Hooklog3XmlExample.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "metadata": {},
   "source": [
    "### Hooklog3Xml Example"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 1,
   "metadata": {
    "collapsed": true
   },
   "outputs": [],
   "source": [
    "%run Hooklog3Xml.ipynb"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 2,
   "metadata": {
    "collapsed": true
   },
   "outputs": [],
   "source": [
    "# input \n",
    "in_directory = \"C:/Users/hsiao/Dropbox/notebook/data/morstar/\" # make sure the last character is '/'\n",
    "\n",
    "# output\n",
    "# outfile"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 3,
   "metadata": {},
   "outputs": [],
   "source": [
    "# Example\n",
    "import os\n",
    "\n",
    "hl_list = next(os.walk(in_directory))[2] # get all filenames in the in_directory\n",
    "hl_list = [os.path.join(in_directory, f) for f in hl_list] # filepathname list\n",
    "\n",
    "hl_list = list(filter(lambda f: f.endswith(\".hooklog\"), hl_list)) # in case some non-hooklog file in the folder\n",
    "\n",
    "#for file in hl_list:\n",
    "#    hl3x = Hooklog3Xml(file)\n",
    "hl3x = Hooklog3Xml(hl_list[0])"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 4,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<?xml version=\"1.0\"?>\n",
      "<Profile>\n",
      "<Meta>\n",
      "<Hash>03ae42959b733f11a168e268</Hash>\n",
      "<Process_Id>1264</Process_Id>\n",
      "</Meta>\n",
      "<Execution>\n",
      "<CreateFile hName=\"C:\\WINDOWS\\WindowsShell.Manifest\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"347220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Control Panel\\Desktop\\SmoothScroll\" result=\"FAILURE\" Time=\"347500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\EnableBalloonTips\" result=\"FAILURE\" Time=\"347610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"347990000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"348300000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"348380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\CriticalSectionTimeout\" Return=\"SUCCESS\" Time=\"348570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Ole\\RWLockResourceTimeOut\" result=\"FAILURE\" Time=\"348570000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"349820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableImprovedZoneCheck\" result=\"FAILURE\" Time=\"350030000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_OBJECT_CACHING\\s2901.exe\" result=\"FAILURE\" Time=\"350100000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_OBJECT_CACHING\\*\" result=\"FAILURE\" Time=\"350100000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION\\s2901.exe\" result=\"FAILURE\" Time=\"350110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION\\*\" result=\"FAILURE\" Time=\"350110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\s2901.exe\" result=\"FAILURE\" Time=\"350120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\*\" result=\"FAILURE\" Time=\"350120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING\\s2901.exe\" result=\"FAILURE\" Time=\"350130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING\\*\" result=\"FAILURE\" Time=\"350130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS\\s2901.exe\" result=\"FAILURE\" Time=\"350130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS\\*\" result=\"FAILURE\" Time=\"350140000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WEBOC_POPUPMANAGEMENT\\s2901.exe\" result=\"FAILURE\" Time=\"350140000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WEBOC_POPUPMANAGEMENT\\*\" result=\"FAILURE\" Time=\"350150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_BEHAVIORS\\s2901.exe\" result=\"FAILURE\" Time=\"350150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_BEHAVIORS\\*\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"350150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL\\s2901.exe\" result=\"FAILURE\" Time=\"350160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL\\*\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"350160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN\\s2901.exe\" result=\"FAILURE\" Time=\"350170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN\\*\" result=\"FAILURE\" Time=\"350170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN\\s2901.exe\" result=\"FAILURE\" Time=\"350170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_LOCALMACHINE_LOCKDOWN\\*\" result=\"FAILURE\" Time=\"350170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_PROTOCOL_LOCKDOWN\\s2901.exe\" result=\"FAILURE\" Time=\"350200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_PROTOCOL_LOCKDOWN\\*\" result=\"FAILURE\" Time=\"350210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SAFE_BINDTOOBJECT\\s2901.exe\" result=\"FAILURE\" Time=\"350220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SAFE_BINDTOOBJECT\\*\" result=\"FAILURE\" Time=\"350220000\" />\n",
      "<LoadLibrary lpFileName=\"advapi32.dll\" Return=\"SUCCESS\" Time=\"352510000\" />\n",
      "<LoadLibrary lpFileName=\"kernel32.dll\" Return=\"SUCCESS\" Time=\"353340000\" />\n",
      "<LoadLibrary lpFileName=\"advapi32.dll\" Return=\"SUCCESS\" Time=\"353980000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"356190000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\" Return=\"SUCCESS\" Time=\"356300000\" />\n",
      "<LoadLibrary lpFileName=\"KERNEL32.DLL\" Return=\"SUCCESS\" Time=\"372190000\" />\n",
      "<LoadLibrary lpFileName=\"ADVAPI32.dll\" Return=\"SUCCESS\" Time=\"372680000\" />\n",
      "<LoadLibrary lpFileName=\"COMCTL32.dll\" Return=\"SUCCESS\" Time=\"372730000\" />\n",
      "<LoadLibrary lpFileName=\"COMDLG32.dll\" Return=\"SUCCESS\" Time=\"372760000\" />\n",
      "<LoadLibrary lpFileName=\"GDI32.dll\" Return=\"SUCCESS\" Time=\"372770000\" />\n",
      "<LoadLibrary lpFileName=\"ole32.dll\" Return=\"SUCCESS\" Time=\"372850000\" />\n",
      "<LoadLibrary lpFileName=\"OLEAUT32.dll\" Return=\"SUCCESS\" Time=\"372910000\" />\n",
      "<LoadLibrary lpFileName=\"oledlg.dll\" Return=\"SUCCESS\" Time=\"372940000\" />\n",
      "<LoadLibrary lpFileName=\"SHELL32.dll\" Return=\"SUCCESS\" Time=\"372960000\" />\n",
      "<LoadLibrary lpFileName=\"SHLWAPI.dll\" Return=\"SUCCESS\" Time=\"372980000\" />\n",
      "<LoadLibrary lpFileName=\"urlmon.dll\" Return=\"SUCCESS\" Time=\"373020000\" />\n",
      "<LoadLibrary lpFileName=\"USER32.dll\" Return=\"SUCCESS\" Time=\"373040000\" />\n",
      "<LoadLibrary lpFileName=\"VERSION.dll\" Return=\"SUCCESS\" Time=\"373460000\" />\n",
      "<LoadLibrary lpFileName=\"WINHTTP.dll\" Return=\"SUCCESS\" Time=\"373480000\" />\n",
      "<LoadLibrary lpFileName=\"WININET.dll\" Return=\"SUCCESS\" Time=\"373540000\" />\n",
      "<LoadLibrary lpFileName=\"WINSPOOL.DRV\" Return=\"SUCCESS\" Time=\"373590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\ThemeManager\\Compositing\" result=\"FAILURE\" Time=\"374550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Control Panel\\Desktop\\LameButtonText\" result=\"FAILURE\" Time=\"374580000\" />\n",
      "<LoadLibrary lpFileName=\"uxtheme.dll\" Return=\"SUCCESS\" Time=\"374590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Mozilla/4.0 (compatible; MSIE 6.0; Win32)\" Time=\"376310000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\\" Return=\"SUCCESS\" Time=\"376350000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\MSN 2.0\" Return=\"SUCCESS\" Time=\"376370000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\MSN 2.5\" Return=\"SUCCESS\" Time=\"376380000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\Post Platform\\SV1\" Return=\"SUCCESS\" Time=\"376440000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRun\" result=\"FAILURE\" Time=\"376910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoDrives\" result=\"FAILURE\" Time=\"376910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\RestrictRun\" result=\"FAILURE\" Time=\"376910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetConnectDisconnect\" result=\"FAILURE\" Time=\"376910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoRecentDocsHistory\" result=\"FAILURE\" Time=\"376910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoClose\" result=\"FAILURE\" Time=\"376920000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\Version\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6.0.2900.5512\" Time=\"377270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc\\MaxRpcSize\" result=\"FAILURE\" Time=\"377800000\" />\n",
      "<LoadLibrary lpFileName=\"rpcrt4.dll\" Return=\"SUCCESS\" Time=\"377850000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Ole\\MaximumAllowedAllocationSize\" result=\"FAILURE\" Time=\"378060000\" />\n",
      "<CreateFile hName=\"\\\\.\\PIPE\\lsarpc\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"378260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\Com+Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"378460000\" />\n",
      "<LoadLibrary lpFileName=\"CLBCATQ.DLL\" Return=\"SUCCESS\" Time=\"378460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\MinimumFreeMemPercentageToCreateProcess\" result=\"FAILURE\" Time=\"379090000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\MinimumFreeMemPercentageToCreateObject\" result=\"FAILURE\" Time=\"379090000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\Com+Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"379130000\" />\n",
      "<LoadLibrary lpFileName=\"CLBCATQ.DLL\" Return=\"SUCCESS\" Time=\"379130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"379660000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\Registration\\R000000000007.clb\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"379690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"379910000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{4590F811-1D3A-11D0-891F-00AA004B2E24}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"380020000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{4590F811-1D3A-11D0-891F-00AA004B2E24}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\wbem\\wbemprox.dll\" Time=\"380080000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{4590F811-1D3A-11D0-891F-00AA004B2E24}\\AppID\" result=\"FAILURE\" Time=\"380160000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{4590F811-1D3A-11D0-891F-00AA004B2E24}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"380230000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\" Return=\"SUCCESS\" Time=\"381390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Logging Directory\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"381390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Logging Directory\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\WBEM\\Logs\\\" Time=\"381400000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\" Return=\"SUCCESS\" Time=\"381410000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Logging\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"381410000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Log File Max Size\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"65536\" Time=\"381420000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\" Return=\"SUCCESS\" Time=\"381420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Repository Directory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"\" Time=\"381420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\Repository Directory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"381420000\" />\n",
      "<LoadLibrary lpFileName=\"oleaut32.dll\" Return=\"SUCCESS\" Time=\"381540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"381780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"381830000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\\AppID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{8BC3F05E-D86B-11D0-A075-00C04FB68820}\" Time=\"382060000\" />\n",
      "<RegQueryValue hKey=\"ae\\AppID\\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\\DllSurrogate\" result=\"FAILURE\" Time=\"382100000\" />\n",
      "<RegQueryValue hKey=\"ae\\AppID\\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\\LocalService\" Return=\"SUCCESS\" Time=\"382110000\" />\n",
      "<LoadLibrary lpFileName=\"OLE32\" Return=\"SUCCESS\" Time=\"382510000\" />\n",
      "<LoadLibrary lpFileName=\"OLE32.DLL\" Return=\"SUCCESS\" Time=\"382660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{F309AD18-D86A-11D0-A075-00C04FB68820}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{7C857801-7381-11CF-884D-00AA004B2E24}\" Time=\"383600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"383630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"383660000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{7C857801-7381-11CF-884D-00AA004B2E24}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"383740000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{7C857801-7381-11CF-884D-00AA004B2E24}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\wbem\\wbemsvc.dll\" Time=\"383800000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{7C857801-7381-11CF-884D-00AA004B2E24}\\AppID\" result=\"FAILURE\" Time=\"383880000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{7C857801-7381-11CF-884D-00AA004B2E24}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"383980000\" />\n",
      "<CreateFile hName=\"\\\\.\\PIPE\\lsarpc\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"384810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{7C857801-7381-11CF-884D-00AA004B2E24}\" Time=\"384970000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{9556DC99-828C-11CF-A37E-00AA003240C7}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\" Time=\"385540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"385570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"385600000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"385690000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\wbem\\fastprox.dll\" Time=\"385740000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\\AppID\" result=\"FAILURE\" Time=\"385820000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"385930000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\" Return=\"SUCCESS\" Time=\"387530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\QueryAdapterName\" result=\"FAILURE\" Time=\"387540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableAdapterDomainName\" result=\"FAILURE\" Time=\"387540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseDomainNameDevolution\" result=\"FAILURE\" Time=\"387540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\UseDomainNameDevolution\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"387540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\PrioritizeRecordData\" result=\"FAILURE\" Time=\"387540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\PrioritizeRecordData\" result=\"FAILURE\" Time=\"387550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AllowUnqualifiedQuery\" result=\"FAILURE\" Time=\"387550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\AllowUnqualifiedQuery\" result=\"FAILURE\" Time=\"387550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AppendToMultiLabelName\" result=\"FAILURE\" Time=\"387550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ScreenBadTlds\" result=\"FAILURE\" Time=\"387560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ScreenUnreachableServers\" result=\"FAILURE\" Time=\"387560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\FilterClusterIp\" result=\"FAILURE\" Time=\"387560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\WaitForNameErrorOnAll\" result=\"FAILURE\" Time=\"387560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseEdns\" result=\"FAILURE\" Time=\"387560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\QueryIpMatching\" result=\"FAILURE\" Time=\"387570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseHostsFile\" result=\"FAILURE\" Time=\"387570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationEnabled\" result=\"FAILURE\" Time=\"387570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableDynamicUpdate\" result=\"FAILURE\" Time=\"387570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterPrimaryName\" result=\"FAILURE\" Time=\"387580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterAdapterName\" result=\"FAILURE\" Time=\"387580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\EnableAdapterDomainNameRegistration\" result=\"FAILURE\" Time=\"387580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterReverseLookup\" result=\"FAILURE\" Time=\"387580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableReverseAddressRegistrations\" result=\"FAILURE\" Time=\"387580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterWanAdapters\" result=\"FAILURE\" Time=\"387590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableWanDynamicUpdate\" result=\"FAILURE\" Time=\"387590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationTtl\" result=\"FAILURE\" Time=\"387590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DefaultRegistrationTTL\" result=\"FAILURE\" Time=\"387590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationRefreshInterval\" result=\"FAILURE\" Time=\"387600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DefaultRegistrationRefreshInterval\" result=\"FAILURE\" Time=\"387600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationMaxAddressCount\" result=\"FAILURE\" Time=\"387610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\MaxNumberOfAddressesToRegister\" result=\"FAILURE\" Time=\"387610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateSecurityLevel\" result=\"FAILURE\" Time=\"387610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\UpdateSecurityLevel\" result=\"FAILURE\" Time=\"387610