序号-时间 进程名 进程ID 动作 路径 参数 结果 1-06:07:53.1998292 System 4 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x000F003F 0x00000000 [操作成功完成。 ] 2-06:07:53.1998292 System 4 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500\\Device\HarddiskVolume3\Program Files\PowerShell\7\pwsh.exe type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3-06:07:53.1998292 System 4 REG_setval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500\\Device\HarddiskVolume3\Program Files\PowerShell\7\pwsh.exe type:0x00000003 datalen:0x00000018 data:'00000010: 54 40 28 0D 14 13 DD 01 00 00 00 00 00 00 00 00 ' 0x00000000 [操作成功完成。 ] 4-06:07:53.1998292 System 4 REG_setval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500\SequenceNumber type:0x00000004 datalen:0x00000004 data:'00000010: 4D 00 00 00 ' 0x00000000 [操作成功完成。 ] 5-06:07:53.2788137 WindowsTerminal.exe 5332 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize access:0x00000001 0x00000000 [操作成功完成。 ] 6-06:07:53.2788137 WindowsTerminal.exe 5332 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7-06:07:53.2788137 WindowsTerminal.exe 5332 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize access:0x00000001 0x00000000 [操作成功完成。 ] 8-06:07:53.2788137 WindowsTerminal.exe 5332 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 9-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache access:0x00020019 0x00000000 [操作成功完成。 ] 10-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Metadata access:0x00020019 0x00000000 [操作成功完成。 ] 11-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Metadata\Revision type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 12-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName access:0x00020019 0x00000000 [操作成功完成。 ] 13-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName\MicrosoftWindows.Client.CBS_cw5n1h2txyewy access:0x00020019 0x00000000 [操作成功完成。 ] 14-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid access:0x00020019 0x00000000 [操作成功完成。 ] 15-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00020019 0x00000000 [操作成功完成。 ] 16-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data access:0x00020019 0x00000000 [操作成功完成。 ] 17-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data\2 access:0x00020019 0x00000000 [操作成功完成。 ] 18-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data\2\UserSid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 19-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFamily access:0x00020019 0x00000000 [操作成功完成。 ] 20-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFamily\22 access:0x00020019 0x00000000 [操作成功完成。 ] 21-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data access:0x00020019 0x00000000 [操作成功完成。 ] 22-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014 access:0x00020019 0x00000000 [操作成功完成。 ] 23-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014\PackageFullName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 24-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014\PackageType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 25-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\UserAndPackage access:0x00020019 0x00000000 [操作成功完成。 ] 26-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\UserAndPackage\2^1014 access:0x00020019 0x00000000 [操作成功完成。 ] 27-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache access:0x00020019 0x00000000 [操作成功完成。 ] 28-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Metadata access:0x00020019 0x00000000 [操作成功完成。 ] 29-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Metadata\Revision type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 30-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName access:0x00020019 0x00000000 [操作成功完成。 ] 31-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageFamily\Index\PackageFamilyName\MicrosoftWindows.Client.CBS_cw5n1h2txyewy access:0x00020019 0x00000000 [操作成功完成。 ] 32-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid access:0x00020019 0x00000000 [操作成功完成。 ] 33-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Index\UserSid\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00020019 0x00000000 [操作成功完成。 ] 34-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data access:0x00020019 0x00000000 [操作成功完成。 ] 35-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data\2 access:0x00020019 0x00000000 [操作成功完成。 ] 36-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\User\Data\2\UserSid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 37-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFamily access:0x00020019 0x00000000 [操作成功完成。 ] 38-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFamily\22 access:0x00020019 0x00000000 [操作成功完成。 ] 39-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data access:0x00020019 0x00000000 [操作成功完成。 ] 40-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014 access:0x00020019 0x00000000 [操作成功完成。 ] 41-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014\PackageFullName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 42-06:07:53.2946180 sihost.exe 8272 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Data\1014\PackageType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 43-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\UserAndPackage access:0x00020019 0x00000000 [操作成功完成。 ] 44-06:07:53.2946180 sihost.exe 8272 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\PackageUser\Index\UserAndPackage\2^1014 access:0x00020019 0x00000000 [操作成功完成。 ] 45-06:07:53.3737109 svchost.exe 2932 FILE_truncate C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx eof:0x00101000 0x00000000 [操作成功完成。 ] 46-06:07:53.3737109 svchost.exe 2932 FILE_truncate C:\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx eof:0x00101000 0x00000000 [操作成功完成。 ] 47-06:07:53.3895061 pwsh.exe 2848 FILE_write C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt offset:0x0000ECDD datalen:0x00000010 0x00000000 [操作成功完成。 ] 48-06:07:53.3895061 pwsh.exe 2848 FILE_modified C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt - 0x00000000 [操作成功完成。 ] 49-06:07:53.3953896 pwsh.exe 2848 FILE_readdir C:\Program Files\PowerShell\7 filter:* 0x00000000 [操作成功完成。 ] 50-06:07:53.3953896 pwsh.exe 2848 FILE_readdir C:\Program Files\Common Files\Oracle\Java\javapath_target_3739343 filter:* 0x00000000 [操作成功完成。 ] 51-06:07:53.3953896 pwsh.exe 2848 FILE_readdir C:\Program Files (x86)\Common Files\Oracle\Java\java8path_target_13350000 filter:* 0x00000000 [操作成功完成。 ] 52-06:07:53.3953896 pwsh.exe 2848 FILE_readdir C:\Windows\System32 filter:* 0x00000000 [操作成功完成。 ] 53-06:07:53.3993932 pwsh.exe 2848 FILE_open C:\Windows\System32\net.exe access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 54-06:07:53.4033981 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 55-06:07:53.4033981 pwsh.exe 2848 FILE_open C:\Windows\System32\net.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 56-06:07:53.4051383 pwsh.exe 2848 FILE_read C:\Program Files\PowerShell\7\pwsh.exe offset:0x00000000 datalen:0x00048138 0x00000000 [操作成功完成。 ] 57-06:07:53.4091428 pwsh.exe 2848 FILE_read C:\Windows\System32\net.exe offset:0x00000000 datalen:0x00014000 0x00000000 [操作成功完成。 ] 58-06:07:53.4091428 pwsh.exe 2848 FILE_read C:\Windows\System32\net.exe offset:0x00000000 datalen:0x00014000 0x00000000 [操作成功完成。 ] 59-06:07:53.4091428 pwsh.exe 2848 PROC_exec C:\Windows\System32\net.exe target_pid:9384 cmdline:"C:\Windows\system32\net.exe" start dhcp 0x00000000 [操作成功完成。 ] 60-06:07:53.4091428 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x000F003F 0x00000000 [操作成功完成。 ] 61-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 62-06:07:53.4208984 pwsh.exe 2848 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\AuthenticodeEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 63-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 64-06:07:53.4208984 pwsh.exe 2848 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 65-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers access:0x00000001 0x00000000 [操作成功完成。 ] 66-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 67-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 68-06:07:53.4208984 pwsh.exe 2848 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 69-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 70-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 71-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 72-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 73-06:07:53.4208984 pwsh.exe 2848 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 74-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 75-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 76-06:07:53.4208984 csrss.exe 1164 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 77-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 78-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 79-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 80-06:07:53.4208984 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 81-06:07:53.4208984 csrss.exe 1164 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 82-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 83-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 84-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 85-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 86-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 87-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 88-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 89-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 90-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 91-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 92-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 93-06:07:53.4208984 net.exe 9384 EXEC_create C:\Windows\System32\net.exe parent_pid:2848 image_base:0x00007FF7EE010000 image_size:0x0001F000 cmdline:"C:\Windows\system32\net.exe" start dhcp 0x00000000 [操作成功完成。 ] 94-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 95-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 96-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 97-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 98-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 99-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\advapi32.dll base:0x00007FFAC3960000 size:0x000BB000 0x00000000 [操作成功完成。 ] 100-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\mpr.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 101-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 102-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 103-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\wkscli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 104-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\sspicli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 105-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\mpr.dll base:0x00007FFAB4120000 size:0x00021000 0x00000000 [操作成功完成。 ] 106-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\netutils.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 107-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\wkscli.dll base:0x00007FFAB9BE0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 108-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\samcli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 109-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\sspicli.dll base:0x00007FFAC1490000 size:0x00049000 0x00000000 [操作成功完成。 ] 110-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\netutils.dll base:0x00007FFAC0BF0000 size:0x0000D000 0x00000000 [操作成功完成。 ] 111-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 112-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\srvcli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 113-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x000001539FB50000 size:0x0014B000 0x00000000 [操作成功完成。 ] 114-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 115-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\samcli.dll base:0x00007FFAC0BA0000 size:0x0001C000 0x00000000 [操作成功完成。 ] 116-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\srvcli.dll base:0x00007FFAB9C00000 size:0x00029000 0x00000000 [操作成功完成。 ] 117-06:07:53.4208984 net.exe 9384 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 118-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 119-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 120-06:07:53.4208984 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 121-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 122-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\NetworkProvider\HwOrder access:0x00020019 0x00000000 [操作成功完成。 ] 123-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\NetworkProvider\ProviderOrder access:0x00020019 0x00000000 [操作成功完成。 ] 124-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 125-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 126-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 127-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 128-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 129-06:07:53.4208984 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 130-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 131-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 132-06:07:53.4208984 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 133-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 134-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\MuiCached access:0x00020019 0x00000000 [操作成功完成。 ] 135-06:07:53.4208984 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\MuiCached\MachinePreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 136-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 137-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 138-06:07:53.4208984 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 139-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 140-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 141-06:07:53.4208984 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 142-06:07:53.4208984 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 143-06:07:53.4208984 net.exe 9384 FILE_open C:\Windows\System32\net1.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 144-06:07:53.4208984 net.exe 9384 FILE_read C:\Windows\System32\net.exe offset:0x00000000 datalen:0x00014000 0x00000000 [操作成功完成。 ] 145-06:07:53.4208984 net.exe 9384 FILE_read C:\Windows\System32\net1.exe offset:0x00000000 datalen:0x0002D000 0x00000000 [操作成功完成。 ] 146-06:07:53.4208984 net.exe 9384 FILE_read C:\Windows\System32\net1.exe offset:0x00000000 datalen:0x0002D000 0x00000000 [操作成功完成。 ] 147-06:07:53.4368461 net.exe 9384 PROC_exec C:\Windows\System32\net1.exe target_pid:6092 cmdline:C:\Windows\system32\net1 start dhcp 0x00000000 [操作成功完成。 ] 148-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x000F003F 0x00000000 [操作成功完成。 ] 149-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 150-06:07:53.4368461 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\AuthenticodeEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 151-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 152-06:07:53.4368461 net.exe 9384 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 153-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers access:0x00000001 0x00000000 [操作成功完成。 ] 154-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 155-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 156-06:07:53.4368461 net.exe 9384 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 157-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 158-06:07:53.4368461 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 159-06:07:53.4394482 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 160-06:07:53.4394482 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 161-06:07:53.4394482 net.exe 9384 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 162-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 163-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 164-06:07:53.4394482 csrss.exe 1164 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 165-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 166-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 167-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 168-06:07:53.4394482 csrss.exe 1164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 169-06:07:53.4394482 csrss.exe 1164 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 170-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 171-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 172-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 173-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 174-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 175-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 176-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 177-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 178-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 179-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 180-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 181-06:07:53.4407080 net1.exe 6092 EXEC_create C:\Windows\System32\net1.exe parent_pid:9384 image_base:0x00007FF67EE40000 image_size:0x00039000 cmdline:C:\Windows\system32\net1 start dhcp 0x00000000 [操作成功完成。 ] 182-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 183-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 184-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 185-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 186-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 187-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 188-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\samcli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 189-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\dsrole.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 190-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\bcrypt.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 191-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\netutils.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 192-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\dsrole.dll base:0x00007FFAC0F60000 size:0x0000B000 0x00000000 [操作成功完成。 ] 193-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\samcli.dll base:0x00007FFAC0BA0000 size:0x0001C000 0x00000000 [操作成功完成。 ] 194-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\bcrypt.dll base:0x00007FFAC2350000 size:0x0002A000 0x00000000 [操作成功完成。 ] 195-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\netutils.dll base:0x00007FFAC0BF0000 size:0x0000D000 0x00000000 [操作成功完成。 ] 196-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 197-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x000001EB91BA0000 size:0x0014B000 0x00000000 [操作成功完成。 ] 198-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\srvcli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 199-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\logoncli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 200-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 201-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\wkscli.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 202-06:07:53.4407080 net1.exe 6092 FILE_open C:\Windows\System32\cryptbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 203-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\logoncli.dll base:0x00007FFAC1520000 size:0x00047000 0x00000000 [操作成功完成。 ] 204-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\srvcli.dll base:0x00007FFAB9C00000 size:0x00029000 0x00000000 [操作成功完成。 ] 205-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\wkscli.dll base:0x00007FFAB9BE0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 206-06:07:53.4407080 net1.exe 6092 EXEC_module_load C:\Windows\System32\cryptbase.dll base:0x00007FFAC1A60000 size:0x0000C000 0x00000000 [操作成功完成。 ] 207-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 208-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 209-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 210-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 211-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 212-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00000001 0x00000000 [操作成功完成。 ] 213-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 214-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 215-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 216-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 217-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 218-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 219-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 220-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 221-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 222-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 223-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\MuiCached access:0x00020019 0x00000000 [操作成功完成。 ] 224-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\MuiCached\MachinePreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 225-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 226-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 227-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 228-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 229-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 230-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 231-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 232-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 233-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 234-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 235-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 236-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 237-06:07:53.4407080 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 238-06:07:53.4407080 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 239-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 240-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 241-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 242-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 243-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 244-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 245-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 246-06:07:53.4407080 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 247-06:07:53.4407080 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 248-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 249-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 250-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 251-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 252-06:07:53.4407080 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 253-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 254-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 255-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 256-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 257-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 258-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 259-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 260-06:07:53.4407080 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 261-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 262-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 263-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 264-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 265-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 266-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 267-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 268-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 269-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 270-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 271-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 272-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 273-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 274-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 275-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 276-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 277-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 278-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 279-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 280-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 281-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 282-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 283-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 284-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 285-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 286-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 287-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 288-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 289-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 290-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 291-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 292-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 293-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 294-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 295-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 296-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 297-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 298-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 299-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 300-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 301-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 302-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 303-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 304-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 305-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 306-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 307-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 308-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 309-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 310-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 311-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 312-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 313-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 314-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 315-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 316-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 317-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 318-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 319-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 320-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 321-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 322-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 323-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 324-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 325-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 326-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 327-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 328-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 329-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 330-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 331-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 332-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 333-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 334-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 335-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 336-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 337-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 338-06:07:53.4407080 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 339-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 340-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 341-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 342-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 343-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 344-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 345-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 346-06:07:53.4407080 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 347-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 348-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 349-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 350-06:07:53.4407080 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 351-06:07:53.4407080 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 352-06:07:53.4407080 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 353-06:07:53.4529301 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 354-06:07:53.4529301 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 355-06:07:53.4529301 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4788 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 356-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 357-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 358-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 359-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 360-06:07:53.4529301 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 361-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 362-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 363-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 364-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 365-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 366-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 367-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 368-06:07:53.4529301 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 369-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 370-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 371-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 372-06:07:53.4529301 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 373-06:07:53.4529301 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 374-06:07:53.4529301 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 375-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 376-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 377-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 378-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 379-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 380-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 381-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 382-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 383-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 384-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 385-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 386-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 387-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 388-06:07:53.4529301 svchost.exe 4788 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 389-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 390-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 391-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 392-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 393-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 394-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 395-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 396-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 397-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 398-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 399-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 400-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 401-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 402-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 403-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 404-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 405-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 406-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 407-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 408-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 409-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 410-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 411-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 412-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 413-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 414-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 415-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 416-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 417-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 418-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 419-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 420-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 421-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 422-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 423-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 424-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 425-06:07:53.4529301 svchost.exe 4788 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 426-06:07:53.4529301 svchost.exe 4788 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 427-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 428-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 429-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 430-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 431-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 432-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 433-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 434-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 435-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 436-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 437-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 438-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 439-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 440-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 441-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 442-06:07:53.4529301 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 443-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 444-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 445-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 446-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 447-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 448-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 449-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 450-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 451-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 452-06:07:53.4529301 svchost.exe 4788 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 453-06:07:53.4529301 svchost.exe 4788 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 454-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 455-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 456-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 457-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 458-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 459-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 460-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 461-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 462-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 463-06:07:53.4529301 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 464-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 465-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 466-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 467-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 468-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 469-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 470-06:07:53.4689358 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 471-06:07:53.4689358 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 472-06:07:53.4689358 svchost.exe 4788 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 473-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 474-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 475-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 476-06:07:53.4689358 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 477-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 478-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 479-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 480-06:07:53.4689358 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 481-06:07:53.4689358 svchost.exe 4788 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 482-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 483-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 484-06:07:53.4708469 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 485-06:07:53.4708469 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 486-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 487-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 488-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 489-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 490-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 491-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 492-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 493-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 494-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 495-06:07:53.4708469 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 496-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 497-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 498-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 499-06:07:53.4708469 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 500-06:07:53.4708469 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 501-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 502-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 503-06:07:53.4708469 services.exe 1236 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 504-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 505-06:07:53.4708469 svchost.exe 4788 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 506-06:07:53.4708469 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 507-06:07:53.4708469 services.exe 1236 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 508-06:07:53.4708469 net1.exe 6092 FILE_open C:\Windows\System32\netmsg.dll access:0x001200A9 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 509-06:07:53.4708469 svchost.exe 4788 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 510-06:07:53.4708469 svchost.exe 4788 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 511-06:07:53.4708469 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 512-06:07:53.4708469 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 513-06:07:53.4708469 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 514-06:07:53.4708469 svchost.exe 4788 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 515-06:07:53.4708469 net1.exe 6092 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\1b9f634b2c1b5f70418107cb50436924\netmsg.dll.