM","Explorer.EXE","1752","RegQueryKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1483896 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","NAME NOT FOUND","Desired Access: Maximum Allowed"
"11:34:37.1483975 AM","Explorer.EXE","1752","RegQueryValue","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM","NAME NOT FOUND","Length: 144"
"11:34:37.1484059 AM","Explorer.EXE","1752","RegCloseKey","HKCR\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32","SUCCESS",""
"11:34:37.1484185 AM","Explorer.EXE","1752","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.1484268 AM","Explorer.EXE","1752","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}","NAME NOT FOUND","Desired Access: Query Value"
"11:34:37.1621311 AM","MsMpEng.exe","540","CreateFile","C:\Windows\Temp\ldpEA7.tmp","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Non-Directory File, Open For Backup, Open Reparse Point, Open Requiring Oplock, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1625758 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\33\DC3D227C1BE2AADD.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1626663 AM","MsMpEng.exe","540","CreateFile","C:\Windows\Temp\ldpEA7.tif","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Non-Directory File, Open For Backup, Open Reparse Point, Open Requiring Oplock, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1629237 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\33\DC3D227C1BE2AADD.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1631780 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\33\DC3D227C1BE2AADD.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1632353 AM","MsMpEng.exe","540","CreateFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Non-Directory File, Open For Backup, Open Reparse Point, Open Requiring Oplock, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"11:34:37.1632570 AM","MsMpEng.exe","540","FileSystemControl","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","OPLOCK HANDLE CLOSED","Control: FSCTL_REQUEST_OPLOCK"
"11:34:37.1632696 AM","MsMpEng.exe","540","FileSystemControl","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS","Control: 0x902eb (Device:0x9 Function:186 Method: 3)"
"11:34:37.1632802 AM","MsMpEng.exe","540","CloseFile","C:\lfwdb001\DEFAULT\00\03\3A\00033A69.TXT","SUCCESS",""
"11:34:37.1636090 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\27\3001B300CF9A72C7.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1638755 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\27\3001B300CF9A72C7.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1645513 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\92\FFFC124B7446A768.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1648060 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\92\FFFC124B7446A768.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1650542 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\92\FFFC124B7446A768.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.1653640 AM","MsMpEng.exe","540","CreateFile","C:\ProgramData\Microsoft\Microsoft Antimalware\Scans\MetaStore\1\58\98898C030AEE08D2.dat","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"11:34:37.2247920 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: Name"
"11:34:37.2248110 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2248224 AM","Explorer.EXE","1752","RegQueryKey","HKCU\Software\Classes","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2248391 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\Applications\devenv.exe","NAME NOT FOUND","Desired Access: Read"
"11:34:37.2248566 AM","Explorer.EXE","1752","RegOpenKey","HKCR\Applications\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:37.2248786 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: Name"
"11:34:37.2248908 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2249083 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\Applications\devenv.exe","NAME NOT FOUND","Desired Access: Read"
"11:34:37.2249220 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2249330 AM","Explorer.EXE","1752","RegOpenKey","HKCR\Applications\devenv.exe","SUCCESS","Desired Access: Read"
"11:34:37.2249493 AM","Explorer.EXE","1752","RegCloseKey","HKCR\Applications\devenv.exe","SUCCESS",""
"11:34:37.2249615 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: Name"
"11:34:37.2249714 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2249843 AM","Explorer.EXE","1752","RegOpenKey","HKCU\Software\Classes\Applications\devenv.exe\TaskbarExceptionsIcons","NAME NOT FOUND","Desired Access: Read"
"11:34:37.2249942 AM","Explorer.EXE","1752","RegQueryKey","HKCR\Applications\devenv.exe","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2250037 AM","Explorer.EXE","1752","RegOpenKey","HKCR\Applications\devenv.exe\TaskbarExceptionsIcons","NAME NOT FOUND","Desired Access: Read"
"11:34:37.2250143 AM","Explorer.EXE","1752","RegCloseKey","HKCR\Applications\devenv.exe","SUCCESS",""
"11:34:37.2548332 AM","ApMsgFwd.exe","4344","RegQueryKey","HKLM","SUCCESS","Query: HandleTags, HandleTags: 0x0"
"11:34:37.2548522 AM","ApMsgFwd.exe","4344","RegOpenKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS","Desired Access: Read"
"11:34:37.2548728 AM","ApMsgFwd.exe","4344","RegQueryValue","HKLM\SOFTWARE\Alps\Apoint\OnOffHotkeyInfo","SUCCESS","Type: REG_DWORD, Length: 4, Data: 122910"
"11:34:37.2548884 AM","ApMsgFwd.exe","4344","RegCloseKey","HKLM\SOFTWARE\Alps\Apoint","SUCCESS",""