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateZoneExcludeFile\" result=\"FAILURE\" Time=\"387620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateTopLevelDomainZones\" result=\"FAILURE\" Time=\"387620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\DnsTest\" result=\"FAILURE\" Time=\"387620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCacheSize\" result=\"FAILURE\" Time=\"387620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCacheTtl\" result=\"FAILURE\" Time=\"387630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxNegativeCacheTtl\" result=\"FAILURE\" Time=\"387630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AdapterTimeoutLimit\" result=\"FAILURE\" Time=\"387630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ServerPriorityTimeLimit\" result=\"FAILURE\" Time=\"387630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCachedSockets\" result=\"FAILURE\" Time=\"387630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MulticastListenLevel\" result=\"FAILURE\" Time=\"387640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MulticastSendLevel\" result=\"FAILURE\" Time=\"387640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"387640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsQueryTimeouts\" result=\"FAILURE\" Time=\"387650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsQuickQueryTimeouts\" result=\"FAILURE\" Time=\"387650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsMulticastQueryTimeouts\" result=\"FAILURE\" Time=\"387650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP\\LdapClientIntegrity\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"387710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\ProcessID\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"836\" Time=\"387730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\EnablePrivateObjectHeap\" result=\"FAILURE\" Time=\"387740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\ContextLimit\" result=\"FAILURE\" Time=\"387740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\ObjectLimit\" result=\"FAILURE\" Time=\"387740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\WBEM\\CIMOM\\IdentifierLimit\" result=\"FAILURE\" Time=\"387740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{027947E1-D731-11CE-A357-000000000001}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\" Time=\"388130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"388290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"388350000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"388530000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\wbem\\fastprox.dll\" Time=\"388590000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\\AppID\" result=\"FAILURE\" Time=\"388690000\" />\n",
      "<RegQueryValue hKey=\"ae\\CLSID\\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"388790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{7C857801-7381-11CF-884D-00AA004B2E24}\" Time=\"388920000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{423EC01E-2E35-11D2-B604-00104B703EFD}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{7C857801-7381-11CF-884D-00AA004B2E24}\" Time=\"389050000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\FromCacheTimeout\" result=\"FAILURE\" Time=\"391940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SecureProtocols\" result=\"FAILURE\" Time=\"391940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CertificateRevocation\" result=\"FAILURE\" Time=\"391940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableKeepAlive\" result=\"FAILURE\" Time=\"391940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisablePassport\" result=\"FAILURE\" Time=\"391950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CacheMode\" result=\"FAILURE\" Time=\"391950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableHttp1_1\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"391970000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyHttp1.1\" result=\"FAILURE\" Time=\"392000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyHttp1.1\" result=\"FAILURE\" Time=\"392000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableNegotiate\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"392000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableBasicOverClearChannel\" result=\"FAILURE\" Time=\"392000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\Feature_ClientAuthCertFilter\" result=\"FAILURE\" Time=\"392010000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\Feature_ClientAuthCertFilter\" result=\"FAILURE\" Time=\"392020000\" />\n",
      "<LoadLibrary lpFileName=\"Secur32.dll\" Return=\"SUCCESS\" Time=\"392020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SyncMode5\" result=\"FAILURE\" Time=\"392050000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\FixupKey\" result=\"FAILURE\" Time=\"392160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\SessionStartTimeDefaultDeltaSecs\" result=\"FAILURE\" Time=\"392160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" Time=\"392220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Signature\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Client UrlCache MMF Ver 5.2\" Time=\"392240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Cache\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"\" Time=\"392280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Cookies\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"\" Time=\"392280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\History\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"\" Time=\"392290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem\" result=\"FAILURE\" Time=\"392290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\PerUserItem\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"392300000\" />\n",
      "<LoadLibrary lpFileName=\"shell32.dll\" Return=\"SUCCESS\" Time=\"392300000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\" Return=\"SUCCESS\" Time=\"392410000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Cache\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"392410000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\" Return=\"SUCCESS\" Time=\"392460000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cache\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\" Return=\"SUCCESS\" Time=\"392470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"392530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Content\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"327323\" Time=\"392530000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Directory\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\" Return=\"SUCCESS\" Time=\"392560000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Paths\" type=\"REG_DWORD\" data=\"4\" Return=\"SUCCESS\" Time=\"392570000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path1\\CachePath\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\Cache1\" Return=\"SUCCESS\" Time=\"392570000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path2\\CachePath\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\Cache2\" Return=\"SUCCESS\" Time=\"392580000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path3\\CachePath\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\Cache3\" Return=\"SUCCESS\" Time=\"392580000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path4\\CachePath\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\Cache4\" Return=\"SUCCESS\" Time=\"392590000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path1\\CacheLimit\" type=\"REG_DWORD\" data=\"81830\" Return=\"SUCCESS\" Time=\"392590000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path2\\CacheLimit\" type=\"REG_DWORD\" data=\"81830\" Return=\"SUCCESS\" Time=\"392590000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path3\\CacheLimit\" type=\"REG_DWORD\" data=\"81830\" Return=\"SUCCESS\" Time=\"392590000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Cache\\Paths\\Path4\\CacheLimit\" type=\"REG_DWORD\" data=\"81830\" Return=\"SUCCESS\" Time=\"392600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem\" result=\"FAILURE\" Time=\"392600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\PerUserItem\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"392610000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\" Return=\"SUCCESS\" Time=\"392620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Cookies\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"392620000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\" Return=\"SUCCESS\" Time=\"392640000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Cookies\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Cookies\" Return=\"SUCCESS\" Time=\"392640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Cookie:\" Time=\"392660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Cookies\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"392660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem\" result=\"FAILURE\" Time=\"392680000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\PerUserItem\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"392680000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\" Return=\"SUCCESS\" Time=\"392690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\History\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"392690000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\" Return=\"SUCCESS\" Time=\"392720000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\History\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Local Settings\\History\" Return=\"SUCCESS\" Time=\"392720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Visited:\" Time=\"392770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\History\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"392770000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"392900000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"392900000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"392910000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"392910000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"397390000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"397390000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"397430000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"397430000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"402640000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"402640000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"402670000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"402670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheRepair\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"407600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082820140829\\\" Time=\"407630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014082820140829:\" Time=\"407650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"407650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"407650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheRepair\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"407700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\\" Time=\"407700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014082920140830:\" Time=\"407710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"407720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"407720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableWorkerThreadHibernation\" result=\"FAILURE\" Time=\"408200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableWorkerThreadHibernation\" result=\"FAILURE\" Time=\"408200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableReadRange\" result=\"FAILURE\" Time=\"408220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SocketSendBufferLength\" result=\"FAILURE\" Time=\"408220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SocketReceiveBufferLength\" result=\"FAILURE\" Time=\"408220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\KeepAliveTimeout\" result=\"FAILURE\" Time=\"408220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\MaxHttpRedirects\" result=\"FAILURE\" Time=\"408230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\MaxConnectionsPerServer\" result=\"FAILURE\" Time=\"408230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\MaxConnectionsPer1_0Server\" result=\"FAILURE\" Time=\"408230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ServerInfoTimeout\" result=\"FAILURE\" Time=\"408230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ReceiveTimeOut\" result=\"FAILURE\" Time=\"408240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableNTLMPreAuth\" result=\"FAILURE\" Time=\"408240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ScavengeCacheLowerBound\" result=\"FAILURE\" Time=\"408240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CertCacheNoValidate\" result=\"FAILURE\" Time=\"408240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\ScavengeCacheFileLifeTime\" result=\"FAILURE\" Time=\"408250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\ScavengeCacheFileLimit\" result=\"FAILURE\" Time=\"408280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\ScavengeCacheFileLimit\" result=\"FAILURE\" Time=\"408280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\HttpDefaultExpiryTimeSecs\" result=\"FAILURE\" Time=\"408580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\FtpDefaultExpiryTimeSecs\" result=\"FAILURE\" Time=\"408580000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\GopherDefaultExpiryTimeSecs\" result=\"FAILURE\" Time=\"408590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableCachingOfSSLPages\" result=\"FAILURE\" Time=\"408590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\PerUserCookies\" result=\"FAILURE\" Time=\"408600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\LeashLegacyCookies\" result=\"FAILURE\" Time=\"408600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableNT4RasCheck\" result=\"FAILURE\" Time=\"408600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DialupUseLanSettings\" result=\"FAILURE\" Time=\"408610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DialupUseLanSettings\" result=\"FAILURE\" Time=\"408620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SendExtraCRLF\" result=\"FAILURE\" Time=\"408620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BypassFtpTimeCheck\" result=\"FAILURE\" Time=\"408620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableGopher\" result=\"FAILURE\" Time=\"408630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ReleaseSocketDuringAuth\" result=\"FAILURE\" Time=\"408630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ReleaseSocketDuring401Auth\" result=\"FAILURE\" Time=\"408640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ReleaseSocketDuring401Auth\" result=\"FAILURE\" Time=\"408640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WpadSearchAllDomains\" result=\"FAILURE\" Time=\"408650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableLegacyPreAuthAsServer\" result=\"FAILURE\" Time=\"408660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableLegacyPreAuthAsServer\" result=\"FAILURE\" Time=\"408660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BypassHTTPNoCacheCheck\" result=\"FAILURE\" Time=\"408670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BypassHTTPNoCacheCheck\" result=\"FAILURE\" Time=\"408680000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BypassSSLNoCacheCheck\" result=\"FAILURE\" Time=\"408700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BypassSSLNoCacheCheck\" result=\"FAILURE\" Time=\"408700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableHttpTrace\" result=\"FAILURE\" Time=\"408710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableHttpTrace\" result=\"FAILURE\" Time=\"408720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\NoCheckAutodialOverRide\" result=\"FAILURE\" Time=\"408730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\NoCheckAutodialOverRide\" result=\"FAILURE\" Time=\"408740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DontUseDNSLoadBalancing\" result=\"FAILURE\" Time=\"408750000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DontUseDNSLoadBalancing\" result=\"FAILURE\" Time=\"408760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\NonBlockingClient32\" result=\"FAILURE\" Time=\"408760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ShareCredsWithWinHttp\" result=\"FAILURE\" Time=\"408760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\MimeExclusionListForCache\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"408770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\MimeExclusionListForCache\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"multipart/mixed multipart/x-mixed-replace multipart/x-byteranges\" Time=\"408770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\HeaderExclusionListForCache\" result=\"FAILURE\" Time=\"408790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DnsCacheEnabled\" result=\"FAILURE\" Time=\"408790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DnsCacheEntries\" result=\"FAILURE\" Time=\"408790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DnsCacheTimeout\" result=\"FAILURE\" Time=\"408790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnPost\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"01000000\" Time=\"408800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnAlwaysOnPost\" result=\"FAILURE\" Time=\"408800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnZoneCrossing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"408800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnBadCertSending\" result=\"FAILURE\" Time=\"408800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnBadCertRecving\" result=\"FAILURE\" Time=\"408800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnPostRedirect\" result=\"FAILURE\" Time=\"408810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\AlwaysDrainOnRedirect\" result=\"FAILURE\" Time=\"408810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnHTTPSToHTTPRedirect\" result=\"FAILURE\" Time=\"408820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\GlobalUserOffline\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"408820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"408850000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\UrlEncoding\" result=\"FAILURE\" Time=\"408900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\TruncateFileName\" result=\"FAILURE\" Time=\"408910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\BadProxyExpiresTime\" result=\"FAILURE\" Time=\"408920000\" />\n",
