"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"10:57:12.0112265 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0112598 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0112807 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0112947 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0113118 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0132620 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0132966 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0133182 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0133316 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0133489 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0147971 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0148278 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0148480 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0148614 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0148779 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0163596 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0163906 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0164110 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0164244 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0164406 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0275837 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0276309 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0276560 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0276839 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0277060 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0295018 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0295350 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0295560 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0295697 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0295873 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0310087 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0310397 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0310601 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0310735 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0310900 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0394466 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0395005 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0395240 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0395394 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0395620 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0441997 AM","svchost.exe","960","RegOpenKey","HKLM","SUCCESS","Desired Access: Maximum Allowed, Granted Access: All Access"
"10:57:12.0458608 AM","svchost.exe","960","RegOpenKey","HKLM\system\Setup","SUCCESS","Desired Access: Read"
"10:57:12.0458857 AM","svchost.exe","960","RegCloseKey","HKLM","SUCCESS",""
"10:57:12.0459008 AM","svchost.exe","960","RegQueryValue","HKLM\SYSTEM\Setup\SystemSetupInProgress","SUCCESS","Type: REG_DWORD, Length: 4, Data: 0"
"10:57:12.0459217 AM","svchost.exe","960","RegCloseKey","HKLM\SYSTEM\Setup","SUCCESS",""
"10:57:12.0781434 AM","iexplore.exe","5784","RegOpenKey","HKLM\Software\Microsoft\Internet Explorer","SUCCESS","Desired Access: Query Value"
"10:57:12.0781873 AM","iexplore.exe","5784","RegQueryValue","HKLM\SOFTWARE\Microsoft\Internet Explorer\Version","SUCCESS","Type: REG_SZ, Length: 32, Data: 9.11.9600.18837"
"10:57:12.0782124 AM","iexplore.exe","5784","RegQueryValue","HKLM\SOFTWARE\Microsoft\Internet Explorer\Version","SUCCESS","Type: REG_SZ, Length: 32, Data: 9.11.9600.18837"
"10:57:12.0782278 AM","iexplore.exe","5784","RegCloseKey","HKLM\SOFTWARE\Microsoft\Internet Explorer","SUCCESS",""