locked
Intermittent error on ASP.NET app. Related to IIS and DefaultAppPool RRS feed

  • Question

  • User1872364149 posted

    Hi all, hope in your help.

    I have a very bizarre intermittent problem that occurs with some ASP.NET 4 (C#) application code .

    The error on Event Viewer System is:

        Event Type:	Warning
        Event Source:	W3SVC
        Event Category:	None
        Event ID:	1011
        Date:		25/08/2014
        Time:		14.28.19
        User:		N/A
        Computer:	12345678
        Description:
        A process serving application pool 'DefaultAppPool' suffered a fatal 
        communication error with the World Wide Web Publishing Service. The 
        process id was '1860'.

    I have read this article http://support.microsoft.com/kb/885654 and I have monitored the w3wp.exe process on Process Monitor http://technet.microsoft.com/it-it/sysinternals/bb896645.aspx.

    The bizarre intermittent problem that occurs when this sequence is activated.

    How to do solve this ?

    Any help would be appreciated.

        Time of Day,"Process Name","PID","Operation","Path","Result","Detail","User"
        14.28.19,2485741,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2486492,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2487233,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2487464,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2487878,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2489484,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2489621,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,2490272,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4553146,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4553883,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4554632,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4554769,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4555180,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4556781,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4556915,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4557560,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4570685,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4571366,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4571942,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4572076,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4572417,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4573738,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4573872,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4574436,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4591039,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4591715,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4592282,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4592416,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4592749,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4594084,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4594215,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4594763,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4668543,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4669286,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4670954,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4671102,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4671502,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4673024,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4673158,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\NETWORK SERVICE"
        14.28.19,4673770,"w3wp.exe","1860","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\NETWORK SERVICE"
    Tuesday, August 26, 2014 3:41 AM

Answers

  • User-166373564 posted

    Hi,

    Could you give some explanation about your application? I think it will be helpful for us to troubleshoot.

    Please let me know if there is anything that I can do to help.

    Best regards,

    Angie

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Friday, August 29, 2014 8:07 AM

All replies

  • User1872364149 posted

    Crash today:

    Event Type:	Information
    Event Source:	Application Popup
    Event Category:	None
    Event ID:	26
    Date:		26/08/2014
    Time:		9.41.42
    User:		N/A
    Computer:	12345678
    Description:
    Application popup: w3wp.exe - Application Error : The exception unknown software exception (0xe0434352) occurred in the application at location 0x77e4bee7.
    