      "<LoadLibrary lpFileName=\"UxTheme.dll\" Return=\"SUCCESS\" Time=\"409470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\Com+Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"409920000\" />\n",
      "<LoadLibrary lpFileName=\"CLBCATQ.DLL\" Return=\"SUCCESS\" Time=\"409920000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\Com+Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"410410000\" />\n",
      "<LoadLibrary lpFileName=\"CLBCATQ.DLL\" Return=\"SUCCESS\" Time=\"410420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"410890000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"410920000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{8856F961-340A-11D0-A96B-00C04FD705A2}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"411020000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{8856F961-340A-11D0-A96B-00C04FD705A2}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\shdocvw.dll\" Time=\"411180000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{8856F961-340A-11D0-A96B-00C04FD705A2}\\AppID\" result=\"FAILURE\" Time=\"411270000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{8856F961-340A-11D0-A96B-00C04FD705A2}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"411350000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LDAP\\LdapClientIntegrity\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"413840000\" />\n",
      "<LoadLibrary lpFileName=\"Comctl32.dll\" Return=\"SUCCESS\" Time=\"413880000\" />\n",
      "<LoadLibrary lpFileName=\"RichEd20.dll\" Return=\"SUCCESS\" Time=\"413940000\" />\n",
      "<LoadLibrary lpFileName=\"Comctl32.dll\" Return=\"SUCCESS\" Time=\"414980000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"415460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{EAB22AC1-30C1-11CF-A7EB-0000C05BAE0B}\\Typelib\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\" Time=\"415640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{b722bccb-4e68-101b-a2bc-00aa00404770}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}\" Time=\"415690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{79eac9c4-baf9-11ce-8c82-00aa004ba90b}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{B8DA6310-E19B-11D0-933C-00A0C90DCAA9}\" Time=\"415730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{000214E6-0000-0000-C000-000000000046}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{bf50b68e-29b8-4386-ae9c-9734d5117cd5}\" Time=\"415770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Interface\\{93F2F68C-1D1B-11D3-A30E-00C04F79ABD1}\\ProxyStubClsid32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{bf50b68e-29b8-4386-ae9c-9734d5117cd5}\" Time=\"415810000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\\P3Global\" Return=\"SUCCESS\" Time=\"415880000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\\P3Sites\" Return=\"SUCCESS\" Time=\"415880000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Internet Explorer\\Security\\P3Global\\Enabled\" Return=\"SUCCESS\" Time=\"415890000\" />\n",
      "<LoadLibrary lpFileName=\"SHELL32.dll\" Return=\"SUCCESS\" Time=\"415980000\" />\n",
      "<LoadLibrary lpFileName=\"ole32.dll\" Return=\"SUCCESS\" Time=\"416170000\" />\n",
      "<LoadLibrary lpFileName=\"ole32.dll\" Return=\"SUCCESS\" Time=\"416200000\" />\n",
      "<LoadLibrary lpFileName=\"SHELL32.DLL\" Return=\"SUCCESS\" Time=\"416310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\IntegratedBrowser\" Return=\"SUCCESS\" Time=\"416330000\" />\n",
      "<LoadLibrary lpFileName=\"WININET.dll\" Return=\"SUCCESS\" Time=\"416330000\" />\n",
      "<LoadLibrary lpFileName=\"appHelp.dll\" Return=\"SUCCESS\" Time=\"416370000\" />\n",
      "<LoadLibrary lpFileName=\"ole32.dll\" Return=\"SUCCESS\" Time=\"416540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"416590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"416620000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{00021401-0000-0000-C000-000000000046}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"416710000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{00021401-0000-0000-C000-000000000046}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"shell32.dll\" Time=\"416770000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{00021401-0000-0000-C000-000000000046}\\AppID\" result=\"FAILURE\" Time=\"416870000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{00021401-0000-0000-C000-000000000046}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"416950000\" />\n",
      "<LoadLibrary lpFileName=\"OLEAUT32.dll\" Return=\"SUCCESS\" Time=\"417200000\" />\n",
      "<LoadLibrary lpFileName=\"oleaut32.dll\" Return=\"SUCCESS\" Time=\"417220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ShareCredsWithWinHttp\" result=\"FAILURE\" Time=\"417570000\" />\n",
      "<LoadLibrary lpFileName=\"ADVAPI32.DLL\" Return=\"SUCCESS\" Time=\"417770000\" />\n",
      "<LoadLibrary lpFileName=\"ws2_32\" Return=\"SUCCESS\" Time=\"417820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\WinSock_Registry_Version\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"2.0\" Time=\"418650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Serial_Access_Num\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"6\" Time=\"418660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Serial_Access_Num\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"6\" Time=\"418670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Next_Catalog_Entry_ID\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1020\" Time=\"418680000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Num_Catalog_Entries\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"13\" Time=\"418680000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000001\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000001\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006600020000000000000000000000000008000000A01A0FE78BABCF118CA300805F48A192E9030000010000000000000000000000000000000000000000000000000000000000000002000000020000001000000010000000010000000600000000000000000000000000000000000000000000004D00530041004600440020005400630070006900700020005B005400430050002F00490050005D0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000002\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000002\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000906020000000000000000000000000008000000A01A0FE78BABCF118CA300805F48A192EA0300000100000000000000000000000000000000000000000000000000000000000000020000000200000010000000100000000200000011000000000000000000000000000000BBFF0000000000004D00530041004600440020005400630070006900700020005B005500440050002F00490050005D0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000003\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000003\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090602000000000000000000000000000C000000A01A0FE78BABCF118CA300805F48A192EB0300000100000000000000000000000000000000000000000000000000000000000000020000000200000010000000100000000300000000000000FF0000000000000000000000BBFF0000000000004D00530041004600440020005400630070006900700020005B005200410057002F00490050005D0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000004\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000004\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data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ime=\"418730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000005\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000005\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C7273767073702E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006620020000000000000000000000000008000000E0A9609D7A33D011BD880000C082E69AED0300000100000088011C0000001C0008000000000000008CFBAF022C08917C00001C00060000000200000010000000100000000100000006000000000000000000000000000000000000000000000052005300560050002000540043005000200053006500720076006900630065002000500072006F0076006900640065007200000088011C00000000001000000050FBAF02FF5A647500000000B0BB17037CFBAF02F4FBAF0200001C00080000000000000028FCAF022C08917C00001C000000B50000000000B85708022C08917C00001C006109917C08061C003D00917C88EFFC0100000000080000000000B5000100000000021C0003000000C0570802030000000200000088EFFC0100021C00480FFB01281E2B0288021C0000A3FD01D8011C00000000001000000000A3FD010E00000004000000C001917C30021C0018000000500FFB0100001C000200000000001C0030021C00400000002031EE0068051C0000001C009A6D0101A4EFFC016000000088021C0000000000480FFB013CFCAF02160A917C17000000480FFB0100001C00100CFB010000000010FDAF022C08917C00001C006109917C08061C003D00917CD846EF0000000000846BF8010000B5000F000000100CFB010000000000000000C408000000000000180CFB01000000000000000000000000C4080000DCFCAF0268051C00C40800004000000003000000180CFB0168051C00D846EF0038030000846BF8010C000E006C565F7500000000ACFCAF02846BF80100000000D846EF0004FDAF023CF6907C41F6907CD846EF0000000000846BF801E0FCAF02\" Time=\"418740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000006\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000006\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E0002000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192F403000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000005000000FDFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00320039003900370045003700380042002D0035004600420043002D0034003400390043002D0041003300330043002D003500450030003400430037004200310033004500410034007D005D0020005300450051005000410043004B00450054002000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000007\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000007\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090202000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192F503000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000002000000FDFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00320039003900370045003700380042002D0035004600420043002D0034003400390043002D0041003300330043002D003500450030003400430037004200310033004500410034007D005D00200044004100540041004700520041004D0020003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000008\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000008\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E0002000000000000000000000000000800000030185F8D73C2CF1195C800805F48A192F6030000010000000000000000000000000000000000000000000000000000000000000002000000110000001400000014000000050000000000008000000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00360044004200450035003700320045002D0044004400440034002D0034003500300039002D0042003400380038002D003600300045003800330030004200380044004200330036007D005D0020005300450051005000410043004B00450054002000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000009\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000009\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090202000000000000000000000000000800000030185F8D73C2CF1195C800805F48A192F7030000010000000000000000000000000000000000000000000000000000000000000002000000110000001400000014000000020000000000008000000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00360044004200450035003700320045002D0044004400440034002D0034003500300039002D0042003400380038002D003600300045003800330030004200380044004200330036007D005D00200044004100540041004700520041004D0020003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000010\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000010\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E0002000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192F803000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000005000000FFFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00420031004200370037003900300042002D0037003300380033002D0034004300310043002D0039003600300036002D003800370043003600330030004300440032004600350031007D005D0020005300450051005000410043004B00450054002000310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000011\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000011\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090202000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192F903000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000002000000FFFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00420031004200370037003900300042002D0037003300380033002D0034004300310043002D0039003600300036002D003800370043003600330030004300440032004600350031007D005D00200044004100540041004700520041004D0020003100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000012\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418840000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000012\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000E0002000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192FA03000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000005000000FEFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00390032003400320041003800300036002D0042003900320043002D0034003100320038002D0041003900440037002D003300300034003200450041003700410043003800320036007D005D0020005300450051005000410043004B00450054002000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418850000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000013\\PackedCatalogItem\" Return=\"SUCCESS\" Time=\"418860000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\Protocol_Catalog9\\Catalog_Entries\\000000000013\\PackedCatalogItem\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2553797374656D526F6F74255C73797374656D33325C6D7377736F636B2E646C6C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090202000000000000000000000000000000000030185F8D73C2CF1195C800805F48A192FB03000001000000000000000000000000000000000000000000000000000000000000000200000011000000140000001400000002000000FEFFFFFF00000000000000000000000000FA0000000000004D00530041004600440020004E0065007400420049004F00530020005B005C004400650076006900630065005C004E0065007400420054005F00540063007000690070005F007B00390032003400320041003800300036002D0042003900320043002D0034003100320038002D0041003900440037002D003300300034003200450041003700410043003800320036007D005D00200044004100540041004700520041004D0020003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"418860000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Serial_Access_Num\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"4\" Time=\"418870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Serial_Access_Num\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"4\" Time=\"418870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Num_Catalog_Entries\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"418880000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\LibraryPath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"%SystemRoot%\\System32\\mswsock.dll\" Time=\"418890000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\DisplayString\" Return=\"SUCCESS\" Time=\"418940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\DisplayString\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Tcpip\" Time=\"418940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\ProviderId\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"409D05229E7ECF11AE5A00AA00A7112B\" Time=\"418980000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\AddressFamily\" result=\"FAILURE\" Time=\"418980000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\SupportedNameSpace\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"12\" Time=\"418990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"418990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\Version\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"418990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000001\\StoresServiceClassInfo\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"418990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\LibraryPath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"%SystemRoot%\\System32\\winrnr.dll\" Time=\"419000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\DisplayString\" Return=\"SUCCESS\" Time=\"419010000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\DisplayString\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"NTDS\" Time=\"419010000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\ProviderId\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"EE37263B80E5CF11A55500C04FD8D4AC\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\AddressFamily\" result=\"FAILURE\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\SupportedNameSpace\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"32\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\Version\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000002\\StoresServiceClassInfo\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"419020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\LibraryPath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"%SystemRoot%\\System32\\mswsock.dll\" Time=\"419030000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\DisplayString\" Return=\"SUCCESS\" Time=\"419060000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\DisplayString\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Network Location Awareness (NLA) Namespace\" Time=\"419070000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\ProviderId\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"3A244266A83BA64ABAA52E0BD71FDD83\" Time=\"419070000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\AddressFamily\" result=\"FAILURE\" Time=\"419070000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\SupportedNameSpace\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"15\" Time=\"419080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"419080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\Version\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"419080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\NameSpace_Catalog5\\Catalog_Entries\\000000000003\\StoresServiceClassInfo\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"419080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Winsock2\\Parameters\\Ws2_32NumHandleBuckets\" result=\"FAILURE\" Time=\"419090000\" />\n",
      "<LoadLibrary lpFileName=\"ws2_32\" Return=\"SUCCESS\" Time=\"419160000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\mswsock.dll\" Return=\"SUCCESS\" Time=\"419710000\" />\n",
      "<LoadLibrary lpFileName=\"hnetcfg.dll\" Return=\"SUCCESS\" Time=\"420630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc\\SecurityService\\DefaultAuthLevel\" result=\"FAILURE\" Time=\"421220000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\mswsock.dll\" Return=\"SUCCESS\" Time=\"421250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Winsock\\Parameters\\Transports\" Return=\"SUCCESS\" type=\"REG_MULTI_SZ\" data=\"\" Time=\"421530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\Winsock\\Parameters\\Transports\" Return=\"SUCCESS\" type=\"REG_MULTI_SZ\" data=\"T c p i p   N e t B I O S\" Time=\"421530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\Mapping\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"421540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\Mapping\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"0B00000003000000020000000100000006000000020000000100000000000000020000000000000006000000000000000000000006000000000000000100000006000000020000000200000011000000020000000200000000000000020000000000000011000000000000000000000011000000000000000200000011000000020000000300000000000000\" Time=\"421540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\MinSockaddrLength\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"16\" Time=\"421550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\MaxSockaddrLength\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"16\" Time=\"421550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\UseDelayedAcceptance\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"421550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Winsock\\HelperDllName\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"421550000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\System32\\wshtcpip.dll\" Return=\"SUCCESS\" Time=\"421570000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\System32\\mswsock.dll\" Return=\"SUCCESS\" Time=\"422380000\" />\n",
      "<LoadLibrary lpFileName=\"DNSAPI.dll\" Return=\"SUCCESS\" Time=\"422690000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\" Return=\"SUCCESS\" Time=\"423130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\QueryAdapterName\" result=\"FAILURE\" Time=\"423150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableAdapterDomainName\" result=\"FAILURE\" Time=\"423150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseDomainNameDevolution\" result=\"FAILURE\" Time=\"423150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\UseDomainNameDevolution\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"423150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\PrioritizeRecordData\" result=\"FAILURE\" Time=\"423150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\PrioritizeRecordData\" result=\"FAILURE\" Time=\"423160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AllowUnqualifiedQuery\" result=\"FAILURE\" Time=\"423160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\AllowUnqualifiedQuery\" result=\"FAILURE\" Time=\"423160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AppendToMultiLabelName\" result=\"FAILURE\" Time=\"423160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ScreenBadTlds\" result=\"FAILURE\" Time=\"423170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ScreenUnreachableServers\" result=\"FAILURE\" Time=\"423170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\FilterClusterIp\" result=\"FAILURE\" Time=\"423170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\WaitForNameErrorOnAll\" result=\"FAILURE\" Time=\"423180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseEdns\" result=\"FAILURE\" Time=\"423180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\QueryIpMatching\" result=\"FAILURE\" Time=\"423180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UseHostsFile\" result=\"FAILURE\" Time=\"423180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationEnabled\" result=\"FAILURE\" Time=\"423180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableDynamicUpdate\" result=\"FAILURE\" Time=\"423190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterPrimaryName\" result=\"FAILURE\" Time=\"423190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterAdapterName\" result=\"FAILURE\" Time=\"423190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\EnableAdapterDomainNameRegistration\" result=\"FAILURE\" Time=\"423190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterReverseLookup\" result=\"FAILURE\" Time=\"423200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableReverseAddressRegistrations\" result=\"FAILURE\" Time=\"423200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegisterWanAdapters\" result=\"FAILURE\" Time=\"423210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DisableWanDynamicUpdate\" result=\"FAILURE\" Time=\"423210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationTtl\" result=\"FAILURE\" Time=\"423210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DefaultRegistrationTTL\" result=\"FAILURE\" Time=\"423220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationRefreshInterval\" result=\"FAILURE\" Time=\"423220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DefaultRegistrationRefreshInterval\" result=\"FAILURE\" Time=\"423220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\RegistrationMaxAddressCount\" result=\"FAILURE\" Time=\"423230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\MaxNumberOfAddressesToRegister\" result=\"FAILURE\" Time=\"423230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateSecurityLevel\" result=\"FAILURE\" Time=\"423230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\UpdateSecurityLevel\" result=\"FAILURE\" Time=\"423230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateZoneExcludeFile\" result=\"FAILURE\" Time=\"423240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\UpdateTopLevelDomainZones\" result=\"FAILURE\" Time=\"423240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\DnsTest\" result=\"FAILURE\" Time=\"423240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCacheSize\" result=\"FAILURE\" Time=\"423250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCacheTtl\" result=\"FAILURE\" Time=\"423250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxNegativeCacheTtl\" result=\"FAILURE\" Time=\"423250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\AdapterTimeoutLimit\" result=\"FAILURE\" Time=\"423250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\ServerPriorityTimeLimit\" result=\"FAILURE\" Time=\"423260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MaxCachedSockets\" result=\"FAILURE\" Time=\"423260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MulticastListenLevel\" result=\"FAILURE\" Time=\"423260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\DnsCache\\Parameters\\MulticastSendLevel\" result=\"FAILURE\" Time=\"423260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"423270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsQueryTimeouts\" result=\"FAILURE\" Time=\"423270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsQuickQueryTimeouts\" result=\"FAILURE\" Time=\"423280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsMulticastQueryTimeouts\" result=\"FAILURE\" Time=\"423280000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\" Return=\"SUCCESS\" Time=\"423380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Hostname\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"423380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Hostname\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"ants-3321da9da7\" Time=\"423390000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\" Return=\"SUCCESS\" Time=\"423490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Domain\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"423500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\Domain\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"423500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\DnsNbtLookupOrder\" result=\"FAILURE\" Time=\"423510000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\WinSock_Registry_Version\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"2.0\" Time=\"423640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\WinSock2\\Parameters\\AutodialDLL\" result=\"FAILURE\" Time=\"423650000\" />\n",
      "<LoadLibrary lpFileName=\"rasadhlp.dll\" Return=\"SUCCESS\" Time=\"423650000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\mswsock.dll\" Return=\"SUCCESS\" Time=\"424170000\" />\n",
      "<LoadLibrary lpFileName=\"SXS.DLL\" Return=\"SUCCESS\" Time=\"427330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\TypeLib\\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\\1.1\\0\\win32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\shdocvw.dll\" Time=\"428130000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\system32\\shdocvw.dll\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"428170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\http\\ShellFolder\" result=\"FAILURE\" Time=\"428490000\" />\n",
      "<LoadLibrary lpFileName=\"urlmon.dll\" Return=\"SUCCESS\" Time=\"428530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\EnableHooks\" result=\"FAILURE\" Time=\"428990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{e2e2dd38-d088-4134-82b7-f2ba38496583}\\clsid\" Return=\"SUCCESS\" Time=\"429030000\" />\n",
      "<LoadLibrary lpFileName=\"urlmon.dll\" Return=\"SUCCESS\" Time=\"429040000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\ButtonText\" result=\"FAILURE\" Time=\"429120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\Exec\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"%windir%\\Network Diagnostic\\xpnetdiag.exe\" Time=\"429130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\Script\" result=\"FAILURE\" Time=\"429150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\MenuText\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"@xpsp3res.dll,-20001\" Time=\"429150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\ShellNoRoam\\MUICache\\LangID\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"0904\" Time=\"429230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\ShellNoRoam\\MUICache\\@xpsp3res.dll,-20001\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Diagnose Connection Problems...\" Time=\"429230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\MenuCustomize\" result=\"FAILURE\" Time=\"429250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{E2E2DD38-D088-4134-82B7-F2BA38496583}\\MenuStatusBar\" result=\"FAILURE\" Time=\"429250000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Extensions\\CmdMapping\" Return=\"SUCCESS\" Time=\"429260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Extensions\\CmdMapping\\{e2e2dd38-d088-4134-82b7-f2ba38496583}\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"429260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11d2-BB9E-00C04F795683}\\clsid\" Return=\"SUCCESS\" Time=\"429280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\ButtonText\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Messenger\" Time=\"429310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\Exec\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\\Messenger\\msmsgs.exe\" Time=\"429320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\Script\" result=\"FAILURE\" Time=\"429320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\MenuText\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Windows Messenger\" Time=\"429330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\MenuCustomize\" result=\"FAILURE\" Time=\"429330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\MenuStatusBar\" result=\"FAILURE\" Time=\"429330000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Extensions\\CmdMapping\" Return=\"SUCCESS\" Time=\"429340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Extensions\\CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683}\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8193\" Time=\"429340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Extensions\\{FB5F1910-F110-11D2-BB9E-00C04F795683}\\Default Visible\" Return=\"SUCCESS\" Time=\"429340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoFileMenu\" result=\"FAILURE\" Time=\"429450000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\International\\CheckVersion\" result=\"FAILURE\" Time=\"429470000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\shdoclc.dll\" Return=\"SUCCESS\" Time=\"429500000\" />\n",
      "<LoadLibrary lpFileName=\"COMCTL32.dll\" Return=\"SUCCESS\" Time=\"429660000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\0\" Return=\"SUCCESS\" Time=\"430690000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\1\" Return=\"SUCCESS\" Time=\"430700000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\2\" Return=\"SUCCESS\" Time=\"430700000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\3\" Return=\"SUCCESS\" Time=\"430700000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\flash\" Return=\"SUCCESS\" Time=\"430700000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\0\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"image/gif\" Time=\"430710000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\1\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"image/x-xbitmap\" Time=\"430710000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\2\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"image/jpeg\" Time=\"430720000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\3\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"image/pjpeg\" Time=\"430730000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Accepted Documents\\flash\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"application/x-shockwave-flash\" Time=\"430740000\" />\n",
      "<LoadLibrary lpFileName=\"URLMON.DLL\" Return=\"SUCCESS\" Time=\"430740000\" />\n",
      "<LoadLibrary lpFileName=\"OLEAUT32.dll\" Return=\"SUCCESS\" Time=\"430810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Ratings\\Key\" result=\"FAILURE\" Time=\"430860000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\UrlEncoding\" result=\"FAILURE\" Time=\"430890000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\UrlEncoding\" result=\"FAILURE\" Time=\"430940000\" />\n",
      "<LoadLibrary lpFileName=\"mlang.dll\" Return=\"SUCCESS\" Time=\"431220000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"432520000\" />\n",
      "<LoadLibrary lpFileName=\"WININET.dll\" Return=\"SUCCESS\" Time=\"432810000\" />\n",
      "<LoadLibrary lpFileName=\"wsock32\" Return=\"SUCCESS\" Time=\"433210000\" />\n",
      "<LoadLibrary lpFileName=\"ws2_32\" Return=\"SUCCESS\" Time=\"440100000\" />\n",
      "<LoadLibrary lpFileName=\"WS2_32.dll\" Return=\"SUCCESS\" Time=\"440410000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\s2901.exe\" result=\"FAILURE\" Time=\"440740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\*\" result=\"FAILURE\" Time=\"440740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\AcceptLanguage\" result=\"FAILURE\" Time=\"441090000\" />\n",
      "<LoadLibrary lpFileName=\"MLANG.dll\" Return=\"SUCCESS\" Time=\"441090000\" />\n",
      "<LoadLibrary lpFileName=\"RASAPI32.DLL\" Return=\"SUCCESS\" Time=\"441690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\MediaProperties\\PrivateProperties\\Joystick\\Winmm\\wheel\" Return=\"SUCCESS\" Time=\"443420000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"443820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Telephony\\Tapi32MaxNumRequestRetries\" result=\"FAILURE\" Time=\"443990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Telephony\\Tapi32RequestRetryTimeout\" result=\"FAILURE\" Time=\"443990000\" />\n",
      "<LoadLibrary lpFileName=\"RASAPI32.DLL\" Return=\"SUCCESS\" Time=\"444020000\" />\n",
      "<LoadLibrary lpFileName=\"RTUTILS.DLL\" Return=\"SUCCESS\" Time=\"444970000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\" Return=\"SUCCESS\" Time=\"445470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"445470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"445860000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"445870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"445870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"445870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1048576\" Time=\"445870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%windir%\\tracing\" Time=\"445870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"445900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"445900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"446000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"446000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1048576\" Time=\"446000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%windir%\\tracing\" Time=\"446000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"446300000\" />\n",