    
    Time of Day,"Process Name","PID","Operation","Path","Result","Detail","User"
    9.41.42,0932082,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,0932862,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0933596,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,0933739,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\SYSTEM"
    9.41.42,0934163,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0935993,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0936127,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,0936854,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0983337,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,0984103,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0984787,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,0984924,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\SYSTEM"
    9.41.42,0985310,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0987095,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,0987226,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,0987883,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\index80.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1043323,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,1044088,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1044792,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1044940,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\SYSTEM"
    9.41.42,1045337,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1047007,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1047141,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1047787,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1165863,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\w3wp.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,1308764,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\msvcrt.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1312041,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\Secur32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1312622,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\RPCRT4.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1313594,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\ADVAPI32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1314617,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LeakTrack","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1316368,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1317380,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\GDI32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1317838,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\USER32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1318612,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Error Message Instrument\","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1319564,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Error Message Instrument","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1320481,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles","NAME NOT FOUND","Length: 20","NT AUTHORITY\SYSTEM"
    9.41.42,1324040,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32\w3wp","NAME NOT FOUND","Length: 172","NT AUTHORITY\SYSTEM"
    9.41.42,1325825,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility\w3wp","NAME NOT FOUND","Length: 172","NT AUTHORITY\SYSTEM"
    9.41.42,1330909,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\ole32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1334454,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\PageAllocatorUseSystemHeap","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1337935,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\PageAllocatorSystemHeapIsPrivate","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1339648,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\OLE\Tracing","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1341522,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\WMI\Security","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1342411,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\DF8480A1-7492-4F45-AB78-1084642581FB","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,1343539,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\00000000-0000-0000-0000-000000000000","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,1349607,"w3wp.exe","3212","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Control\Session Manager","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1352306,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\RWLockResourceTimeOut","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1354080,"w3wp.exe","3212","RegQueryValue","HKCR\Interface\InterfaceHelperDisableAll","NAME NOT FOUND","Length: 0","NT AUTHORITY\SYSTEM"
    9.41.42,1354932,"w3wp.exe","3212","RegQueryValue","HKCR\Interface\InterfaceHelperDisableAllForOle32","NAME NOT FOUND","Length: 0","NT AUTHORITY\SYSTEM"
    9.41.42,1355304,"w3wp.exe","3212","RegQueryValue","HKCR\Interface\InterfaceHelperDisableTypeLib","NAME NOT FOUND","Length: 0","NT AUTHORITY\SYSTEM"
    9.41.42,1356899,"w3wp.exe","3212","RegQueryValue","HKCR\Interface\{00020400-0000-0000-C000-000000000046}\InterfaceHelperDisableAll","NAME NOT FOUND","Length: 0","NT AUTHORITY\SYSTEM"
    9.41.42,1357226,"w3wp.exe","3212","RegQueryValue","HKCR\Interface\{00020400-0000-0000-C000-000000000046}\InterfaceHelperDisableAllForOle32","NAME NOT FOUND","Length: 0","NT AUTHORITY\SYSTEM"
    9.41.42,1358678,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\MSASN1.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1359234,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\CRYPT32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1360240,"w3wp.exe","3212","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\crypt32\Performance","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1360679,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\crypt32\Performance","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1361533,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1366322,"w3wp.exe","3212","RegOpenKey","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1369476,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\IISUTIL.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1369979,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\IisUtil","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1370945,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\IisUtil","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1373823,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\ntdll.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1374214,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\kernel32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,1375932,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\iisw3adm\Parameters\WP","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1376424,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\iisw3adm\Parameters\WP","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1434612,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1435917,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\CoInitializeSecurityParam","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1445206,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Rpc\MaxRpcSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1449933,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,1450704,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1452148,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1452299,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\SYSTEM"
    9.41.42,1452699,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1454830,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1454975,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1455598,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1464711,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\w3wp.exe\RpcThreadPoolThrottle","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1465276,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\ComputerName","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1466382,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\Rpc","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1470226,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\MaximumAllowedAllocationSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,1475442,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\xpsp2res.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,1554304,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20\Software\Policies\Microsoft\Control Panel\Desktop","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1555851,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Nls\MUILanguages","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1557178,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\Nls\MUILanguages\0409","NAME NOT FOUND","Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,1561344,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\ComputerName","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1566459,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 256","NT AUTHORITY\SYSTEM"
    9.41.42,1567241,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1568699,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1568847,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 2","NT AUTHORITY\SYSTEM"
    9.41.42,1569255,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1571465,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1571605,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 64","NT AUTHORITY\SYSTEM"
    9.41.42,1572219,"w3wp.exe","4012","ReadFile","C:\WINDOWS\assembly\pubpol1.dat","END OF FILE","Offset: 0, Length: 512","NT AUTHORITY\SYSTEM"
    9.41.42,1583609,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\Rpc","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,1589127,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Lsa","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,1702658,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\WSOCK32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,2246953,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\WS2_32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,2427286,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\WS2HELP.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,3457484,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\HTTPAPI.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,3518788,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\strmfilt.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,4213253,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\IisRTL.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,4337149,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\IISMAP.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,4476734,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\OLEAUT32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4477326,"w3wp.exe","3212","RegOpenKey","HKLM\SOFTWARE\Microsoft\OLEAUT","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,4477631,"w3wp.exe","3212","RegOpenKey","HKLM\SOFTWARE\Microsoft\OLEAUT\UserEra","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,4477815,"w3wp.exe","3212","RegOpenKey","HKLM\SOFTWARE\Microsoft\OLEAUT","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,4478036,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\WS2HELP.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4478245,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\WS2_32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4499013,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\WSOCK32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4499429,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\W3TP.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4499770,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\W3CACHE.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4500024,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\SHLWAPI.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4500687,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\HTTPAPI.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4501097,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\w3dt.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4501340,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\strmfilt.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4501748,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\W3COMLOG.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4502072,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\IisRTL.DLL","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4502754,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4503329,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\FavorDBCS","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4524391,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\IISRTL","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4524617,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\IISRTL","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,4526112,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\LONSINT.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4526469,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4526916,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DebugFlags","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4527282,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\NETAPI32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4528235,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\wamreg.DLL","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4528813,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\IISMAP.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4529545,"w3wp.exe","3212","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4557311,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\MapperGuid","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4557792,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\w3core.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4558208,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\xpsp2res.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,4558543,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3core","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4558758,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3core","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,4559331,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\WMI\Security","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4559767,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\DF8480A1-7492-4F45-AB78-1084642581FB","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,4560124,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\00000000-0000-0000-0000-000000000000","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,4588871,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\WMI\Security","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4589346,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\DF8480A1-7492-4F45-AB78-1084642581FB","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,4589622,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\00000000-0000-0000-0000-000000000000","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,4718281,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\ComputerName","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4731802,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4732283,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\EnableTraceMethod","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4732434,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\LogErrorRequests","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4732574,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\LogSuccessfulRequests","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4801420,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4802001,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\LookasideCleanupInterval","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4820825,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\http\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4821297,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\HTTP\Parameters\EnableNonUTF8","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4821445,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\HTTP\Parameters\EnableDBCS","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4821772,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\http\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4822169,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\HTTP\Parameters\EnableNonUTF8","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4822306,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\HTTP\Parameters\EnableDBCS","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,4909870,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,4911708,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\0000000D","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5120425,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\00000004","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5135871,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001\AddressFamily","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5149615,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002\AddressFamily","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5165981,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003\AddressFamily","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5167260,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\Winsock2\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,5167735,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Ws2_32NumHandleBuckets","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5202471,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\CLBCatQ.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,5239800,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\COMRes.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,5292371,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\COMRes.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,5292742,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\VERSION.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,5331099,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\CLBCatQ.DLL","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,5332326,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\MinimumFreeMemPercentageToCreateProcess","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5332471,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Ole\MinimumFreeMemPercentageToCreateObject","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5335455,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\iisres.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,5394674,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5395588,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5395778,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5396549,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5449145,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5449360,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5449793,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5449969,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5450332,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5450508,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5450863,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5451042,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5451402,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5451576,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5464217,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5464412,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5464708,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5465320,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5466044,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\AppID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5466737,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\AppID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5476336,"w3wp.exe","3212","RegQueryValue","HKCR\AppID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}\DllSurrogate","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,5476797,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\AppID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5477973,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5508762,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\Interface\{00000134-0000-0000-C000-000000000046}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5509739,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,5510385,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6867739,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\Interface\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6868672,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6869317,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6921782,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6922427,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6922620,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6997021,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6997744,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6998392,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6998582,"w3wp.exe","3212","RegQueryValue","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,6999102,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6999281,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,6999655,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7034475,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7035263,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7035458,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7035830,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7036006,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7036372,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7036554,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7036838,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7063289,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7063468,"w3wp.exe","3212","RegQueryValue","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\AppID","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,7064680,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7065378,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7065557,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7092698,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7093388,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7094025,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7101559,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\ADMWPROX.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,7119919,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\ADMWPROX.DLL","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,7120709,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,7121243,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\FavorDBCS","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,7121556,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\IisUtil","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,7121757,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\IisUtil","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7123014,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\iisadmin\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,7123199,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\iisadmin\Parameters","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7136938,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Session Manager","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,7137410,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\Session Manager\SafeProcessSearchMode","NAME NOT FOUND","Length: 16","NT AUTHORITY\SYSTEM"