      "<LoadLibrary lpFileName=\"sensapi.dll\" Return=\"SUCCESS\" Time=\"447300000\" />\n",
      "<CreateFile hName=\"\\\\.\\PIPE\\lsarpc\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"448260000\" />\n",
      "<LoadLibrary lpFileName=\"ntdll.dll\" Return=\"SUCCESS\" Time=\"448720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\MigrateProxy\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"448890000\" />\n",
      "<LoadLibrary lpFileName=\"SHELL32.dll\" Return=\"SUCCESS\" Time=\"448960000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\" Return=\"SUCCESS\" Time=\"449020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Common AppData\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"449030000\" />\n",
      "<LoadLibrary lpFileName=\"USERENV.dll\" Return=\"SUCCESS\" Time=\"449030000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\UserEnvDebugLevel\" result=\"FAILURE\" Time=\"450050000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\ChkAccDebugLevel\" result=\"FAILURE\" Time=\"450110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\ProductOptions\\ProductType\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"WinNT\" Time=\"450170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Personal\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"450640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\Local Settings\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"450710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\RsopDebugLevel\" result=\"FAILURE\" Time=\"451800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\UserEnvDebugLevel\" result=\"FAILURE\" Time=\"451810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\RsopLogging\" result=\"FAILURE\" Time=\"451810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\winlogon\\UserEnvDebugLevel\" result=\"FAILURE\" Time=\"451950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\AllUsersProfile\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"All Users\" Time=\"452220000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\ComS\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\Pa\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\win\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\FP_NO_HO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"NO\" Time=\"452290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\O\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Windows_NT\" Time=\"452350000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_A\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86\" Time=\"452420000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6\" Time=\"452540000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86 Family 6 Model 3 Stepping 3, GenuineIntel\" Time=\"452620000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"0303\" Time=\"452650000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\NUMBER_OF_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"452740000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PATH\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH\" Time=\"452810000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452910000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452910000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\ComS\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"452920000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\Pa\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"453040000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\win\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"453170000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\FP_NO_HO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"NO\" Time=\"453290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\O\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Windows_NT\" Time=\"453290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_A\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86\" Time=\"453290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6\" Time=\"453290000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86 Family 6 Model 3 Stepping 3, GenuineIntel\" Time=\"453300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"0303\" Time=\"453300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\NUMBER_OF_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"453300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PATH\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH\" Time=\"453300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"453300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"453500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"453900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\DefaultUserProfile\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Default User\" Time=\"454000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\" Time=\"454110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\\Common Files\" Time=\"454220000\" />\n",
      "<LoadLibrary lpFileName=\"netapi32.dll\" Return=\"SUCCESS\" Time=\"454770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-448539723-115176313-1177238915-1003\\ProfileImagePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"455980000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\" Return=\"SUCCESS\" Time=\"456170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ParseAutoexec\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"456170000\" />\n",
      "<CreateFile hName=\"c:\\autoexec.bat\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"456300000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"456320000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"456320000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"456330000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"456700000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\LOGON\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\\\ANTS-3321DA9DA7\" Time=\"457030000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\CLIEN\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"457150000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\SESSI\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"457270000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\APPD\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Application Data\" Time=\"457350000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\" Time=\"457550000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"457670000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\Documents and Settings\\ants\" Time=\"457800000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\LOGON\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\\\ANTS-3321DA9DA7\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\CLIEN\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\SESSI\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\APPD\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Application Data\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"458000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\Documents and Settings\\ants\" Time=\"458000000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\" Return=\"SUCCESS\" Time=\"458130000\" />\n",
      "<RegSetValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\Common AppData\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\All Users\\Application Data\" Return=\"SUCCESS\" Time=\"458130000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\" Return=\"SUCCESS\" Time=\"458380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders\\AppData\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"458390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"458530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\AllUsersProfile\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"All Users\" Time=\"458590000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\ComS\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"458610000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\Pa\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"458650000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\win\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"458650000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\FP_NO_HO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"NO\" Time=\"458650000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\O\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Windows_NT\" Time=\"458670000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_A\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86\" Time=\"458730000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6\" Time=\"458780000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86 Family 6 Model 3 Stepping 3, GenuineIntel\" Time=\"458910000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"0303\" Time=\"458940000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\NUMBER_OF_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"459000000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PATH\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH\" Time=\"459060000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459120000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459120000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\ComS\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459160000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\Pa\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459240000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\win\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459360000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\FP_NO_HO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"NO\" Time=\"459480000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\O\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Windows_NT\" Time=\"459480000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_A\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86\" Time=\"459480000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSO\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6\" Time=\"459480000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"x86 Family 6 Model 3 Stepping 3, GenuineIntel\" Time=\"459490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PROCESSOR\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"0303\" Time=\"459490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\NUMBER_OF_\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"459490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\PATH\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH\" Time=\"459490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459620000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\ProfilesDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"459990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\DefaultUserProfile\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Default User\" Time=\"460040000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\ProgramFilesDir\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\" Time=\"460120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\CommonFilesDir\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\\Common Files\" Time=\"460230000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList\\S-1-5-21-448539723-115176313-1177238915-1003\\ProfileImagePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"460970000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\" Return=\"SUCCESS\" Time=\"461100000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ParseAutoexec\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"461100000\" />\n",
      "<CreateFile hName=\"c:\\autoexec.bat\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"461140000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"461160000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"461160000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\TE\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"461170000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Environment\\T\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"461400000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\LOGON\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\\\ANTS-3321DA9DA7\" Time=\"461690000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\CLIEN\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"461850000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\SESSI\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"461980000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\APPD\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Application Data\" Time=\"462130000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\" Time=\"462310000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"462490000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\Documents and Settings\\ants\" Time=\"462610000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\LOGON\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\\\ANTS-3321DA9DA7\" Time=\"462790000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\CLIEN\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"462790000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\SESSI\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Console\" Time=\"462790000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\APPD\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Application Data\" Time=\"462800000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\" Time=\"462800000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"462800000\" />\n",
      "<RegEnumValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Volatile Environment\\HOME\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\Documents and Settings\\ants\" Time=\"462800000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\" Return=\"SUCCESS\" Time=\"463120000\" />\n",
      "<RegSetValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders\\AppData\" type=\"REG_SZ\" data=\"C:\\Documents and Settings\\ants\\Application Data\" Return=\"SUCCESS\" Time=\"463130000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\" Return=\"SUCCESS\" Time=\"463230000\" />\n",
      "<RegSetValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\MigrateProxy\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"463240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" Return=\"SUCCESS\" Time=\"463250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyServer\" result=\"FAILURE\" Time=\"463250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyOverride\" result=\"FAILURE\" Time=\"463250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\AutoConfigURL\" result=\"FAILURE\" Time=\"463260000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\" Return=\"SUCCESS\" Time=\"463320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings\" Return=\"SUCCESS\" Time=\"463330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings\" Return=\"SUCCESS\" Time=\"463330000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\" Return=\"SUCCESS\" Time=\"463340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings\" Return=\"SUCCESS\" Time=\"463340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\DefaultConnectionSettings\" Return=\"SUCCESS\" Time=\"463340000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\" Return=\"SUCCESS\" Time=\"463420000\" />\n",
      "<RegSetValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" type=\"REG_DWORD\" data=\"0\" Return=\"SUCCESS\" Time=\"463420000\" />\n",
      "<RegDeleteKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyServer\" result=\"FAILURE\" Time=\"463430000\" />\n",
      "<RegDeleteKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyOverride\" result=\"FAILURE\" Time=\"463430000\" />\n",
      "<RegDeleteKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\AutoConfigURL\" result=\"FAILURE\" Time=\"463430000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_CONFIG\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\" Return=\"SUCCESS\" Time=\"463440000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_CONFIG\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" type=\"REG_DWORD\" data=\"0\" Return=\"SUCCESS\" Time=\"463470000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\" Return=\"SUCCESS\" Time=\"463470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings\" Return=\"SUCCESS\" Time=\"463480000\" />\n",
      "<RegQueryValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings\" Return=\"SUCCESS\" Time=\"463480000\" />\n",
      "<RegCreateKey hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\" Return=\"SUCCESS\" Time=\"463480000\" />\n",
      "<RegSetValue hKey=\"HKEY_USERS\\S-1-5-21-448539723-115176313-1177238915-1003\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Connections\\SavedLegacySettings\" type=\"REG_BINARY\" data=\"3C0000001A000000010000000000000000000000000000000400000000000000B0DC780F5D00CD01010000000A00020F0000000000000000\" Return=\"SUCCESS\" Time=\"463490000\" />\n",