    9.41.42,7173381,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\rsaenh.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,7178250,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\rsaenh.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,7250380,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\rsaenh.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,7300422,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\PSAPI.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,7361888,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\PSAPI.DLL","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,7362198,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\rsaenh.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,7783263,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Cryptography\PrivKeyCacheMaxItems","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,7783422,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Cryptography\PrivKeyCachePurgeIntervalSeconds","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,7783565,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\Cryptography\PrivateKeyLifetimeSeconds","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,7817594,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,7817996,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Cryptography\DESHashSessionKeyBackward","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8111855,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3dt","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8112148,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3dt","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8112514,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8112998,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MaxConcurrency","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113154,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MaxPoolThreads","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113291,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadTimeout","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113428,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\PoolThreadLimit","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113570,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadPoolStartupThreadCount","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113710,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadPoolMaxCPU","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113850,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadPoolMaxContextSwitch","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8113989,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadPoolStartDelay","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8114129,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ThreadPoolExactThreadCount","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8145829,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Performance","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8146345,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Performance\RaiseExceptionOnOrphaning","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8146516,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Performance\ReceiveRequestsPending","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8146658,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Performance\DisableCopySend","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8147276,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\WMI\Security","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8147709,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\DF8480A1-7492-4F45-AB78-1084642581FB","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,8148075,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\00000000-0000-0000-0000-000000000000","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,8321823,"w3wp.exe","3212","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\MSVCR100_CLR0400.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,8347203,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\MSVCR100_CLR0400.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8348815,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\aspnet_filter.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8366019,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\ASP.NET\StopBinFiltering","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8366169,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\ASP.NET\StopProtectedDirectoryFiltering","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8366695,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\ASP.NET\4.0.30319.0\EnableExtensionlessUrls","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8373458,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8374017,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ObjectCacheTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8374170,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\UriCacheActivityPeriod","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8384390,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8384853,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MaxDepthDots","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8398489,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8399031,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8408393,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\LastPriorityUPNLogon","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8408546,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\UserTokenTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8409477,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8409893,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DigestContextCacheTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8410558,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8410957,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DigestPartialContextCacheTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8411901,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8412301,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DisableMemoryCache","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8412441,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MaxCachedFileSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8430426,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MemCacheSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8430574,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\MaxOpenFiles","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8430714,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ObjectCacheTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8430862,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\ActivityPeriod","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8431002,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DoDirMonitoringForUnc","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8431141,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\FileAttributeCheckThreshold","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8431281,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DisableCachedResponseOnUNCAccessFailure","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8432927,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8433432,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\MetadataCacheTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8433904,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\inetinfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8445786,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DataSetCacheSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8446504,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\http\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8447007,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\HTTP\Parameters\UriEnableCache","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8447515,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8447906,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\ExtraUlCacheInvalidationEntries","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8449250,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8449649,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\IgnoreAppPoolForCustomErrors","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8461005,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8461455,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\TraceFile","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8469937,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8470406,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0\Auth132","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8470951,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8482589,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\EnableKerbAuthPersist","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8530190,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8530861,"w3wp.exe","3212","RegOpenKey","HKLM\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8531364,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DnsMaxThread","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8532727,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DnsCacheSizeInK","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8532867,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\DnsTTLInSeconds","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8533822,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8534269,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\MaximumRangeAllowed","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8539474,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\ws03res.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,8578082,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\w3isapi.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8578585,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3isapi","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8578828,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters\w3isapi","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8579381,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\WMI\Security","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8616863,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\DF8480A1-7492-4F45-AB78-1084642581FB","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,8617238,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Control\WMI\Security\00000000-0000-0000-0000-000000000000","NAME NOT FOUND","Length: 130","NT AUTHORITY\SYSTEM"
    9.41.42,8619372,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8619844,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\DontFlushCachedIsapiResponses","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8620182,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8632483,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\ForwardServerEnvironmentBlock","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8632631,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\MaxConcurrentCgisExecuting","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8633634,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8634086,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\InetInfo\Parameters\RequestTimeoutBreak","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8703120,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\mswsock.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8708394,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\DNSAPI.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,8781669,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\DNSAPI.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8782295,"w3wp.exe","3212","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8782851,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8783259,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8783440,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DNS","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8783602,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DNS","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8783817,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryAdapterName","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8783982,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableAdapterDomainName","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8784167,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseDomainNameDevolution","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8786583,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8786751,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\PrioritizeRecordData","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8786907,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787050,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\AllowUnqualifiedQuery","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787201,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AppendToMultiLabelName","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787349,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenBadTlds","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787491,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ScreenUnreachableServers","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787634,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\FilterClusterIp","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787776,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\WaitForNameErrorOnAll","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8787916,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseEdns","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8788055,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\QueryIpMatching","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8788195,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UseHostsFile","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8789757,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationEnabled","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8789910,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableDynamicUpdate","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790064,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterPrimaryName","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790204,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterAdapterName","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790349,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\EnableAdapterDomainNameRegistration","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790505,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterReverseLookup","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790648,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableReverseAddressRegistrations","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790802,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegisterWanAdapters","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8790944,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DisableWanDynamicUpdate","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8791098,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationTtl","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8791243,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationTTL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8791397,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationRefreshInterval","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794095,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DefaultRegistrationRefreshInterval","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794269,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\RegistrationMaxAddressCount","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794428,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\MaxNumberOfAddressesToRegister","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794581,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794724,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\UpdateSecurityLevel","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8794875,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\UpdateTopLevelDomainZones","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795017,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795162,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DnsTest","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795305,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795447,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCacheTtl","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795587,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxNegativeCacheTtl","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8795727,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\AdapterTimeoutLimit","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8816394,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\ServerPriorityTimeLimit","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8816587,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MaxCachedSockets","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8816732,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastListenLevel","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8816875,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\MulticastSendLevel","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8817587,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DnsQueryTimeouts","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8817732,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQueryTimeouts","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8817892,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Dnscache\Parameters\DnsQuickQueryTimeouts","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8818034,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\DnsQuickQueryTimeouts","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8830966,"w3wp.exe","3212","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8831500,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8831882,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8832676,"w3wp.exe","3212","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8833044,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8833396,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8834126,"w3wp.exe","3212","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8834492,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8834841,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8835000,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\System\DNSClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8866808,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\WLDAP32.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8867342,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\LDAP","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8895809,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\winrnr.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,8901726,"w3wp.exe","3212","RegCreateKey","HKLM\System\CurrentControlSet\Services\Tcpip\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8902240,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\DnsCache\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8902693,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Policies\Microsoft\Windows NT\DnsClient","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,8919997,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,8921100,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\AutodialDLL","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,8939234,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\rasadhlp.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,9175549,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\rasadhlp.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,9177770,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Services\w3svc\Parameters","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,9178359,"w3wp.exe","3212","RegQueryValue","HKLM\System\CurrentControlSet\Services\W3SVC\Parameters\SendRawDataBufferSize","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,9221029,"w3wp.exe","3212","RegOpenKey","HKLM\System\CurrentControlSet\Control\ComputerName","REPARSE","","NT AUTHORITY\SYSTEM"
    9.41.42,9235358,"w3wp.exe","3212","RegOpenKey","HKLM\Software\Microsoft\Cryptography\Offload","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9331560,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\gzip.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,9404896,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9405855,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9406547,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9418446,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9419060,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9419253,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9431724,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9432361,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9432973,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9448547,"w3wp.exe","3212","CreateFile","C:\WINDOWS\system32\inetsrv\msi.dll","NAME NOT FOUND","Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a","NT AUTHORITY\SYSTEM"
    9.41.42,9497785,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\msi.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,9499830,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Policies\Microsoft\windows\Installer\Debug","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,9500674,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9500881,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9501263,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9501462,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9501825,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9501998,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9502361,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9502540,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9502831,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9503415,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9503585,"w3wp.exe","3212","RegQueryValue","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\AppID","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,9504596,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9505286,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9505468,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9505943,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9506504,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9507097,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9536782,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9537707,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9538355,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9544844,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\Interface\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9545727,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9546361,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\Interface\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\ProxyStubClsid32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9560399,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9561056,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9561243,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9573619,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9574270,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9574938,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9575125,"w3wp.exe","3212","RegQueryValue","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32\InprocServer32","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,9575661,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9575843,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9576223,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9586500,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9587238,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9587422,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocHandler32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9587794,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9587967,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9588336,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9588518,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\LocalServer","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9599807,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9600452,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9600628,"w3wp.exe","3212","RegQueryValue","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\AppID","NAME NOT FOUND","Length: 144","NT AUTHORITY\SYSTEM"
    9.41.42,9601595,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9602282,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9634487,"w3wp.exe","3212","RegOpenKey","HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\TreatAs","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9635060,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9635727,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9636342,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_Classes\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}\InprocServer32","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9698283,"w3wp.exe","3212","RegQueryValue","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\fpexedll.dll","NAME NOT FOUND","Length: 1.024","NT AUTHORITY\SYSTEM"
    9.41.42,9729399,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    9.41.42,9758492,"w3wp.exe","3212","RegOpenKey","HKU\S-1-5-20_CLASSES\CLSID\{A9E69610-B80D-11D0-B9B9-00A0C922E750}","NAME NOT FOUND","","NT AUTHORITY\SYSTEM"
    



    Tuesday, August 26, 2014 6:17 AM
  • User-166373564 posted

    Hi,

    Could you give some explanation about your application? I think it will be helpful for us to troubleshoot.

    Please let me know if there is anything that I can do to help.

    Best regards,

    Angie

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Friday, August 29, 2014 8:07 AM
  • User1872364149 posted

    Hi,

    Could you give some explanation about your application? I think it will be helpful for us to troubleshoot.

    Please let me know if there is anything that I can do to help.

    Best regards,

    Angie

    Hi, thank you for your interest.

    What information you want to know ? I will be happy to share.

    The application is a website with GridView populated with DropDowList.

    Saturday, August 30, 2014 9:07 AM