      "<LoadLibrary lpFileName=\"urlmon.dll\" Return=\"SUCCESS\" Time=\"463570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" Time=\"463880000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"33\" Time=\"464210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"219\" Time=\"464400000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"464470000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"464470000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\UNCAsIntranet\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"464470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"71\" Time=\"464650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"464780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"465050000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"33\" Time=\"465300000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"219\" Time=\"465430000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"465470000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"465470000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\UNCAsIntranet\" type=\"REG_DWORD\" data=\"1\" Return=\"SUCCESS\" Time=\"465470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"71\" Time=\"465610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"465790000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"465980000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"466360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"466360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"466420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1A10\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"466510000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"467480000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"467710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"467960000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"468390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\MIME\\Database\\Content Type\\text/html\\Extension\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\".htm\" Time=\"469300000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\KP456PCV\\1.0[1].htm\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"469550000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\KP456PCV\\1.0[1].htm\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"469560000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\IsTextPlainHonored\" result=\"FAILURE\" Time=\"470370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ProxyEnable\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"470840000\" />\n",
      "<LoadLibrary lpFileName=\"SHELL32.dll\" Return=\"SUCCESS\" Time=\"470950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"471080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"471110000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"471210000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"471270000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\AppID\" result=\"FAILURE\" Time=\"471370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"471410000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"471450000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"471530000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"471600000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\AppID\" result=\"FAILURE\" Time=\"471740000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"471900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\ICWCONN1.EXE\\Path\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\Program Files\\Internet Explorer\\Connection Wizard;\" Time=\"475320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\URL Compatibility\\~/CONNWIZ.HTM\\Compatibility Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"4\" Time=\"475460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\URL Compatibility\\~/CWIZINTR.HTM\\Compatibility Flags\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"4\" Time=\"475490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Application Compatibility\\s2901.exe\" result=\"FAILURE\" Time=\"475520000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Control Panel\\International\\NumShape\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1\" Time=\"475780000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\WindowsShell.manifest\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"475920000\" />\n",
      "<LoadLibrary lpFileName=\"comctl32.dll\" Return=\"SUCCESS\" Time=\"476210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoFileMenu\" result=\"FAILURE\" Time=\"476530000\" />\n",
      "<LoadLibrary lpFileName=\"urlmon.dll\" Return=\"SUCCESS\" Time=\"476550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\PROTOCOLS\\Handler\\about\\CLSID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\" Time=\"476850000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"476880000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"476910000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"477000000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"477070000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\\AppID\" result=\"FAILURE\" Time=\"477190000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"477260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\PROTOCOLS\\Handler\\about\\CLSID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\" Time=\"477370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\PROTOCOLS\\Handler\\about\\CLSID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{3050F406-98B5-11CF-BB82-00AA00BDCE0B}\" Time=\"477430000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\about\" result=\"FAILURE\" Time=\"477490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProtocolDefaults\\\\about\" result=\"FAILURE\" Time=\"477500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\*\" result=\"FAILURE\" Time=\"477500000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\ProtocolDefaults\\\\*\" result=\"FAILURE\" Time=\"477510000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{25336920-03F9-11CF-8FD0-00AA00686F13}\\Progid\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"htmlfile\" Time=\"477760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Url History\\DaysToKeep\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"20\" Time=\"477820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\UrlEncoding\" result=\"FAILURE\" Time=\"478120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\UrlEncoding\" result=\"FAILURE\" Time=\"478120000\" />\n",
      "<LoadLibrary lpFileName=\"OLEAUT32.dll\" Return=\"SUCCESS\" Time=\"478220000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Show_FullURL\" result=\"FAILURE\" Time=\"478270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\SmartDithering\" result=\"FAILURE\" Time=\"478270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\RtfConverterFlags\" result=\"FAILURE\" Time=\"478280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Page_Transitions\" result=\"FAILURE\" Time=\"478280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Use_DlgBox_Colors\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"yes\" Time=\"478280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Anchor Underline\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"yes\" Time=\"478280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\CSS_Compat\" result=\"FAILURE\" Time=\"478290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Expand Alt Text\" result=\"FAILURE\" Time=\"478290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Display Inline Images\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"yes\" Time=\"478290000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Display Inline Videos\" result=\"FAILURE\" Time=\"478300000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Play_Background_Sounds\" result=\"FAILURE\" Time=\"478300000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Play_Animations\" result=\"FAILURE\" Time=\"478310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Print_Background\" result=\"FAILURE\" Time=\"478310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Use Stylesheets\" result=\"FAILURE\" Time=\"478310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\SmoothScroll\" result=\"FAILURE\" Time=\"478310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Show image placeholders\" result=\"FAILURE\" Time=\"478310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Disable Script Debugger\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"yes\" Time=\"478320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\DisableScriptDebuggerIE\" result=\"FAILURE\" Time=\"478320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Move System Caret\" result=\"FAILURE\" Time=\"478320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Force Offscreen Composition\" result=\"FAILURE\" Time=\"478320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Enable AutoImageResize\" result=\"FAILURE\" Time=\"478330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Q051873\" result=\"FAILURE\" Time=\"478330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\UseThemes\" result=\"FAILURE\" Time=\"478330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\UseHR\" result=\"FAILURE\" Time=\"478330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Q300829\" result=\"FAILURE\" Time=\"478330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Disable_Local_Machine_Navigate\" result=\"FAILURE\" Time=\"478340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Cleanup HTCs\" result=\"FAILURE\" Time=\"478340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Q331869\" result=\"FAILURE\" Time=\"478340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\AlwaysAllowExecCommand\" result=\"FAILURE\" Time=\"478340000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Default_CodePage\" result=\"FAILURE\" Time=\"478350000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\AutoDetect\" result=\"FAILURE\" Time=\"478350000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\Default_IEFontSize\" result=\"FAILURE\" Time=\"478360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Anchor Color\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"0,0,255\" Time=\"478360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Anchor Color Visited\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"128,0,128\" Time=\"478370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Anchor Color Hover\" result=\"FAILURE\" Time=\"478370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Always Use My Colors\" result=\"FAILURE\" Time=\"478370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Always Use My Font Size\" result=\"FAILURE\" Time=\"478370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Always Use My Font Face\" result=\"FAILURE\" Time=\"478380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\Use Anchor Hover Color\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"No\" Time=\"478380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Settings\\MiscFlags\" result=\"FAILURE\" Time=\"478380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Allow Programmatic Cut_Copy_Paste\" result=\"FAILURE\" Time=\"478390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\DisableCachingOfSSLPages\" result=\"FAILURE\" Time=\"478400000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Nls\\CodePage\\950\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"c_950.nls\" Time=\"478460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEFontSize\" result=\"FAILURE\" Time=\"478480000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEPropFontName\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Times New Roman\" Time=\"478490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEFixedFontName\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Courier New\" Time=\"478490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\AcceptLanguage\" result=\"FAILURE\" Time=\"478500000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Version Vector\\VM\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"1.0\" Time=\"478610000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Internet Explorer\\Version Vector\\I\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"6.0000\" Time=\"478620000\" />\n",
      "<LoadLibrary lpFileName=\"URLMON.DLL\" Return=\"SUCCESS\" Time=\"479160000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\KP456PCV\\1.0[1].htm\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"479310000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\KP456PCV\\1.0[1].htm\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"479310000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\PopupMgr\" result=\"FAILURE\" Time=\"479610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"479700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"479760000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"479930000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\urlmon.dll\" Time=\"480020000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\\AppID\" result=\"FAILURE\" Time=\"480200000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"480330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\\InProcServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\urlmon.dll\" Time=\"480550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1809\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"480780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\BlockUserInit\" result=\"FAILURE\" Time=\"480800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\BlockUserInit\" result=\"FAILURE\" Time=\"480830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\UseTimerMethod\" result=\"FAILURE\" Time=\"480850000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\UseHooks\" result=\"FAILURE\" Time=\"480900000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\New Windows\\AllowHTTPS\" result=\"FAILURE\" Time=\"480950000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\shdoclc.dll\" Return=\"SUCCESS\" Time=\"481460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEFontSize\" result=\"FAILURE\" Time=\"481760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEPropFontName\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Times New Roman\" Time=\"481760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\International\\Scripts\\3\\IEFixedFontName\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Courier New\" Time=\"481760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1400\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"482670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\http\\ShellFolder\" result=\"FAILURE\" Time=\"482830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\IEHardenWarnOnNav\" result=\"FAILURE\" Time=\"482980000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\IEHardenWarnOnNav\" result=\"FAILURE\" Time=\"482990000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"483250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"483290000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"483390000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\msimtf.dll\" Time=\"483450000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\AppID\" result=\"FAILURE\" Time=\"483550000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{50D5107A-D278-4871-8989-F4CEAAF59CFC}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"483750000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\SystemShared\\\\CUAS\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"484830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\\\EnableAnchorContext\" result=\"FAILURE\" Time=\"484950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\CTF\\Disable Thread Input Manager\" result=\"FAILURE\" Time=\"485100000\" />\n",
      "<LoadLibrary lpFileName=\"IMM32.DLL\" Return=\"SUCCESS\" Time=\"485520000\" />\n",
      "<LoadLibrary lpFileName=\"C:\\WINDOWS\\system32\\IMM32.DLL\" Return=\"SUCCESS\" Time=\"486160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"487140000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"487170000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"487260000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\jscript.dll\" Time=\"487340000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\\AppID\" result=\"FAILURE\" Time=\"487440000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{F414C260-6AC0-11CF-B6D1-00AA00BBBB58}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Both\" Time=\"487520000\" />\n",
      "<LoadLibrary lpFileName=\"kernel32.dll\" Return=\"SUCCESS\" Time=\"489110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1201\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"489190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\COM+Enabled\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"489250000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\DefaultAccessPermission\" result=\"FAILURE\" Time=\"489730000\" />\n",
      "<LoadLibrary lpFileName=\"OLE32.DLL\" Return=\"SUCCESS\" Time=\"490060000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"490100000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\xml\\CLSID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{989D1DC0-B162-11D1-B6EC-D27DDCF9A923}\" Time=\"490180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"490210000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"490240000\" />\n",
      "<LoadLibrary lpFileName=\"oleaut32.dll\" Return=\"SUCCESS\" Time=\"493820000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"495490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"495490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"495600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"495940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"495940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"495940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"495940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1048576\" Time=\"495940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%windir%\\tracing\" Time=\"495950000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"496280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"496450000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\MJWR41L9\\ender.min[1].js\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"497460000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\MJWR41L9\\ender.min[1].js\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"497460000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\MJWR41L9\\ender.min[1].js\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"497820000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\MJWR41L9\\ender.min[1].js\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"497830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"498160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"498160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"498180000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\MJWR41L9\\ender.min[1].js\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"499780000\" />\n",
      "<LoadLibrary lpFileName=\"WININET.dll\" Return=\"SUCCESS\" Time=\"504500000\" />\n",
      "<LoadLibrary lpFileName=\"mshtml.dll\" Return=\"SUCCESS\" Time=\"536060000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\system32\\mshtml.tlb\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"537570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Mozilla/4.0 (compatible; MSIE 6.0; Win32)\" Time=\"538030000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\\" Return=\"SUCCESS\" Time=\"538040000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\MSN 2.0\" Return=\"SUCCESS\" Time=\"538040000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\UA Tokens\\MSN 2.5\" Return=\"SUCCESS\" Time=\"538050000\" />\n",
      "<RegEnumValue hKey=\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\User Agent\\Post Platform\\SV1\" Return=\"SUCCESS\" Time=\"538090000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"552350000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"552360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"552370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"552530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"552530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"552530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"552530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1048576\" Time=\"552530000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%windir%\\tracing\" Time=\"552540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"552890000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"553060000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"553170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"553180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"553230000\" />\n",
      "<LoadLibrary lpFileName=\"MLANG.dll\" Return=\"SUCCESS\" Time=\"637880000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1C00\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"65536\" Time=\"638540000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\P3P\\History\" Return=\"SUCCESS\" Time=\"646200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\{AEBA21FA-782A-4A90-978D-B72164C80120}\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"1A3761592352350C7A5F20172F1E1A190E2B01731E281A041B0C3BC22127530D36052C05043D4F3A4A44333A0A061268537C2013355D4C102701567A2D3F384F790F162675531C3100567A3E32244F791B0033714D2332297C6A35313440723B012E5D4C2A07154872381200567A3E163C714D2433357C72350E3C1A4144190F313A567A2E3E310C7C6A10270C055D4C3919121561542E003332405203251F055D4C2C0C0A1561541A261F055D4C10211D1B714D3B243A216D7224163C324072210F3A1A41441B1E0101714D322330276D4D1F28103C567A2F2E32167C6A3A123B2875530B3F1201714D2332292775531230321E4F7912381701714D303E37276D7238123F0441440A0E3228495F1C240B1B3621417B5B2439317C6A2B0E2575531A2E264172341626714D30303A7C6A07331A567A3A0033714D2332297C6A1A261A4052243F1A6D4D1C2228755313252041440A0E327553080720714D10270D055D4C241A1E1B714D3F203F216D4D10270C055D4C3919123A567A3A202C0C7C6A3E0C370775531230323A567A252D230C7C6A2B08213A567A223A323A5672241E261A4144071F031B75531C310101714D322330276D72341E300441441B1E3B28495F0733121B5D4C350B0A1F75530B00342840723B012D04414401053428405222360434487238123F0441440A0E1F01714D24333527061C685349142101405210270D40522C29056D4D1F2805567A2F2E32755307331240523F3A196D72200034714D1A261A4052243F1A6D723508385D4C2D0118487A27231F567A3B2F3F4F790839011B7172331F393A567A2E3E310C7C72350E3F1A41440A0A353A567A3A202C0C7C6A03251F055D4C2C0C0A156154270534324052102109055D4C2D0118156154073717055D4C1C24031B714D30303B276D7233173F284072341E300441441B1E0001714D2F2C2C276D4D0B263F3C567A3A2023167C6A35053328755312301701714D303E372775531325201E4F791F291F01714D243335270621417B5B3D24377C6A2B0E254072331F395D72341E305D4C2A0D18487A27123B714D2332125672200C2E5D4C2C0C0A75531A261F40723508385D4C2D011875530F21274144071F3E61543D06223240522C2905324872341E051B714D10270C055D4C39191A1B714D233224216D4D03251F055D4C2C0C0A3A567A252D230C7C6A2B08210775531325203A567A3E3E3B0C7C6A3F0F233A567A2F2E3D3C5672331F390441441A0E050175531C310001714D2F2C2C276D72200C2D04414406182A28495F1A261A1B5D4C2C0C0F1F75531C1C3E28407238123F0441440A163C2840523E3906342121417B5B23273C7C6A17371740523224056D4D0E212C75530B31317553083E214144071E3C6154173717055D4C00331E1B714D2E393B216D72200632324072210F3C1A41441A0E1F01714D202C30276D4D0E212C3C567A3A2E2D167C6A3F0722286E02684A7C2109265D4C291D1F567A3F32384F791E3001567A3A2E2D4F79140722714D24303B7C6A2A1E2F0775530C2D263A567A31253D0C7C6A3E0E353A567A3B2F3D3A5672341E260441440B0A1E0175530E380101714D23302B276D72210F3C04281B676B5F00221075531F212741440B0A3175530E1D22714D03271D40523E3908755308312141441A0E323A567A3F32380C7C6A063E0D055D4C350D091561542907223240521737171B5D4C3A19161F6154063E0D1B5D4C03271101714D24333B27062141734111251D567A2E3E3B4F7918123F714D2E393B7C6A3E0E354072210F3C5D4C360D194872341E1F1B714D003316055D4C3804011B714D23302B216D4D1C240D055D4C291D173C567A3F3238167C6A3909250975530B31313C567A3B2F3D1615395F7B4203380240202C1E4F37417B5B23273C7C1407226E14684A7C2013355D3037080637417B5B23273C7C1B391D30027C50683A3B344F1B1E3B6E146873410B220A5612303228096773410B222A412C0C0F2137417B5B23273C7C081C3E660E444F560613056127231F4F3F5B537C2013355D3E3906060A68537C2109265D32123F6E14684A443E37026D1C24014F3F5B7341083827413804196E14684A443E37026D3E0E353B37417B5B2439317C0839004F3F7C50683B1D3C71252D2C203A7C50683B253B4F011D2A6E14684A443E37026D102109291F5E45671430074912163C660E44734108382741360A1B213F427341103B2D4100331E4F3F5B535E2E071D75210722660E7C50682324314F0D15014F3F5B535E2E071D480B183C6E14684A4426360C6D2B06256637417B5B142101403A31241537417B5B3C3E3F7C1238174F3F5B535E2E071D75350838360356767437081940073717291F7C50682324314F071F3E16177C5068203A397525123F660E444F561C121D561C240D2937417B5B3D24377C1E1D22660E444F561C1230612313114F3F5B535E2F01154810270C6E14684A7C3612385D243F196E14684A44212C046D350534660E444F561C121D561C3B252809676B5F012C2875241E263637417B5B3D24377C143A0B3037417B5B360C7C\" Time=\"646290000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"647940000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"647950000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"647990000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"647990000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"649350000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"649350000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"649370000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"649370000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"649510000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"649510000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"653660000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"653660000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"653680000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"653680000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"653870000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"653870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"661060000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\system32\\en-US\\jscript.dll.mui\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"FAILURE\" Time=\"661600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"661700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\ShockwaveFlash.ShockwaveFlash.6\\CLSID\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"{D27CDB6E-AE6D-11cf-96B8-444553540000}\" Time=\"661780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"661810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"661830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1200\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"662000000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"662020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"662050000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"662130000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\macromed\\flash\\flash.ocx\" Time=\"662180000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\AppID\" result=\"FAILURE\" Time=\"662270000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"662350000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\{10200490-FA38-11D0-AC0E-00A0C90FFFC0}\" result=\"FAILURE\" Time=\"664940000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\{10200490-FA38-11D0-AC0E-00A0C90FFFC0}\" result=\"FAILURE\" Time=\"664960000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1405\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"665090000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\TypeLib\\{D27CDB6B-AE6D-11CF-96B8-444553540000}\\1.0\\0\\win32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\macromed\\flash\\flash.ocx\" Time=\"665240000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\system32\\macromed\\flash\\flash.ocx\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"665260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\TypeLib\\{00020430-0000-0000-C000-000000000046}\\2.0\\0\\win32\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"C:\\WINDOWS\\system32\\stdole2.tlb\" Time=\"665450000\" />\n",
      "<CreateFile hName=\"C:\\WINDOWS\\system32\\stdole2.tlb\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"665470000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"668020000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"668020000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"668040000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"668040000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"668270000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"668270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"678110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"678110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"678120000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableFileTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"678270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"678270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\EnableConsoleTracing\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"678270000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\ConsoleTracingMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-65536\" Time=\"678280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\MaxFileSize\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1048576\" Time=\"678280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Tracing\\RASAPI32\\FileDirectory\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%windir%\\tracing\" Time=\"678280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"678470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"679120000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"680690000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"680690000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"680720000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"680720000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"680930000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"680940000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"683230000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"683230000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"683250000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"683250000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"683470000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" Return=\"SUCCESS\" Time=\"683480000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"686670000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"686670000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"686690000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[1].txt\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"TRUNCATE_EXISTING\" Return=\"SUCCESS\" Time=\"686690000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"686910000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Cookies\\ants@api.downloadmr[2].txt\" Return=\"SUCCESS\" Time=\"686920000\" />\n",
      "<LoadLibrary lpFileName=\"shell32.dll\" Return=\"SUCCESS\" Time=\"699930000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetHood\" result=\"FAILURE\" Time=\"700020000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoPropertiesMyComputer\" result=\"FAILURE\" Time=\"700040000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInternetIcon\" result=\"FAILURE\" Time=\"700060000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoCommonGroups\" result=\"FAILURE\" Time=\"700080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoControlPanel\" result=\"FAILURE\" Time=\"700140000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSetFolders\" result=\"FAILURE\" Time=\"700160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\InProcServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"700190000\" />\n",
      "<LoadLibrary lpFileName=\"SETUPAPI.dll\" Return=\"SUCCESS\" Time=\"700280000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\Setup\\SystemSetupInProgress\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"700640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\System\\WPA\\PnP\\seed\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"-2116632297\" Time=\"700650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OsLoaderPath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"700650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OsLoaderPath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\\" Time=\"700650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemPartition\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"700660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemPartition\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\\Device\\HarddiskVolume1\" Time=\"700660000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"700690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\SourcePath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"D:\\\" Time=\"700690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\ServicePackSourcePath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"700690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\ServicePackSourcePath\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"D:\\\" Time=\"700700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\ServicePackCachePath\" result=\"FAILURE\" Time=\"700700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\DriverCachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"\" Time=\"700700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\DriverCachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"700710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\DevicePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"700730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogLevel\" result=\"FAILURE\" Time=\"700750000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Setup\\LogPath\" result=\"FAILURE\" Time=\"700750000\" />\n",
      "<CreateFile hName=\"\\\\.\\PIPE\\lsarpc\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"700900000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{4774220e-1640-11e4-bb1b-806d6172696f}\\\\Data\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"000000005C005C003F005C0049004400450023004300640052006F006D00510045004D0055005F00510045004D0055005F00430044002D0052004F004D005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F005F0030002E0039002E005F005F005F005F002300340064003500310033003000330030003300300033003000320030003300330032003000320030003200300032003000320030003200300032003000320030003200300032003000320030003200300023007B00350033006600350036003300300064002D0062003600620066002D0031003100640030002D0039003400660032002D003000300061003000630039003100650066006200380062007D00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005C005C003F005C0056006F006C0075006D0065007B00340037003700340032003200300065002D0031003600340030002D0031003100650034002D0062006200310062002D003800300036006400360031003700320036003900360066007D005C00000049006E00760061006C00690064000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049006E00760061006C006900640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000001000000000000000BDADDBBABDADDBBABDADDBBABDADDBBABDADDBBA0000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0000\" Time=\"701200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{4774220e-1640-11e4-bb1b-806d6172696f}\\\\Generation\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701210000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701240000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{6fc0686a-6791-11e1-b81a-806d6172696f}\\\\Data\" Return=\"SUCCESS\" type=\"REG_BINARY\" data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ime=\"701260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{6fc0686a-6791-11e1-b81a-806d6172696f}\\\\Generation\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701280000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701290000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701310000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\{6fc0686a-6791-11e1-b81a-806d6172696f}\\\" Return=\"SUCCESS\" Time=\"701330000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\{6fc0686a-6791-11e1-b81a-806d6172696f}\\\\BaseClass\" type=\"REG_SZ\" data=\"Drive\" Return=\"SUCCESS\" Time=\"701330000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701330000\" />\n",
      "<CreateFile hName=\"\\\\.\\MountPointManager\" desiredAccess=\"\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"701350000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\{4774220e-1640-11e4-bb1b-806d6172696f}\\\" Return=\"SUCCESS\" Time=\"701360000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\{4774220e-1640-11e4-bb1b-806d6172696f}\\\\BaseClass\" type=\"REG_SZ\" data=\"Drive\" Return=\"SUCCESS\" Time=\"701370000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\MountPoints2\\CPC\\Volume\\{6fc0686a-6791-11e1-b81a-806d6172696f}\\\\Generation\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701380000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Drive\\shellex\\FolderExtensions\\{fbeb8a05-beee-4442-804e-409d6c4515e9}\\DriveMask\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"32\" Time=\"701420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DontShowSuperHidden\" result=\"FAILURE\" Time=\"701540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"000000000000000000000000000000000000000000000000000000000000000000000000\" Time=\"701550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\ShellState\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"2400000030280000000000000000000000000000010000000D0000000000000002000000\" Time=\"701550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ForceActiveDesktopOn\" result=\"FAILURE\" Time=\"701570000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoActiveDesktop\" result=\"FAILURE\" Time=\"701590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoWebView\" result=\"FAILURE\" Time=\"701610000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\ClassicShell\" result=\"FAILURE\" Time=\"701630000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\SeparateProcess\" result=\"FAILURE\" Time=\"701650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoNetCrawling\" result=\"FAILURE\" Time=\"701670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoSimpleStartMenu\" result=\"FAILURE\" Time=\"701690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Hidden\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"2\" Time=\"701700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowCompColor\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\DontPrettyPath\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"701710000\" />\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowInfoTip\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideIcons\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"701710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\MapNetDrvBtn\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"701710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\WebView\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"701720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Filter\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"701720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSuperHidden\" result=\"FAILURE\" Time=\"701720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\SeparateProcess\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"701720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\NoNetCrawling\" result=\"FAILURE\" Time=\"701730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Directory\\DocObject\" result=\"FAILURE\" Time=\"701760000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Directory\\BrowseInPlace\" result=\"FAILURE\" Time=\"701780000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Directory\\IsShortcut\" result=\"FAILURE\" Time=\"701830000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Directory\\AlwaysShowExt\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"\" Time=\"701840000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\Directory\\NeverShowExt\" result=\"FAILURE\" Time=\"701860000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\UseDesktopIniCache\" result=\"FAILURE\" Time=\"702060000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\AllowCLSIDPROGIDMapping\" result=\"FAILURE\" Time=\"702330000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\DocObject\" result=\"FAILURE\" Time=\"702390000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\BrowseInPlace\" result=\"FAILURE\" Time=\"702400000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\IsShortcut\" result=\"FAILURE\" Time=\"702460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\AlwaysShowExt\" result=\"FAILURE\" Time=\"702480000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\NeverShowExt\" result=\"FAILURE\" Time=\"702490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\InProcServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"702550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\InProcServer32\\LoadWithoutCOM\" result=\"FAILURE\" Time=\"702580000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked\" Return=\"SUCCESS\" Time=\"702590000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked\\{FF393560-C2A7-11CF-BFF4-444553540000}\" result=\"FAILURE\" Time=\"702600000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked\" Return=\"SUCCESS\" Time=\"702600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Blocked\\{FF393560-C2A7-11CF-BFF4-444553540000}\" result=\"FAILURE\" Time=\"702600000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\EnforceShellExtensionSecurity\" result=\"FAILURE\" Time=\"702620000\" />\n",
      "<RegCreateKey hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\" Return=\"SUCCESS\" Time=\"702640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{FF393560-C2A7-11CF-BFF4-444553540000} {062E1261-A60E-11D0-82C2-\" result=\"FAILURE\" Time=\"702640000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\" Return=\"SUCCESS\" Time=\"702640000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Cached\\{FF393560-C2A7-11CF-BFF4-444553540000} {062E1261-A60E-11D0-82C2-\" Return=\"SUCCESS\" type=\"REG_BINARY\" data=\"0100000034003400BE86DA2F49AACF01\" Time=\"702650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"702710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\COM3\\REGDBVersion\" Return=\"SUCCESS\" Time=\"702730000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\InprocServer32\\InprocServer32\" result=\"FAILURE\" Time=\"702810000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\InprocServer32\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%\" Time=\"702870000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\AppID\" result=\"FAILURE\" Time=\"702970000\" />\n",
      "<RegQueryValue hKey=\"e2\\CLSID\\{FF393560-C2A7-11CF-BFF4-444553540000}\\InprocServer32\\ThreadingModel\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"Apartment\" Time=\"703040000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Url History\\DaysToKeep\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"20\" Time=\"703460000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082820140829\\\" Time=\"703540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\\" Time=\"703580000\" />\n",
      "<RegCreateKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\" Return=\"SUCCESS\" Time=\"703610000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Return=\"SUCCESS\" Time=\"703650000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePrefix\" type=\"REG_SZ\" data=\":2014100320141004:\" Return=\"SUCCESS\" Time=\"703660000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheLimit\" type=\"REG_DWORD\" data=\"8192\" Return=\"SUCCESS\" Time=\"703670000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheOptions\" type=\"REG_DWORD\" data=\"11\" Return=\"SUCCESS\" Time=\"703670000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheRepair\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"703700000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082820140829\\\" Time=\"703710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014082820140829:\" Time=\"703720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"703720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"703730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheRepair\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"703750000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\\" Time=\"703750000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014082920140830:\" Time=\"703770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"703770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"703770000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheRepair\" result=\"FAILURE\" Time=\"703800000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Time=\"703800000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Return=\"SUCCESS\" Time=\"703840000\" />\n",
      "<RegSetValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheRepair\" type=\"REG_DWORD\" data=\"0\" Return=\"SUCCESS\" Time=\"703840000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014100320141004:\" Time=\"703870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"703870000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"703870000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"703930000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"703930000\" />\n",
      "<RegDeleteKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082820140829\" Return=\"SUCCESS\" Time=\"704100000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\\" Time=\"704150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014082920140830:\" Time=\"704160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"704170000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Time=\"704190000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014100320141004:\" Time=\"704200000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"704200000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014082820140829\\index.dat\" Return=\"SUCCESS\" Time=\"704280000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014082820140829\\index.dat\" Return=\"SUCCESS\" Time=\"704280000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704350000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704350000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704390000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704390000\" />\n",
      "<RegDeleteKey hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014082920140830\" Return=\"SUCCESS\" Time=\"704440000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Time=\"704470000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014100320141004:\" Time=\"704490000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"704490000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\index.dat\" Return=\"SUCCESS\" Time=\"704580000\" />\n",
      "<DeleteFile fileName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014082920140830\\index.dat\" Return=\"SUCCESS\" Time=\"704580000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704650000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704650000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704690000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"704690000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheRepair\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"0\" Time=\"704720000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePath\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"%USERPROFILE%\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\\" Time=\"704730000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CachePrefix\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\":2014100320141004:\" Time=\"704740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheLimit\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"8192\" Time=\"704740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\5.0\\Cache\\Extensible Cache\\MSHist012014100320141004\\CacheOptions\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"11\" Time=\"704740000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\Url History\\DaysToKeep\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"20\" Time=\"704790000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705820000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705820000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705840000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705850000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705910000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\History\\History.IE5\\MSHist012014100320141004\\index.dat\" desiredAccess=\"GENERIC_READ GENERIC_WRITE\" creationDisposition=\"OPEN_ALWAYS\" Return=\"SUCCESS\" Time=\"705910000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\WantsFORDISPLAY\" result=\"FAILURE\" Time=\"706080000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\Attributes\" result=\"FAILURE\" Time=\"706140000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\CallForAttributes\" result=\"FAILURE\" Time=\"706160000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\NonEnum\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\" result=\"FAILURE\" Time=\"706180000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\ShellFolder\\HideFolderVerbs\" result=\"FAILURE\" Time=\"706260000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\LocalizedString\" Return=\"SUCCESS\" type=\"REG_EXPAND_SZ\" data=\"@\" Time=\"706320000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\ShellNoRoam\\MUICache\\@C:\\WINDOWS\\system32\\SHELL32.dll,-9216\" Return=\"SUCCESS\" type=\"REG_SZ\" data=\"My Computer\" Time=\"706360000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706440000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706440000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706570000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706570000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706580000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706590000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706690000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706690000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706710000\" />\n",
      "<OpenProcess desiredAccess=\"PROCESS_DUP_HANDLE\" dwProcessId=\"1896\" Return=\"SUCCESS\" procName=\"explorer.exe\" Time=\"706710000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CLASSES_ROOT\\http\\ShellFolder\" result=\"FAILURE\" Time=\"707150000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\IEHardenWarnOnNav\" result=\"FAILURE\" Time=\"707540000\" />\n",
      "<RegQueryValue hKey=\"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\IEHardenWarnOnNav\" result=\"FAILURE\" Time=\"707550000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"708110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"708110000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"708130000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"708360000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main\\Enable_MyPics_Hoverbar\" result=\"FAILURE\" Time=\"708440000\" />\n",
      "<LoadLibrary lpFileName=\"USER32.DLL\" Return=\"SUCCESS\" Time=\"708450000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"708510000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\IntranetName\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"734420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProxyBypass\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"734420000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\\\ProtocolDefaults\\\\http\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"3\" Time=\"734430000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"734650000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableAutodial\" result=\"FAILURE\" Time=\"734810000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\{A8A88C49-5EB2-4990-A1A2-0876022C854F}\" Return=\"SUCCESS\" type=\"REG_BINARY\" data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ime=\"735880000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\CLY7SXM7\\3e64aa012a[1].setToken\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"739210000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\CLY7SXM7\\3e64aa012a[1].setToken\" desiredAccess=\"GENERIC_WRITE\" creationDisposition=\"CREATE_NEW\" Return=\"SUCCESS\" Time=\"739210000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\CLY7SXM7\\3e64aa012a[1].setToken\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"739400000\" />\n",
      "<CreateFile hName=\"C:\\Documents and Settings\\ants\\Local Settings\\Temporary Internet Files\\Content.IE5\\CLY7SXM7\\3e64aa012a[1].setToken\" desiredAccess=\"GENERIC_READ\" creationDisposition=\"OPEN_EXISTING\" Return=\"SUCCESS\" Time=\"739400000\" />\n",
      "<RegQueryValue hKey=\"HKEY_CURRENT_USER\\Software\\Microsoft\\windows\\CurrentVersion\\Internet Settings\\PrivDiscUiShown\" Return=\"SUCCESS\" type=\"REG_DWORD\" data=\"1\" Time=\"741270000\" />\n",
      "</Execution>\n",
      "</Profile>\n"
     ]
    }
   ],
   "source": [
    "# Test\n",
    "\n",
    "# print last hl3x\n",
    "hl3x.printXml()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 5,
   "metadata": {
    "collapsed": true
   },
   "outputs": [],
   "source": [
    "# output"
   ]
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.0"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}