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 516-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 517-06:07:53.4728493 svchost.exe 4788 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 518-06:07:53.4728493 svchost.exe 4788 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 519-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 520-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 521-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 522-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 523-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 524-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 525-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 526-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 527-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 528-06:07:53.4728493 svchost.exe 4788 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 529-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 530-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 531-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 532-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 533-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 534-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 535-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 536-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 537-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 538-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 539-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 540-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 541-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 542-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 543-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 544-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 545-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 546-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 547-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 548-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 549-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 550-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 551-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 552-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 553-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 554-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 555-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 556-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 557-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 558-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 559-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 560-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 561-06:07:53.4728493 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 562-06:07:53.4728493 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 563-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 564-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 565-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 566-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 567-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 568-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 569-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 570-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 571-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 572-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 573-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 574-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 575-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 576-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 577-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 578-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 579-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 580-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 581-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 582-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 583-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 584-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 585-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 586-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 587-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 588-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 589-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 590-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 591-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 592-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 593-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 594-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 595-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 596-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 597-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 598-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 599-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 600-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 601-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 602-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 603-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 604-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 605-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 606-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 607-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 608-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 609-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 610-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 611-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 612-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 613-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 614-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 615-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 616-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 617-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 618-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 619-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 620-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 621-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 622-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 623-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 624-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 625-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 626-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 627-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 628-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 629-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 630-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 631-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 632-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 633-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 634-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 635-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 636-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 637-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 638-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 639-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 640-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 641-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 642-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 643-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 644-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 645-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 646-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 647-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 648-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 649-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 650-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 651-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 652-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 653-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 654-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 655-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 656-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 657-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 658-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 659-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 660-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 661-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 662-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 663-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 664-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 665-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 666-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 667-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 668-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 669-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 670-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 671-06:07:53.4748518 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 672-06:07:53.4748518 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 673-06:07:53.4748518 svchost.exe 4788 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 674-06:07:53.4748518 svchost.exe 4788 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 675-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 676-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 677-06:07:53.4768533 svchost.exe 4788 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 678-06:07:53.4768533 svchost.exe 4788 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 679-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 680-06:07:53.4768533 svchost.exe 4788 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 681-06:07:53.4768533 svchost.exe 4788 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 682-06:07:53.4768533 svchost.exe 4788 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 683-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 684-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 685-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 686-06:07:53.4768533 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 687-06:07:53.4768533 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 688-06:07:53.4768533 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 689-06:07:53.4768533 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 690-06:07:53.4768533 svchost.exe 4788 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 691-06:07:53.4768533 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 692-06:07:53.4768533 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 693-06:07:53.4768533 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 694-06:07:53.4768533 svchost.exe 4788 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 695-06:07:53.4768533 svchost.exe 4788 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 696-06:07:53.4768533 svchost.exe 4788 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 697-06:07:53.4788559 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 698-06:07:53.4788559 svchost.exe 4788 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 699-06:07:53.4808581 svchost.exe 4788 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 700-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 701-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests access:0x00000002 0x00000000 [操作成功完成。 ] 702-06:07:53.7691891 svchost.exe 4248 REG_setval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\LastDownloadTime type:0x0000000B datalen:0x00000008 data:'00000010: F3 20 7F 0D 14 13 DD 01 ' 0x00000000 [操作成功完成。 ] 703-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 704-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 705-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 706-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 707-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 708-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 709-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 710-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 711-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 712-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 713-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 714-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 715-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 716-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 717-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 718-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 719-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 720-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 721-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 722-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 723-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 724-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 725-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 726-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 727-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 728-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app access:0x00000001 0x00000000 [操作成功完成。 ] 729-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.app\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 730-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 731-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 732-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 733-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 734-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 735-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 736-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 737-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 738-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 739-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 740-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 741-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 742-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 743-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 744-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 745-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 746-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 747-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 748-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 749-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 750-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 751-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 752-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 753-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 754-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 755-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy access:0x00000001 0x00000000 [操作成功完成。 ] 756-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.privacy\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 757-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 758-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 759-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 760-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 761-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 762-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 763-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 764-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 765-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 766-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 767-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 768-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 769-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 770-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 771-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 772-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 773-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 774-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 775-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 776-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 777-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 778-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 779-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 780-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 781-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 782-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow access:0x00000001 0x00000000 [操作成功完成。 ] 783-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.allow\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 784-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 785-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 786-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 787-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 788-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 789-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 790-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 791-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 792-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 793-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 794-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 795-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 796-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 797-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 798-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 799-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 800-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 801-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 802-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 803-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 804-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 805-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 806-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 807-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 808-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 809-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault access:0x00000001 0x00000000 [操作成功完成。 ] 810-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.ASM-WindowsDefault\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 811-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 812-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 813-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 814-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 815-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 816-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 817-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 818-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 819-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 820-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 821-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 822-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 823-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 824-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 825-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 826-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 827-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 828-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 829-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 830-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 831-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 832-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 833-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 834-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 835-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 836-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert access:0x00000001 0x00000000 [操作成功完成。 ] 837-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.cert\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 838-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 839-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 840-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 841-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 842-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 843-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 844-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 845-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 846-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 847-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 848-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 849-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 850-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 851-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 852-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 853-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 854-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 855-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 856-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 857-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 858-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 859-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 860-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 861-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 862-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 863-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators access:0x00000001 0x00000000 [操作成功完成。 ] 864-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.aggregators\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 865-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 866-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 867-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 868-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 869-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 870-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 871-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 872-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 873-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 874-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 875-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 876-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 877-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 878-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 879-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 880-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 881-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 882-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 883-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 884-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 885-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 886-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 887-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 888-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 889-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 890-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425 access:0x00000001 0x00000000 [操作成功完成。 ] 891-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-af397ef28e484961ba48646a5d38cf54-77418283-d6f6-4a90-b0c8-37e0f5e7b087-7425\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 892-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 893-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 894-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 895-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 896-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 897-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 898-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 899-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 900-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 901-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 902-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 903-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 904-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 905-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 906-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 907-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 908-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 909-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 910-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 911-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 912-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 913-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 914-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 915-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 916-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 917-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault access:0x00000001 0x00000000 [操作成功完成。 ] 918-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-Eco3PTelDefault\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 919-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 920-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 921-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 922-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 923-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 924-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 925-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 926-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 927-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 928-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 929-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 930-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 931-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 932-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 933-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 934-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 935-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 936-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 937-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 938-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 939-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 940-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 941-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 942-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 943-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 944-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand access:0x00000001 0x00000000 [操作成功完成。 ] 945-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\windows.diag_ondemand\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 946-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 947-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 948-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 949-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 950-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 951-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 952-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 953-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 954-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 955-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 956-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 957-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 958-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 959-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 960-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 961-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 962-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 963-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 964-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 965-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 966-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 967-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 968-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 969-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 970-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 971-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164 access:0x00000001 0x00000000 [操作成功完成。 ] 972-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-15cbbc93e90a4d56bf8d9a29305b8981-88c138a6-9eac-4f69-a3d3-10a4fbf41ddf-7164\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 973-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 974-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 975-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 976-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 977-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 978-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 979-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 980-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 981-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 982-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 983-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 984-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 985-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 986-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 987-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 988-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 989-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 990-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 991-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 992-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 993-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 994-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 995-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 996-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 997-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 998-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485 access:0x00000001 0x00000000 [操作成功完成。 ] 999-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-4bb4d6f7cafc4e9292f972dca2dcde42-bd019ee8-e59c-4b0f-a02c-84e72157a3ef-7485\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1000-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1001-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1002-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1003-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1004-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1005-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1006-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1007-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1008-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1009-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1010-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1011-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1012-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1013-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1014-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1015-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1016-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1017-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1018-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1019-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1020-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1021-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1022-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1023-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1024-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1025-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451 access:0x00000001 0x00000000 [操作成功完成。 ] 1026-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-6660cc65b74b4291b30536aea7ed6ead-5a228f6e-723e-4098-8ed2-3554f184fd67-7451\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1027-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1028-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1029-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1030-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1031-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1032-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1033-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1034-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1035-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1036-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1037-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1038-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1039-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1040-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1041-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1042-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1043-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1044-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1045-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1046-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1047-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1048-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1049-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1050-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1051-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1052-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553 access:0x00000001 0x00000000 [操作成功完成。 ] 1053-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-7005b72804a64fa4b2138faab88f877b-14cf798a-05a4-4b7b-9d02-4d99259ebd4a-7553\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1054-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1055-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1056-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1057-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1058-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1059-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1060-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1061-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1062-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1063-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1064-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1065-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1066-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1067-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1068-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1069-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1070-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1071-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1072-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1073-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1074-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1075-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1076-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1077-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1078-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1079-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417 access:0x00000001 0x00000000 [操作成功完成。 ] 1080-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-79ed91423fe9413a88d619c6fd8ad7e3-475be786-e44c-4cc6-9428-bcdf42518bfe-7417\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1081-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1082-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1083-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1084-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1085-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1086-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1087-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1088-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1089-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1090-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1091-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1092-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1093-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1094-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1095-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1096-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1097-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1098-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1099-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1100-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1101-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1102-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1103-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1104-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1105-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1106-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971 access:0x00000001 0x00000000 [操作成功完成。 ] 1107-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-80494971f8a54ffaa0463528b190001b-2fe3a3a0-1d51-48a9-ab38-1a00857bc0eb-6971\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1108-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1109-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1110-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1111-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1112-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1113-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1114-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1115-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1116-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1117-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1118-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1119-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1120-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1121-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1122-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1123-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1124-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1125-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1126-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1127-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1128-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1129-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1130-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1131-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1132-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1133-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112 access:0x00000001 0x00000000 [操作成功完成。 ] 1134-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\telemetry.P-ARIA-d5a8f02229be41efb047bd8f883ba799-59258264-451c-4459-8c09-75d7d721219a-7112\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1135-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1136-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1137-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1138-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1139-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1140-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1141-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1142-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1143-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1144-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1145-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1146-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1147-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1148-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1149-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1150-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1151-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1152-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1153-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1154-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1155-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1156-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1157-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1158-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1159-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1160-06:07:53.7691891 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing access:0x00000001 0x00000000 [操作成功完成。 ] 1161-06:07:53.7691891 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\utc.tracing\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1162-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1163-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1164-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1165-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1166-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1167-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1168-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1169-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1170-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1171-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1172-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1173-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1174-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1175-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1176-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1177-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1178-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1179-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1180-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1181-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1182-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1183-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1184-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1185-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1186-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1187-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS access:0x00000001 0x00000000 [操作成功完成。 ] 1188-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.DIAGNOSTICS\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1189-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1190-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1191-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1192-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1193-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1194-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1195-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1196-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1197-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1198-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1199-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1200-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1201-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1202-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1203-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1204-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1205-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1206-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1207-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1208-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1209-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1210-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1211-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1212-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1213-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1214-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS access:0x00000001 0x00000000 [操作成功完成。 ] 1215-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKESCALATIONS\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1216-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1217-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1218-06:07:53.7852635 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1219-06:07:53.7852635 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1220-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1221-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1222-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1223-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1224-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1225-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1226-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1227-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1228-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1229-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1230-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1231-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1232-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1233-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1234-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1235-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1236-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1237-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1238-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1239-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1240-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1241-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA access:0x00000001 0x00000000 [操作成功完成。 ] 1242-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.PERFTRACKPOINTDATA\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1243-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1244-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1245-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\LastDownloadTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1246-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1247-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1248-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\SettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1249-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1250-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1251-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1252-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1253-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1254-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\ETagQueryParameters type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1255-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1256-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1257-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1258-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1259-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1260-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\LastFileWrittenPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1261-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1262-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1263-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\LastFileWrittenTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1264-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1265-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1266-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\DownloadScheduled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1267-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1268-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF access:0x00000001 0x00000000 [操作成功完成。 ] 1269-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\SettingsRequests\WINDOWS.SIUF\OverrideDownloadPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1270-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1271-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack access:0x00000002 0x00000000 [操作成功完成。 ] 1272-06:07:53.7869088 svchost.exe 4248 REG_rmval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\UnexpectedStopsSinceSettingsDownload keyname:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack 0x00000000 [操作成功完成。 ] 1273-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest access:0x00020019 0x00000000 [操作成功完成。 ] 1274-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1275-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1276-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1277-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Authentication.OnlineId.OnlineIdServiceTicketRequest\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1278-06:07:53.7869088 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal access:0x00020019 0x00000000 [操作成功完成。 ] 1279-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1280-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1281-06:07:53.7869088 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1282-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1283-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.SystemAuthenticatorInternal\ActivateAsUser type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1284-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.AuthenticationManager access:0x00020019 0x00000000 [操作成功完成。 ] 1285-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.AuthenticationManager\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1286-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.AuthenticationManager\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1287-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.AuthenticationManager\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1288-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Security.WebAuthentication.AuthenticationManager\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1289-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.Detail.Vector access:0x00020019 0x00000000 [操作成功完成。 ] 1290-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.Detail.Vector\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1291-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.Detail.Vector\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1292-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.Detail.Vector\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1293-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.Detail.Vector\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1294-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 1295-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 1296-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1297-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 1298-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 1299-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 1300-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1301-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1302-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData access:0x0002001B 0x00000000 [操作成功完成。 ] 1303-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\TickCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1304-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\ClockTimeSeconds type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1305-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 1306-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 1307-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 1308-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceTicket type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1309-06:07:53.7886490 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 1310-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1311-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1312-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1313-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1314-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 1315-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 1316-06:07:53.7886490 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 1317-06:07:53.7886490 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property\0018000C08E0F97E type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1318-06:07:53.7886490 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 1319-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1320-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1321-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1322-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1323-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1324-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1325-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1326-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1327-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 1328-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1329-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1330-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1331-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1332-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 1333-06:07:53.7886490 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1334-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1335-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1336-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1337-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1338-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 1339-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1340-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1341-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1342-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1343-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1344-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 1345-06:07:53.7886490 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1346-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1347-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 1348-06:07:53.7886490 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1349-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1350-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1351-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 1352-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 1353-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1354-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 1355-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1356-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1357-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1358-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1359-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1360-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1361-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 1362-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1363-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 1364-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1365-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 1366-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1367-06:07:53.7886490 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 1368-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1369-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1370-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1371-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1372-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1373-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1374-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1375-06:07:53.7886490 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1376-06:07:53.7886490 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 1377-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1378-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1379-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1380-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1381-06:07:53.7886490 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1382-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1383-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1384-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1385-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1386-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1387-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1388-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1389-06:07:53.7886490 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1390-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 1391-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 1392-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1393-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1394-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1395-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1396-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1397-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1398-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 1399-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1400-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1401-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1402-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1403-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1404-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1405-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1406-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1407-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1408-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1409-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1410-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1411-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1412-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1413-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1414-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1415-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1416-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1417-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1418-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1419-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1420-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1421-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1422-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1423-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1424-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1425-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1426-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1427-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1428-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1429-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1430-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1431-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1432-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1433-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1434-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1435-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1436-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1437-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1438-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1439-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1440-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1441-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1442-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1443-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1444-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1445-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1446-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1447-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1448-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1449-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1450-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1451-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1452-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1453-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1454-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1455-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1456-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1457-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1458-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1459-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1460-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 1461-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1462-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1463-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1464-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 1465-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1466-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1467-06:07:53.7886490 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1468-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 1469-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 1470-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1471-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1472-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1473-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1474-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1475-06:07:53.7886490 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1476-06:07:53.7886490 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1477-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 1478-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1479-06:07:53.8009306 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1480-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1481-06:07:53.8009306 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 1482-06:07:53.8009306 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 1483-06:07:53.8009306 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 1484-06:07:53.8009306 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4820 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 1485-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 1486-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 1487-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1488-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 1489-06:07:53.8009306 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1490-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1491-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1492-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1493-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1494-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 1495-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1496-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 1497-06:07:53.8009306 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1498-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1499-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1500-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1501-06:07:53.8009306 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1502-06:07:53.8009306 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1503-06:07:53.8009306 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1504-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 1505-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1506-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 1507-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1508-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 1509-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 1510-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1511-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1512-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1513-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1514-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 1515-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 1516-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1517-06:07:53.8009306 svchost.exe 4820 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 1518-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 1519-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 1520-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1521-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 1522-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 1523-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1524-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1525-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 1526-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 1527-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 1528-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1529-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 1530-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1531-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 1532-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1533-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1534-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1535-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1536-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1537-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 1538-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1539-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 1540-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 1541-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1542-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 1543-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1544-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 1545-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1546-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 1547-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1548-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 1549-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 1550-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1551-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 1552-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 1553-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1554-06:07:53.8009306 svchost.exe 4820 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1555-06:07:53.8009306 svchost.exe 4820 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1556-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 1557-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 1558-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 1559-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1560-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 1561-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1562-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 1563-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1564-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1565-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 1566-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 1567-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1568-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 1569-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1570-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 1571-06:07:53.8009306 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1572-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1573-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1574-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1575-06:07:53.8009306 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 1576-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 1577-06:07:53.8009306 svchost.exe 4820 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 1578-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 1579-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 1580-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 1581-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1582-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 1583-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1584-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1585-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 1586-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 1587-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1588-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 1589-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1590-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1591-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1592-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1593-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1594-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 1595-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1596-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1597-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 1598-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 1599-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1600-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1601-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1602-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1603-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 1604-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 1605-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1606-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1607-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 1608-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1609-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 1610-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 1611-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 1612-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 1613-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1614-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1615-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1616-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 1617-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1618-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 1619-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1620-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1621-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1622-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1623-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 1624-06:07:53.8169473 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1625-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1626-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 1627-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1628-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1629-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1630-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1631-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 1632-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1633-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 1634-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 1635-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1636-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 1637-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1638-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 1639-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1640-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1641-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1642-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1643-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 1644-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1645-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1646-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 1647-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1648-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1649-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1650-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1651-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 1652-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 1653-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1654-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1655-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1656-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 1657-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1658-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1659-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1660-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1661-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 1662-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 1663-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1664-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 1665-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1666-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 1667-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1668-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 1669-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1670-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 1671-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1672-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 1673-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1674-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 1675-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1676-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 1677-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1678-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 1679-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1680-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 1681-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1682-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 1683-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1684-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 1685-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1686-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 1687-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1688-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 1689-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1690-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 1691-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1692-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1693-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1694-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 1695-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 1696-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1697-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1698-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1699-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1700-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1701-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1702-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1703-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1704-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1705-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1706-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1707-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1708-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 1709-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1710-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1711-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1712-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1713-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1714-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1715-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1716-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1717-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1718-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1719-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1720-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1721-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 1722-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1723-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1724-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1725-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1726-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1727-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1728-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1729-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1730-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1731-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1732-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1733-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1734-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 1735-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1736-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1737-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1738-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1739-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1740-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1741-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1742-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1743-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1744-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1745-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1746-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1747-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 1748-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1749-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1750-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1751-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1752-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1753-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1754-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1755-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1756-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1757-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1758-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1759-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1760-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 1761-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1762-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1763-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1764-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1765-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1766-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1767-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1768-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1769-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1770-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1771-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1772-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1773-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 1774-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1775-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1776-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1777-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1778-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1779-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1780-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1781-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1782-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1783-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1784-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1785-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1786-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1787-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 1788-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1789-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1790-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1791-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1792-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 1793-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 1794-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 1795-06:07:53.8169473 svchost.exe 4820 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1796-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1797-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 1798-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1799-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 1800-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 1801-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1802-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 1803-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1804-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 1805-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1806-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 1807-06:07:53.8169473 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1808-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1809-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1810-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1811-06:07:53.8169473 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1812-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 1813-06:07:53.8169473 svchost.exe 4820 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1814-06:07:53.8169473 svchost.exe 4820 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 1815-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1816-06:07:53.8169473 svchost.exe 4820 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 1817-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1818-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 1819-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1820-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18 access:0x00020019 0x00000000 [操作成功完成。 ] 1821-06:07:53.8169473 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18\DeviceLicenseUpdateFailureCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1822-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1823-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1824-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1825-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1826-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 1827-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1828-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1829-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1830-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1831-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 1832-06:07:53.8169473 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1833-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1834-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\International access:0x00020019 0x00000000 [操作成功完成。 ] 1835-06:07:53.8169473 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1836-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1837-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1838-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1839-06:07:53.8169473 svchost.exe 4820 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 1840-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1841-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 1842-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1843-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1844-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 1845-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 1846-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1847-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 1848-06:07:53.8169473 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1849-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1850-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 1851-06:07:53.8169473 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1852-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1853-06:07:53.8169473 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1854-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 1855-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 1856-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1857-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 1858-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1859-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1860-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1861-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1862-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 1863-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1864-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 1865-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1866-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 1867-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1868-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 1869-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 1870-06:07:53.8330560 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 1871-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1872-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1873-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1874-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1875-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1876-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1877-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1878-06:07:53.8330560 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 1879-06:07:53.8330560 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 1880-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1881-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1882-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1883-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1884-06:07:53.8330560 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1885-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1886-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1887-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1888-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1889-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1890-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1891-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1892-06:07:53.8330560 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1893-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 1894-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 1895-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1896-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1897-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1898-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1899-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1900-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1901-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 1902-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1903-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1904-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1905-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1906-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1907-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1908-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1909-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1910-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1911-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1912-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1913-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1914-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1915-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1916-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1917-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1918-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1919-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1920-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1921-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1922-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1923-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1924-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1925-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1926-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1927-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1928-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1929-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1930-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1931-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1932-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1933-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1934-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1935-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1936-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1937-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1938-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1939-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1940-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1941-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1942-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1943-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1944-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1945-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1946-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 1947-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1948-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1949-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1950-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1951-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1952-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1953-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1954-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1955-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1956-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1957-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1958-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 1959-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1960-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1961-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1962-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1963-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 1964-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1965-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1966-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1967-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 1968-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1969-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 1970-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1971-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 1972-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 1973-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1974-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1975-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1976-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1977-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1978-06:07:53.8330560 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1979-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 1980-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 1981-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1982-06:07:53.8330560 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 1983-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 1984-06:07:53.8330560 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 1985-06:07:53.8330560 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 1986-06:07:53.8330560 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 1987-06:07:53.8330560 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4852 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 1988-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 1989-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 1990-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1991-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 1992-06:07:53.8330560 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 1993-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1994-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1995-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1996-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1997-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 1998-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 1999-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 2000-06:07:53.8330560 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2001-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 2002-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 2003-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 2004-06:07:53.8330560 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 2005-06:07:53.8330560 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2006-06:07:53.8330560 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2007-06:07:53.8330560 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 2008-06:07:53.8330560 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2009-06:07:53.8330560 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2010-06:07:53.8330560 svchost.exe 4852 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 2011-06:07:53.8330560 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 2012-06:07:53.8330560 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 2013-06:07:53.8330560 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2014-06:07:53.8330560 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2015-06:07:53.8330560 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2016-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2017-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 2018-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 2019-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2020-06:07:53.8330560 svchost.exe 4852 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 2021-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 2022-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 2023-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2024-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 2025-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 2026-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2027-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2028-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 2029-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 2030-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 2031-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2032-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 2033-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2034-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 2035-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2036-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2037-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2038-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2039-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2040-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 2041-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2042-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 2043-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 2044-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2045-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 2046-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2047-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 2048-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2049-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 2050-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2051-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 2052-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 2053-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 2054-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 2055-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 2056-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2057-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2058-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2059-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 2060-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 2061-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 2062-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2063-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 2064-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2065-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 2066-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2067-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2068-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 2069-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 2070-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2071-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 2072-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2073-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 2074-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2075-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2076-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2077-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2078-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 2079-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 2080-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 2081-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 2082-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 2083-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 2084-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2085-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 2086-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2087-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2088-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 2089-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 2090-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 2091-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 2092-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2093-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2094-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2095-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 2096-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2097-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 2098-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2099-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 2100-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 2101-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 2102-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2103-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2104-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2105-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 2106-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 2107-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 2108-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2109-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2110-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 2111-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2112-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 2113-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 2114-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 2115-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 2116-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2117-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2118-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2119-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 2120-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2121-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 2122-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2123-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2124-06:07:53.8490352 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2125-06:07:53.8490352 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2126-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 2127-06:07:53.8490352 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2128-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2129-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 2130-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2131-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2132-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2133-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2134-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 2135-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2136-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 2137-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 2138-06:07:53.8490352 svchost.exe 4852 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2139-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 2140-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2141-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 2142-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2143-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2144-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2145-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2146-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 2147-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2148-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2149-06:07:53.8490352 svchost.exe 4852 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 2150-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2151-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2152-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2153-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2154-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 2155-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 2156-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2157-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2158-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2159-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 2160-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2161-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2162-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2163-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2164-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 2165-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 2166-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2167-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 2168-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2169-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 2170-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2171-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 2172-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2173-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 2174-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2175-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 2176-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2177-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 2178-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2179-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 2180-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2181-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 2182-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2183-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 2184-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2185-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 2186-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2187-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 2188-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2189-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 2190-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2191-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 2192-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2193-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 2194-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2195-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2196-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2197-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 2198-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 2199-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2200-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2201-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2202-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2203-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2204-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2205-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2206-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2207-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2208-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2209-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2210-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2211-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 2212-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2213-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2214-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2215-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2216-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2217-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2218-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2219-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2220-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2221-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2222-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2223-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2224-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 2225-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2226-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2227-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2228-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2229-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2230-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2231-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2232-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2233-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2234-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2235-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2236-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2237-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 2238-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2239-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2240-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2241-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2242-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2243-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2244-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2245-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2246-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2247-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2248-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2249-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2250-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 2251-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2252-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2253-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2254-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2255-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2256-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2257-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2258-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2259-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2260-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2261-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2262-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2263-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 2264-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2265-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2266-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2267-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2268-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2269-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2270-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2271-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2272-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2273-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2274-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2275-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2276-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 2277-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2278-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2279-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2280-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2281-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2282-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2283-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2284-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2285-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2286-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2287-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2288-06:07:53.8490352 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2289-06:07:53.8490352 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2290-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 2291-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2292-06:07:53.8649429 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2293-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2294-06:07:53.8649429 svchost.exe 4852 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2295-06:07:53.8649429 svchost.exe 4852 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 2296-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 2297-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 2298-06:07:53.8649429 svchost.exe 4852 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2299-06:07:53.8649429 svchost.exe 4852 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2300-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 2301-06:07:53.8649429 svchost.exe 4852 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2302-06:07:53.8649429 svchost.exe 4852 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 2303-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2304-06:07:53.8649429 svchost.exe 4852 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 2305-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 2306-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2307-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 2308-06:07:53.8649429 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 2309-06:07:53.8649429 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 2310-06:07:53.8649429 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2311-06:07:53.8649429 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 2312-06:07:53.8649429 svchost.exe 4852 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2313-06:07:53.8649429 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 2314-06:07:53.8649429 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 2315-06:07:53.8649429 svchost.exe 4852 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 2316-06:07:53.8649429 svchost.exe 4852 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2317-06:07:53.8649429 svchost.exe 4852 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 2318-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2319-06:07:53.8649429 svchost.exe 4852 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 2320-06:07:53.8649429 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2321-06:07:53.8649429 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 2322-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2323-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 2324-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2325-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 2326-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2327-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 2328-06:07:53.8649429 svchost.exe 4248 FILE_open C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json.new access:0x0013019F alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000005 options:0x00000060 0x00000000 [操作成功完成。 ] 2329-06:07:53.8649429 svchost.exe 4248 FILE_touch C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json.new access:0x0013019F alloc_size:0 attrib:0x00000100 share_access:0x00000001 disposition:0x00000005 options:0x00000060 0x00000000 [操作成功完成。 ] 2330-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338} access:0x00020019 0x00000000 [操作成功完成。 ] 2331-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2332-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32 access:0x00020019 0x00000000 [操作成功完成。 ] 2333-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2334-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2335-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ThreadingModel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2336-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2337-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 2338-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\FlightSettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2339-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2340-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 2341-06:07:53.8649429 svchost.exe 4852 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 2342-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2343-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 2344-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2345-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 2346-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2347-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 2348-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\IsBuildUnsupported type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2349-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2350-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2351-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2352-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 2353-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2354-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2355-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2356-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2357-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2358-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 2359-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2360-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2361-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2362-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 2363-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2364-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2365-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2366-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2367-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2368-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 2369-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2370-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2371-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 2372-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2373-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 2374-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2375-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 2376-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2377-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 2378-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\IsBuildUnsupported type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2379-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2380-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2381-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2382-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 2383-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2384-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2385-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2386-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2387-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2388-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 2389-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2390-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2391-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2392-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 2393-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2394-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2395-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2396-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2397-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2398-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 2399-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2400-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2401-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 2402-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2403-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 2404-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2405-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 2406-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2407-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 2408-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject access:0x00020019 0x00000000 [操作成功完成。 ] 2409-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2410-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2411-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2412-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonObject\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2413-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.OneSettings.OneSettingsPayload access:0x00020019 0x00000000 [操作成功完成。 ] 2414-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.OneSettings.OneSettingsPayload\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2415-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.OneSettings.OneSettingsPayload\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2416-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.OneSettings.OneSettingsPayload\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2417-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.OneSettings.OneSettingsPayload\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2418-06:07:53.8649429 svchost.exe 4248 FILE_open C:\Windows\System32\wosc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 2419-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2420-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x00020019 0x00000000 [操作成功完成。 ] 2421-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x00020019 0x00000000 [操作成功完成。 ] 2422-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2423-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2424-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2425-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2426-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING access:0x000F003F 0x00000000 [操作成功完成。 ] 2427-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2428-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2429-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2430-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2431-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2432-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2433-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2434-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2435-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2436-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2437-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2438-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2439-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2440-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP access:0x000F003F 0x00000000 [操作成功完成。 ] 2441-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2442-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2443-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2444-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2445-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2446-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2447-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2448-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2449-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2450-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2451-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2452-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2453-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2454-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS access:0x000F003F 0x00000000 [操作成功完成。 ] 2455-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2456-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2457-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2458-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2459-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2460-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2461-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2462-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2463-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2464-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2465-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2466-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2467-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2468-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2469-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI access:0x000F003F 0x00000000 [操作成功完成。 ] 2470-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2471-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2472-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2473-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2474-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2475-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2476-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2477-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2478-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2479-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2480-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2481-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2482-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2483-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS access:0x000F003F 0x00000000 [操作成功完成。 ] 2484-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2485-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2486-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2487-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2488-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2489-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2490-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2491-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2492-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2493-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2494-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2495-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2496-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2497-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL access:0x000F003F 0x00000000 [操作成功完成。 ] 2498-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2499-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2500-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2501-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2502-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2503-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2504-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2505-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2506-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2507-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2508-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2509-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2510-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2511-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING access:0x000F003F 0x00000000 [操作成功完成。 ] 2512-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2513-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2514-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2515-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2516-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2517-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2518-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2519-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2520-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2521-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2522-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2523-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2524-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2525-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER access:0x000F003F 0x00000000 [操作成功完成。 ] 2526-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2527-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2528-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2529-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2530-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2531-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2532-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2533-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2534-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2535-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2536-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2537-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2538-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2539-06:07:53.8649429 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS access:0x000F003F 0x00000000 [操作成功完成。 ] 2540-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2541-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2542-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2543-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2544-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2545-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2546-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2547-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2548-06:07:53.8649429 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2549-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2550-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2551-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2552-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2553-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP access:0x000F003F 0x00000000 [操作成功完成。 ] 2554-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2555-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2556-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2557-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2558-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2559-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2560-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2561-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2562-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2563-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2564-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2565-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2566-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2567-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC access:0x000F003F 0x00000000 [操作成功完成。 ] 2568-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2569-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2570-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2571-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2572-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2573-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2574-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2575-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2576-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2577-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2578-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2579-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2580-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2581-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL access:0x000F003F 0x00000000 [操作成功完成。 ] 2582-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2583-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2584-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2585-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2586-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2587-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2588-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2589-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2590-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2591-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2592-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2593-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2594-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2595-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC access:0x000F003F 0x00000000 [操作成功完成。 ] 2596-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2597-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2598-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2599-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2600-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2601-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2602-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2603-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2604-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2605-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2606-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2607-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2608-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2609-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB access:0x000F003F 0x00000000 [操作成功完成。 ] 2610-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2611-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2612-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2613-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2614-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2615-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2616-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2617-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2618-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2619-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2620-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2621-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2622-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2623-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2624-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2625-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2626-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2627-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE access:0x000F003F 0x00000000 [操作成功完成。 ] 2628-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2629-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2630-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2631-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2632-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2633-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2634-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2635-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2636-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2637-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2638-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2639-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2640-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2641-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON access:0x000F003F 0x00000000 [操作成功完成。 ] 2642-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2643-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2644-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2645-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2646-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2647-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2648-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2649-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2650-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2651-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2652-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2653-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2654-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2655-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2656-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastForceRefresh type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2657-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2658-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2659-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2660-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2661-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER access:0x000F003F 0x00000000 [操作成功完成。 ] 2662-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2663-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2664-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2665-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2666-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2667-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2668-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2669-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2670-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2671-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2672-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2673-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2674-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2675-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS access:0x000F003F 0x00000000 [操作成功完成。 ] 2676-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2677-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2678-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2679-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2680-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2681-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2682-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2683-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2684-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2685-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2686-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2687-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2688-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2689-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2690-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2691-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE access:0x000F003F 0x00000000 [操作成功完成。 ] 2692-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2693-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2694-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2695-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2696-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2697-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2698-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2699-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2700-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2701-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2702-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2703-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2704-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2705-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastForceRefresh type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2706-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2707-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2708-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2709-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2710-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS access:0x000F003F 0x00000000 [操作成功完成。 ] 2711-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2712-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2713-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2714-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2715-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2716-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2717-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2718-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2719-06:07:53.8809175 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2720-06:07:53.8809175 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2721-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2722-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2723-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2724-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA access:0x000F003F 0x00000000 [操作成功完成。 ] 2725-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2726-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2727-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2728-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2729-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2730-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2731-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2732-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2733-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2734-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2735-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2736-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2737-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2738-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT access:0x000F003F 0x00000000 [操作成功完成。 ] 2739-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2740-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2741-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2742-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2743-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2744-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2745-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2746-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2747-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2748-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2749-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2750-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2751-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 2752-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2753-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2754-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2755-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2756-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2757-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 2758-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2759-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2760-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 2761-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2762-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2763-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2764-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2765-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2766-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST access:0x000F003F 0x00000000 [操作成功完成。 ] 2767-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2768-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2769-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2770-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2771-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2772-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2773-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2774-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2775-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2776-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2777-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2778-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2779-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2780-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE access:0x000F003F 0x00000000 [操作成功完成。 ] 2781-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2782-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2783-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2784-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2785-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2786-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2787-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2788-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2789-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2790-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2791-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2792-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2793-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2794-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION access:0x000F003F 0x00000000 [操作成功完成。 ] 2795-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2796-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2797-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2798-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2799-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2800-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2801-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2802-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2803-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2804-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2805-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2806-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2807-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 2808-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2809-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2810-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2811-06:07:53.8850820 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2812-06:07:53.8850820 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2813-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 2814-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2815-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2816-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 2817-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2818-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2819-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2820-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2821-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2822-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2823-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD access:0x000F003F 0x00000000 [操作成功完成。 ] 2824-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2825-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2826-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2827-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2828-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2829-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2830-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2831-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2832-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2833-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2834-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2835-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2836-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2837-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2838-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE access:0x000F003F 0x00000000 [操作成功完成。 ] 2839-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2840-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2841-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2842-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2843-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2844-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2845-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2846-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2847-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2848-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2849-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2850-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2851-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2852-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2853-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2854-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2855-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2856-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2857-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2858-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING access:0x000F003F 0x00000000 [操作成功完成。 ] 2859-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2860-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2861-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2862-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2863-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2864-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2865-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2866-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2867-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2868-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2869-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2870-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2871-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2872-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH access:0x000F003F 0x00000000 [操作成功完成。 ] 2873-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2874-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2875-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2876-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2877-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2878-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2879-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2880-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2881-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2882-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2883-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2884-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2885-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2886-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN access:0x000F003F 0x00000000 [操作成功完成。 ] 2887-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2888-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2889-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2890-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2891-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2892-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2893-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2894-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2895-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2896-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2897-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2898-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2899-06:07:53.8873139 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2900-06:07:53.8873139 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER access:0x000F003F 0x00000000 [操作成功完成。 ] 2901-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2902-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2903-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2904-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2905-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2906-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2907-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2908-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2909-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2910-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2911-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2912-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2913-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2914-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM access:0x000F003F 0x00000000 [操作成功完成。 ] 2915-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2916-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2917-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2918-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2919-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2920-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2921-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2922-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2923-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2924-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2925-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2926-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2927-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2928-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC access:0x000F003F 0x00000000 [操作成功完成。 ] 2929-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2930-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2931-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2932-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2933-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2934-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2935-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2936-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2937-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2938-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2939-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2940-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2941-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2942-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS access:0x000F003F 0x00000000 [操作成功完成。 ] 2943-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2944-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2945-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2946-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2947-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2948-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2949-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2950-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2951-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2952-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2953-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2954-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2955-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2956-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT access:0x000F003F 0x00000000 [操作成功完成。 ] 2957-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2958-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2959-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2960-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2961-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2962-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2963-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2964-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2965-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2966-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2967-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2968-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2969-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2970-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER access:0x000F003F 0x00000000 [操作成功完成。 ] 2971-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2972-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2973-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2974-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2975-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2976-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2977-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2978-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2979-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2980-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2981-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2982-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 2983-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2984-06:07:53.8893154 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR access:0x000F003F 0x00000000 [操作成功完成。 ] 2985-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2986-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2987-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2988-06:07:53.8893154 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2989-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2990-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2991-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2992-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2993-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2994-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2995-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2996-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 2997-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 2998-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 2999-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3000-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3001-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH access:0x000F003F 0x00000000 [操作成功完成。 ] 3002-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3003-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3004-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3005-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3006-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3007-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3008-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3009-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3010-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3011-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3012-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3013-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3014-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3015-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD access:0x000F003F 0x00000000 [操作成功完成。 ] 3016-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3017-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3018-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3019-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3020-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3021-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3022-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3023-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3024-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3025-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3026-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3027-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3028-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3029-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL access:0x000F003F 0x00000000 [操作成功完成。 ] 3030-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3031-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3032-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3033-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3034-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3035-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3036-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3037-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3038-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3039-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3040-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3041-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3042-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3043-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3044-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3045-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3046-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT access:0x000F003F 0x00000000 [操作成功完成。 ] 3047-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3048-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3049-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3050-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3051-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3052-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3053-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3054-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3055-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS access:0x000F003F 0x00000000 [操作成功完成。 ] 3056-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3057-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3058-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3059-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3060-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3061-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3062-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3063-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3064-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3065-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3066-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3067-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3068-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3069-06:07:53.8913168 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT access:0x000F003F 0x00000000 [操作成功完成。 ] 3070-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3071-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3072-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3073-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3074-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3075-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3076-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3077-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3078-06:07:53.8913168 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3079-06:07:53.8933183 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3080-06:07:53.8933183 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3081-06:07:53.8933183 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3082-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3083-06:07:53.8933183 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC access:0x000F003F 0x00000000 [操作成功完成。 ] 3084-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3085-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3086-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3087-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3088-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3089-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3090-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3091-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3092-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3093-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3094-06:07:53.8933183 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3095-06:07:53.8933183 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3096-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3097-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3098-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3099-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT access:0x000F003F 0x00000000 [操作成功完成。 ] 3100-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3101-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3102-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3103-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3104-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3105-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3106-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3107-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3108-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3109-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3110-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3111-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3112-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3113-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3114-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3115-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3116-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3117-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3118-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3119-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3120-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3121-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3122-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3123-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3124-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3125-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3126-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT access:0x000F003F 0x00000000 [操作成功完成。 ] 3127-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3128-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3129-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3130-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3131-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3132-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3133-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3134-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3135-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3136-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3137-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3138-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3139-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3140-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3141-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD access:0x000F003F 0x00000000 [操作成功完成。 ] 3142-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3143-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3144-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3145-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3146-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3147-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3148-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3149-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3150-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3151-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3152-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3153-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3154-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3155-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3156-06:07:53.8953199 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC access:0x000F003F 0x00000000 [操作成功完成。 ] 3157-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3158-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3159-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3160-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3161-06:07:53.8953199 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3162-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3163-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3164-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3165-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3166-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3167-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3168-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3169-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3170-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX access:0x000F003F 0x00000000 [操作成功完成。 ] 3171-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3172-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3173-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3174-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3175-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3176-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3177-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3178-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3179-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3180-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3181-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3182-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3183-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3184-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3185-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3186-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3187-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3188-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3189-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3190-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3191-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3192-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3193-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3194-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3195-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3196-06:07:53.8968255 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS access:0x000F003F 0x00000000 [操作成功完成。 ] 3197-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3198-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3199-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3200-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3201-06:07:53.8968255 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3202-06:07:53.8988280 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3203-06:07:53.8988280 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3204-06:07:53.8988280 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3205-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3206-06:07:53.8988280 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC access:0x000F003F 0x00000000 [操作成功完成。 ] 3207-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3208-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3209-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3210-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3211-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3212-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3213-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3214-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3215-06:07:53.8988280 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WOSC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3216-06:07:53.8988280 svchost.exe 4248 FILE_open C:\ProgramData\Microsoft\Windows\OneSettings\config.json access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 3217-06:07:53.8988280 svchost.exe 4248 FILE_read C:\ProgramData\Microsoft\Windows\OneSettings\config.json offset:0x00000000 datalen:0x00000004 0x00000000 [操作成功完成。 ] 3218-06:07:53.8988280 svchost.exe 4248 FILE_read C:\ProgramData\Microsoft\Windows\OneSettings\config.json offset:0x00000000 datalen:0x0001217E 0x00000000 [操作成功完成。 ] 3219-06:07:53.9028311 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3220-06:07:53.9028311 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3221-06:07:53.9028311 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3222-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3223-06:07:53.9028311 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS access:0x000F003F 0x00000000 [操作成功完成。 ] 3224-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3225-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3226-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3227-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3228-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3229-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3230-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3231-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3232-06:07:53.9028311 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATPROVIDEREOS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3233-06:07:53.9028311 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3234-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3235-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3236-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3237-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING access:0x000F003F 0x00000000 [操作成功完成。 ] 3238-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3239-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3240-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3241-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3242-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3243-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3244-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3245-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3246-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\NARRATORSCRIPTING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3247-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3248-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3249-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3250-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3251-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE access:0x000F003F 0x00000000 [操作成功完成。 ] 3252-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3253-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3254-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3255-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3256-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3257-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3258-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3259-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3260-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3261-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3262-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3263-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3264-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3265-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FTUNE\LastForceRefresh type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3266-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3267-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3268-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3269-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3270-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS access:0x000F003F 0x00000000 [操作成功完成。 ] 3271-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3272-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3273-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3274-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3275-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3276-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3277-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3278-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3279-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDEVICECENSUS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3280-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3281-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3282-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3283-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3284-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS access:0x000F003F 0x00000000 [操作成功完成。 ] 3285-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3286-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3287-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3288-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3289-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3290-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3291-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3292-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3293-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SERVICINGCBS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3294-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3295-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3296-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3297-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3298-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI access:0x000F003F 0x00000000 [操作成功完成。 ] 3299-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3300-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3301-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3302-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3303-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3304-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3305-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3306-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3307-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATDAPI\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3308-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3309-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3310-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3311-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3312-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3313-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3314-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3315-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3316-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3317-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3318-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3319-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3320-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3321-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3322-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3323-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3324-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX access:0x000F003F 0x00000000 [操作成功完成。 ] 3325-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3326-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3327-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3328-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3329-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3330-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3331-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3332-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3333-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WSX\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3334-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3335-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3336-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3337-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3338-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3339-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3340-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3341-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3342-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3343-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3344-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3345-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3346-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3347-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3348-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3349-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3350-06:07:53.9048323 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON access:0x000F003F 0x00000000 [操作成功完成。 ] 3351-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3352-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3353-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3354-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3355-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3356-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3357-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3358-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3359-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3360-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3361-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3362-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3363-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3364-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3365-06:07:53.9048323 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FCON\LastForceRefresh type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3366-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3367-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3368-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3369-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3370-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS access:0x000F003F 0x00000000 [操作成功完成。 ] 3371-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3372-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3373-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3374-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3375-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3376-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3377-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3378-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3379-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\GS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3380-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3381-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3382-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3383-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3384-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE access:0x000F003F 0x00000000 [操作成功完成。 ] 3385-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3386-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3387-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3388-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3389-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3390-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3391-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3392-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3393-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ECOSCORE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3394-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3395-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3396-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3397-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3398-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT access:0x000F003F 0x00000000 [操作成功完成。 ] 3399-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3400-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3401-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3402-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UPDATEAGENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3403-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3404-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3405-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3406-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3407-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC access:0x000F003F 0x00000000 [操作成功完成。 ] 3408-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3409-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3410-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3411-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3412-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3413-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3414-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3415-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3416-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3417-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3418-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3419-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3420-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3421-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL access:0x000F003F 0x00000000 [操作成功完成。 ] 3422-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3423-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3424-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3425-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3426-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3427-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3428-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3429-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3430-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATHWREQEVAL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3431-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3432-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3433-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3434-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3435-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH access:0x000F003F 0x00000000 [操作成功完成。 ] 3436-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3437-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3438-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3439-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3440-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3441-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3442-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3443-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3444-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\OPENWITH\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3445-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3446-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3447-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3448-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3449-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP access:0x000F003F 0x00000000 [操作成功完成。 ] 3450-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3451-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3452-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3453-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3454-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3455-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3456-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3457-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3458-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\ASAPCP\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3459-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3460-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3461-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3462-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3463-06:07:53.9083563 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL access:0x000F003F 0x00000000 [操作成功完成。 ] 3464-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3465-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3466-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3467-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3468-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3469-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3470-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3471-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3472-06:07:53.9083563 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DBUPDATEBL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3473-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3474-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3475-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3476-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3477-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL access:0x000F003F 0x00000000 [操作成功完成。 ] 3478-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3479-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3480-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3481-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3482-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3483-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3484-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3485-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3486-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3487-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3488-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3489-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UECPL\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3490-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3491-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3492-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3493-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3494-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS access:0x000F003F 0x00000000 [操作成功完成。 ] 3495-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3496-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3497-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3498-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3499-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WV2SETTINGS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3500-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3501-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3502-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3503-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3504-06:07:53.9114680 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC access:0x000F003F 0x00000000 [操作成功完成。 ] 3505-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3506-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3507-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3508-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3509-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3510-06:07:53.9114680 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3511-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3512-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3513-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DSTSYNC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3514-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3515-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3516-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3517-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3518-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH access:0x000F003F 0x00000000 [操作成功完成。 ] 3519-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3520-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3521-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3522-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3523-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3524-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3525-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3526-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3527-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TEXTTOSPEECH\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3528-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3529-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3530-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3531-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3532-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT access:0x000F003F 0x00000000 [操作成功完成。 ] 3533-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3534-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3535-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3536-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3537-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3538-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3539-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3540-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3541-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SPEECHTOTEXT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3542-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3543-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3544-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3545-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3546-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM access:0x000F003F 0x00000000 [操作成功完成。 ] 3547-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3548-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3549-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3550-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3551-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3552-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3553-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3554-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3555-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RUXIM\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3556-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3557-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3558-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3559-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3560-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER access:0x000F003F 0x00000000 [操作成功完成。 ] 3561-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3562-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3563-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3564-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3565-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3566-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3567-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3568-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3569-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\STORAGEGROVELER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3570-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3571-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3572-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3573-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3574-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3575-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3576-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3577-06:07:53.9124727 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3578-06:07:53.9124727 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3579-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3580-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3581-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3582-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3583-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3584-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3585-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3586-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION access:0x000F003F 0x00000000 [操作成功完成。 ] 3587-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3588-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3589-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3590-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3591-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3592-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3593-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3594-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3595-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3596-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3597-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3598-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3599-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3600-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3601-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3602-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3603-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3604-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3605-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3606-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3607-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3608-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3609-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3610-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MITIGATION\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3611-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3612-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3613-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3614-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3615-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST access:0x000F003F 0x00000000 [操作成功完成。 ] 3616-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3617-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3618-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3619-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3620-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3621-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3622-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3623-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3624-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\KNOWNGAMELIST\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3625-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3626-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3627-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3628-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3629-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER access:0x000F003F 0x00000000 [操作成功完成。 ] 3630-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3631-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3632-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3633-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3634-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3635-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3636-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3637-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3638-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RESERVEMANAGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3639-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3640-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3641-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3642-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3643-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS access:0x000F003F 0x00000000 [操作成功完成。 ] 3644-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3645-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3646-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3647-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3648-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3649-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3650-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3651-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3652-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UUS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3653-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3654-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3655-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3656-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3657-06:07:53.9144744 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC access:0x000F003F 0x00000000 [操作成功完成。 ] 3658-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3659-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3660-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3661-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3662-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3663-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3664-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3665-06:07:53.9144744 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3666-06:07:53.9164758 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3667-06:07:53.9164758 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3668-06:07:53.9164758 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASMEDIC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3669-06:07:53.9164758 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3670-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3671-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3672-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3673-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE access:0x000F003F 0x00000000 [操作成功完成。 ] 3674-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3675-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3676-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3677-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3678-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3679-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3680-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3681-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3682-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3683-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3684-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3685-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3686-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3687-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3688-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MUSE\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3689-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3690-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3691-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3692-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3693-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER access:0x000F003F 0x00000000 [操作成功完成。 ] 3694-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3695-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3696-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3697-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3698-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3699-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3700-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3701-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3702-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATLOGGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3703-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3704-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3705-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3706-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3707-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER access:0x000F003F 0x00000000 [操作成功完成。 ] 3708-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3709-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3710-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3711-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3712-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3713-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3714-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3715-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3716-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FILTERMANAGER\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3717-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3718-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3719-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3720-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3721-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING access:0x000F003F 0x00000000 [操作成功完成。 ] 3722-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3723-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3724-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3725-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3726-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3727-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3728-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3729-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3730-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\APPARCHIVING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3731-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3732-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3733-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3734-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3735-06:07:53.9184771 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT access:0x000F003F 0x00000000 [操作成功完成。 ] 3736-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3737-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3738-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3739-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3740-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3741-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3742-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3743-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3744-06:07:53.9184771 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3745-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_EXT\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3746-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3747-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3748-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3749-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3750-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3751-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3752-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3753-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3754-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3755-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3756-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3757-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3758-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3759-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3760-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3761-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3762-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT access:0x000F003F 0x00000000 [操作成功完成。 ] 3763-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3764-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3765-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3766-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3767-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3768-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3769-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3770-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3771-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3772-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3773-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IRISCLIENT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3774-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3775-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3776-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3777-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3778-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3779-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3780-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3781-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3782-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3783-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3784-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3785-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3786-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3787-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3788-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3789-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3790-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD access:0x000F003F 0x00000000 [操作成功完成。 ] 3791-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3792-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3793-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3794-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3795-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3796-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3797-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3798-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3799-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3800-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MLMOD\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3801-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3802-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3803-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3804-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3805-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA access:0x000F003F 0x00000000 [操作成功完成。 ] 3806-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3807-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3808-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3809-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3810-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3811-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3812-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3813-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3814-06:07:53.9204786 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\IDSPCA\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3815-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3816-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3817-06:07:53.9204786 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3818-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3819-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR access:0x000F003F 0x00000000 [操作成功完成。 ] 3820-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3821-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3822-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3823-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3824-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3825-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3826-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3827-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3828-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3829-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3830-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3831-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\TASKMGR\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3832-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3833-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3834-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3835-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3836-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP access:0x000F003F 0x00000000 [操作成功完成。 ] 3837-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3838-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3839-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3840-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3841-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3842-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3843-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3844-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3845-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CORTANAUWP\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3846-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3847-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3848-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3849-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3850-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN access:0x000F003F 0x00000000 [操作成功完成。 ] 3851-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3852-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3853-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3854-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3855-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3856-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3857-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3858-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3859-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\RECYCLEANDTRADEIN\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3860-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3861-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3862-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3863-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3864-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3865-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3866-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3867-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3868-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3869-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3870-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3871-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3872-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3873-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3874-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3875-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3876-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT access:0x000F003F 0x00000000 [操作成功完成。 ] 3877-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3878-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3879-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3880-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3881-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3882-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3883-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3884-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3885-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3886-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3887-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3888-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3889-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3890-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3891-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3892-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3893-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation access:0x00020019 0x00000000 [操作成功完成。 ] 3894-06:07:53.9224800 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3895-06:07:53.9224800 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3896-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 3897-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System\AllowExperimentation type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3898-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WCXSMARTOPTOUT\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3899-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3900-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3901-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3902-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3903-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE access:0x000F003F 0x00000000 [操作成功完成。 ] 3904-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3905-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3906-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3907-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3908-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3909-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3910-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3911-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3912-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\MICROSOFTSTORE\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3913-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3914-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3915-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3916-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3917-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS access:0x000F003F 0x00000000 [操作成功完成。 ] 3918-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3919-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3920-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3921-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastRefreshByApp type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3922-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3923-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3924-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3925-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3926-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3927-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3928-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\FSS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3929-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3930-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3931-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3932-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3933-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB access:0x000F003F 0x00000000 [操作成功完成。 ] 3934-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3935-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagBackup type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3936-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagValidated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3937-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\ETagAcknowledged type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3938-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3939-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3940-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3941-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3942-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3943-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3944-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3945-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3946-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\DXDB\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3947-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3948-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3949-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3950-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3951-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING access:0x000F003F 0x00000000 [操作成功完成。 ] 3952-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3953-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3954-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3955-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3956-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3957-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3958-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3959-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3960-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COMPATINSTALLTRACING\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3961-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3962-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3963-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3964-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3965-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT access:0x000F003F 0x00000000 [操作成功完成。 ] 3966-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3967-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3968-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3969-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3970-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3971-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3972-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3973-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3974-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WAASASSESSMENT\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3975-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3976-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3977-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3978-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3979-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC access:0x000F003F 0x00000000 [操作成功完成。 ] 3980-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3981-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3982-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3983-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3984-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3985-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3986-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3987-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3988-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\SCCINSTALLSVC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3989-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 3990-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 3991-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 3992-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3993-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS access:0x000F003F 0x00000000 [操作成功完成。 ] 3994-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3995-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3996-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3997-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3998-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 3999-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4000-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4001-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4002-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4003-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\COAWOS\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4004-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4005-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 4006-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 4007-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4008-06:07:53.9244814 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD access:0x000F003F 0x00000000 [操作成功完成。 ] 4009-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4010-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4011-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4012-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4013-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4014-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4015-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4016-06:07:53.9244814 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4017-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4018-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\WHESVC_MOD\LastNotification type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4019-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4020-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 4021-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 4022-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4023-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD access:0x000F003F 0x00000000 [操作成功完成。 ] 4024-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4025-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4026-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4027-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4028-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4029-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4030-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4031-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4032-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\UCPD\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4033-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4034-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent access:0x000F003F 0x00000000 [操作成功完成。 ] 4035-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState access:0x000F003F 0x00000000 [操作成功完成。 ] 4036-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\PreMigration type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4037-06:07:53.9281416 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC access:0x000F003F 0x00000000 [操作成功完成。 ] 4038-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\ETag type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4039-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUpdated type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4040-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastRefreshAttempted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4041-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\RefreshInterval type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4042-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastHTTPCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4043-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastDeviceTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4044-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastUserTokenResult type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4045-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\QueryStringHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4046-06:07:53.9281416 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Wosc\Client\Persistent\ClientState\CTAC\LastPayload type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4047-06:07:53.9281416 svchost.exe 4248 FILE_open C:\ProgramData\Microsoft\Windows\OneSettings\CTAC.json access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4048-06:07:53.9281416 svchost.exe 4248 FILE_read C:\ProgramData\Microsoft\Windows\OneSettings\CTAC.json offset:0x00000000 datalen:0x00000004 0x00000000 [操作成功完成。 ] 4049-06:07:53.9281416 svchost.exe 4248 FILE_read C:\ProgramData\Microsoft\Windows\OneSettings\CTAC.json offset:0x00000000 datalen:0x0001D5E4 0x00000000 [操作成功完成。 ] 4050-06:07:53.9307179 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 4051-06:07:53.9307179 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4052-06:07:53.9307179 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 4053-06:07:53.9347212 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.StringMap access:0x00020019 0x00000000 [操作成功完成。 ] 4054-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.StringMap\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4055-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.StringMap\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4056-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.StringMap\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4057-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.StringMap\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4058-06:07:53.9347212 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue access:0x00020019 0x00000000 [操作成功完成。 ] 4059-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4060-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4061-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4062-06:07:53.9347212 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Data.Json.JsonValue\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4063-06:07:53.9367225 svchost.exe 4248 FILE_open C:\Windows\System32\utcutil.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4064-06:07:53.9367225 svchost.exe 4248 EXEC_module_load C:\Windows\System32\utcutil.dll base:0x00007FFABCA50000 size:0x00028000 0x00000000 [操作成功完成。 ] 4065-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4066-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4067-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 4068-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 4069-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4070-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x00000001 0x00000000 [操作成功完成。 ] 4071-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4072-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient access:0x00000001 0x00000000 [操作成功完成。 ] 4073-06:07:53.9367225 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\MachineId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4074-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4075-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC access:0x00000001 0x00000000 [操作成功完成。 ] 4076-06:07:53.9367225 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC\RacSampleNumber type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4077-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM access:0x00020019 0x00000000 [操作成功完成。 ] 4078-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM access:0x00020019 0x00000000 [操作成功完成。 ] 4079-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4080-06:07:53.9367225 svchost.exe 4248 FILE_open C:\Windows\System32\dcntel.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4081-06:07:53.9367225 svchost.exe 4248 EXEC_module_load C:\Windows\System32\dcntel.dll base:0x00007FFA9AA80000 size:0x001C8000 0x00000000 [操作成功完成。 ] 4082-06:07:53.9367225 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 4083-06:07:53.9392134 svchost.exe 4248 FILE_open C:\Windows\System32\dcntel.dll access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4084-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM access:0x00020019 0x00000000 [操作成功完成。 ] 4085-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4086-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 access:0x00000001 0x00000000 [操作成功完成。 ] 4087-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4088-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4089-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00000001 0x00000000 [操作成功完成。 ] 4090-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BuildLabEx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4091-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4092-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00000001 0x00000000 [操作成功完成。 ] 4093-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4094-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4095-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00000001 0x00000000 [操作成功完成。 ] 4096-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BuildBranch type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4097-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338} access:0x00020019 0x00000000 [操作成功完成。 ] 4098-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4099-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32 access:0x00020019 0x00000000 [操作成功完成。 ] 4100-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4101-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4102-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3185a766-b338-11e4-a71e-12e3f512a338}\InprocServer32\ThreadingModel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4103-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4104-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 4105-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\FlightSettingsVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4106-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4107-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 4108-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4109-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 4110-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4111-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 4112-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4113-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 4114-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\IsBuildUnsupported type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4115-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4116-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4117-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4118-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 4119-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4120-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4121-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4122-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4123-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4124-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 4125-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4126-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4127-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4128-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 4129-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4130-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4131-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4132-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4133-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4134-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 4135-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4136-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4137-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4138-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4139-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 4140-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4141-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState access:0x00000001 0x00000000 [操作成功完成。 ] 4142-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState\PilotInfoRing type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4143-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4144-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState access:0x00000001 0x00000000 [操作成功完成。 ] 4145-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState\ErrorState type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4146-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4147-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 4148-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4149-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings access:0x00000001 0x00000000 [操作成功完成。 ] 4150-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\OneSettings\IsBuildUnsupported type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4151-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4152-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4153-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4154-06:07:53.9392134 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 4155-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4156-06:07:53.9392134 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4157-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4158-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4159-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4160-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds access:0x00020019 0x00000000 [操作成功完成。 ] 4161-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ManagePreviewBuilds\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4162-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4163-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4164-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 4165-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4166-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4167-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4168-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4169-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4170-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview access:0x00020019 0x00000000 [操作成功完成。 ] 4171-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\AllowBuildPreview\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4172-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4173-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4174-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4175-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00000001 0x00000000 [操作成功完成。 ] 4176-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4177-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient access:0x00000001 0x00000000 [操作成功完成。 ] 4178-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4179-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient access:0x00000001 0x00000000 [操作成功完成。 ] 4180-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be} access:0x00020019 0x00000000 [操作成功完成。 ] 4181-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4182-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32 access:0x00020019 0x00000000 [操作成功完成。 ] 4183-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4184-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4185-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b31c57ac-4a31-470f-bbee-dba1e5b246be}\InprocServer32\ThreadingModel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4186-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4187-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs access:0x00020019 0x00000000 [操作成功完成。 ] 4188-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID access:0x00020019 0x00000000 [操作成功完成。 ] 4189-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\Unknown access:0x00020019 0x00000000 [操作成功完成。 ] 4190-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4191-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4192-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4193-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4194-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4195-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build access:0x00020019 0x00000000 [操作成功完成。 ] 4196-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4197-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\Build access:0x00020019 0x00000000 [操作成功完成。 ] 4198-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\OSVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4199-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4200-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\FlightVersionMapping\10.0.26200.7922 access:0x00020019 0x00000000 [操作成功完成。 ] 4201-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\FlightVersionMapping\10.0.26200.7922\FlightID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4202-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC access:0x000F003F 0x00000000 [操作成功完成。 ] 4203-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC\CurrentState type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4204-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC\FlightID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4205-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC\FlightType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4206-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC\InstallationTS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4207-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\ByFID\TS:81D08ABC\LastChangeTS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4208-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4209-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4210-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4211-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4212-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4213-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build access:0x00020019 0x00000000 [操作成功完成。 ] 4214-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4215-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\FIDs\Build access:0x00020019 0x00000000 [操作成功完成。 ] 4216-06:07:53.9423096 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\OSVersion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4217-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4218-06:07:53.9423096 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\FlightVersionMapping\10.0.26200.7922 access:0x00020019 0x00000000 [操作成功完成。 ] 4219-06:07:53.9440481 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Flighting\Build\FlightVersionMapping\10.0.26200.7922\FlightID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4220-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager access:0x00020019 0x00000000 [操作成功完成。 ] 4221-06:07:53.9440481 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4222-06:07:53.9440481 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4223-06:07:53.9440481 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4224-06:07:53.9440481 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4225-06:07:53.9440481 svchost.exe 4248 FILE_open C:\Windows\System32\fcon.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4226-06:07:53.9440481 svchost.exe 4248 EXEC_module_load C:\Windows\System32\fcon.dll base:0x00007FFAB0090000 size:0x000F6000 0x00000000 [操作成功完成。 ] 4227-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4228-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4229-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4230-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 4231-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4232-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability access:0x00020019 0x00000000 [操作成功完成。 ] 4233-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4234-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00000001 0x00000000 [操作成功完成。 ] 4235-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4236-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection access:0x00000001 0x00000000 [操作成功完成。 ] 4237-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4238-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4239-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4240-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient access:0x00000001 0x00000000 [操作成功完成。 ] 4241-06:07:53.9440481 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4242-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00000001 0x00000000 [操作成功完成。 ] 4243-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowTelemetry type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4244-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4245-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection\Users access:0x00020019 0x00000000 [操作成功完成。 ] 4246-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4247-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx access:0x00020019 0x00000000 [操作成功完成。 ] 4248-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4249-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4250-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4251-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\grouppolicyname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4252-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\grouppolicypath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4253-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4254-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4255-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4256-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4257-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx access:0x00020019 0x00000000 [操作成功完成。 ] 4258-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\ConfigureTelemetryOptInSettingsUx\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4259-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4260-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4261-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4262-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4263-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4264-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4265-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4266-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x000F003F 0x00000000 [操作成功完成。 ] 4267-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\SecurityApplied access:0x00000001 0x00000000 [操作成功完成。 ] 4268-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store access:0x000F003F 0x00000000 [操作成功完成。 ] 4269-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\SecurityApplied access:0x00000001 0x00000000 [操作成功完成。 ] 4270-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4271-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4272-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store access:0x00020019 0x00000000 [操作成功完成。 ] 4273-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4274-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry access:0x000F003F 0x00000000 [操作成功完成。 ] 4275-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry\SecurityApplied access:0x00000001 0x00000000 [操作成功完成。 ] 4276-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4277-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4278-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4279-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess access:0x00020019 0x00000000 [操作成功完成。 ] 4280-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\ActivePolicyCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4281-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4282-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4283-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Edition\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4284-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4285-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4286-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry\LegacyProjection type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4287-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4288-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4289-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4290-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4291-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess access:0x00020019 0x00000000 [操作成功完成。 ] 4292-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\ActivePolicyCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4293-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4294-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4295-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Edition\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4296-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4297-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4298-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry\StaticMigrationPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4299-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry\LegacyKeyName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4300-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry\LegacyKeyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4301-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4302-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4303-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4304-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection access:0x000F003F 0x00000000 [操作成功完成。 ] 4305-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection\AllowTelemetry type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4306-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4307-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4308-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4309-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess access:0x00020019 0x00000000 [操作成功完成。 ] 4310-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\ActivePolicyCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4311-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4312-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4313-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Edition\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4314-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4315-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4316-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry\LegacyProjection type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4317-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4318-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4319-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4320-06:07:53.9460499 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess access:0x00020019 0x00000000 [操作成功完成。 ] 4321-06:07:53.9460499 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\ActivePolicyCode type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4322-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4323-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS access:0x00020019 0x00000000 [操作成功完成。 ] 4324-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Edition\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4325-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry access:0x00020019 0x00000000 [操作成功完成。 ] 4326-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4327-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\RegionalSettings access:0x00000001 0x00000000 [操作成功完成。 ] 4328-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4329-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack access:0x00000001 0x00000000 [操作成功完成。 ] 4330-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\UtcDataHandlingPolicies type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4331-06:07:53.9480513 svchost.exe 4248 FILE_open C:\Windows\System32\windowsudk.shellcommon.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4332-06:07:53.9480513 svchost.exe 4248 EXEC_module_load C:\Windows\System32\windowsudk.shellcommon.dll base:0x00007FFAA20E0000 size:0x00647000 0x00000000 [操作成功完成。 ] 4333-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4334-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00000001 0x00000000 [操作成功完成。 ] 4335-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4336-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4337-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00000001 0x00000000 [操作成功完成。 ] 4338-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4339-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4340-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager access:0x00000001 0x00000000 [操作成功完成。 ] 4341-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsUdk.System.Profile.HardwareRequirements access:0x00020019 0x00000000 [操作成功完成。 ] 4342-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsUdk.System.Profile.HardwareRequirements\ActivationType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4343-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsUdk.System.Profile.HardwareRequirements\DllPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4344-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsUdk.System.Profile.HardwareRequirements\Threading type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4345-06:07:53.9480513 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\WindowsUdk.System.Profile.HardwareRequirements\TrustLevel type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4346-06:07:53.9480513 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4347-06:07:53.9480513 svchost.exe 4248 FILE_open C:\Windows\System32\DXCore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4348-06:07:53.9480513 svchost.exe 4248 EXEC_module_load C:\Windows\System32\DXCore.dll base:0x00007FFAC0080000 size:0x00043000 0x00000000 [操作成功完成。 ] 4349-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 access:0x02020019 0x00000000 [操作成功完成。 ] 4350-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4351-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4352-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 access:0x02020019 0x00000000 [操作成功完成。 ] 4353-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4354-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4355-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender access:0x02020019 0x00000000 [操作成功完成。 ] 4356-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender access:0x02020019 0x00000000 [操作成功完成。 ] 4357-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 access:0x02020019 0x00000000 [操作成功完成。 ] 4358-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4359-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4360-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 access:0x02020019 0x00000000 [操作成功完成。 ] 4361-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4362-06:07:53.9527552 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\DXCoreAttributes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4363-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender access:0x02020019 0x00000000 [操作成功完成。 ] 4364-06:07:53.9527552 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender access:0x02020019 0x00000000 [操作成功完成。 ] 4365-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4366-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 4367-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4368-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 4369-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4370-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 4371-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4372-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 4373-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4374-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4375-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4376-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4377-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 4378-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4379-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 4380-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4381-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 4382-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4383-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 4384-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4385-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads access:0x00020019 0x00000000 [操作成功完成。 ] 4386-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4387-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4388-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4389-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\RegKeyPathRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4390-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\RegValueNameRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4391-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4392-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4393-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads access:0x00020019 0x00000000 [操作成功完成。 ] 4394-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4395-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4396-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4397-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4398-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4399-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4400-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4401-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4402-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4403-06:07:53.9596822 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 4404-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4405-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\PolicyExtensions access:0x00020019 0x00000000 [操作成功完成。 ] 4406-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\PolicyExtensions\MpeHttpExt.dll access:0x00020019 0x00000000 [操作成功完成。 ] 4407-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\PolicyExtensions\MpeHttpExt.dll\PolicySubPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4408-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\PolicyExtensions\TenantRestrictionsPlugin.dll access:0x00020019 0x00000000 [操作成功完成。 ] 4409-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\PolicyExtensions\TenantRestrictionsPlugin.dll\PolicySubPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4410-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4411-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload access:0x00000001 0x00000000 [操作成功完成。 ] 4412-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4413-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows access:0x00020019 0x00000000 [操作成功完成。 ] 4414-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4415-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload access:0x00000001 0x00000000 [操作成功完成。 ] 4416-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4417-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4418-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\MpeHttpExt\Payload access:0x00000001 0x00000000 [操作成功完成。 ] 4419-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows access:0x00020019 0x00000000 [操作成功完成。 ] 4420-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4421-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4422-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TenantRestrictions\Payload access:0x00000001 0x00000000 [操作成功完成。 ] 4423-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4424-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4425-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 4426-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 4427-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections access:0x00000001 0x00000000 [操作成功完成。 ] 4428-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4429-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4430-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4431-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4432-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4433-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4434-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 4435-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 4436-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4437-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings access:0x0002001F 0x00000000 [操作成功完成。 ] 4438-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections access:0x0002001F 0x00000000 [操作成功完成。 ] 4439-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\MigrateProxy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4440-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4441-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4442-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4443-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4444-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4445-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 4446-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 4447-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4448-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4449-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4450-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4451-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4452-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4453-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4454-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4455-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4456-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4457-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4458-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4459-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4460-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4461-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4462-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 4463-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4464-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4465-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 4466-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 4467-06:07:53.9596822 svchost.exe 4248 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4468-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4469-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4470-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PeerDist\Service access:0x00020019 0x00000000 [操作成功完成。 ] 4471-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4472-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp access:0x00000001 0x00000000 [操作成功完成。 ] 4473-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4474-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp access:0x00000001 0x00000000 [操作成功完成。 ] 4475-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4476-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4477-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 4478-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 4479-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4480-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 4481-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 4482-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 4483-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4484-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4485-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4486-06:07:53.9596822 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers access:0x00020019 0x00000000 [操作成功完成。 ] 4487-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4488-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4489-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4490-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4491-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4492-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4493-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4494-06:07:53.9596822 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4495-06:07:53.9596822 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 4496-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4497-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4498-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4499-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4500-06:07:53.9596822 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4501-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4502-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4503-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4504-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4505-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4506-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4507-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4508-06:07:53.9596822 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4509-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 4510-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 4511-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4512-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4513-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 4514-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4515-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 4516-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4517-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 4518-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4519-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4520-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4521-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4522-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4523-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4524-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4525-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4526-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4527-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4528-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4529-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4530-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4531-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4532-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4533-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4534-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4535-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4536-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4537-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4538-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4539-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4540-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4541-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4542-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4543-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4544-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4545-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4546-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4547-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4548-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4549-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4550-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4551-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4552-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4553-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4554-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4555-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4556-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4557-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4558-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4559-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4560-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4561-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4562-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 4563-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4564-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4565-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4566-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4567-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4568-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4569-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4570-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4571-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4572-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4573-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4574-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 4575-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4576-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4577-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4578-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4579-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 4580-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4581-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4582-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4583-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 4584-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4585-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4586-06:07:53.9596822 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4587-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 4588-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 4589-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4590-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4591-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4592-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4593-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4594-06:07:53.9596822 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4595-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4596-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 4597-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4598-06:07:53.9596822 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4599-06:07:53.9596822 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4600-06:07:53.9596822 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 4601-06:07:53.9596822 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 4602-06:07:53.9596822 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 4603-06:07:53.9758313 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4776 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 4604-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 4605-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 4606-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4607-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 4608-06:07:53.9758313 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4609-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4610-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4611-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4612-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4613-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 4614-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4615-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 4616-06:07:53.9758313 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4617-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4618-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4619-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4620-06:07:53.9758313 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 4621-06:07:53.9758313 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4622-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4623-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 4624-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4625-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4626-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 4627-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 4628-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 4629-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4630-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4631-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4632-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4633-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 4634-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 4635-06:07:53.9758313 svchost.exe 4776 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 4636-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4637-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 4638-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 4639-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4640-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 4641-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 4642-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4643-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4644-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 4645-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 4646-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 4647-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4648-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 4649-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4650-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 4651-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4652-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4653-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4654-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4655-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4656-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 4657-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4658-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 4659-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 4660-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4661-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 4662-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4663-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 4664-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4665-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 4666-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4667-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 4668-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 4669-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 4670-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 4671-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 4672-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4673-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4674-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4675-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 4676-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 4677-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 4678-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4679-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 4680-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4681-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 4682-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4683-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4684-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 4685-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 4686-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4687-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 4688-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4689-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 4690-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4691-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4692-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4693-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4694-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 4695-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 4696-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 4697-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 4698-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 4699-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 4700-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4701-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 4702-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4703-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4704-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 4705-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 4706-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4707-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 4708-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4709-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4710-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4711-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4712-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4713-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 4714-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4715-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4716-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 4717-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 4718-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4719-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4720-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4721-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 4722-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 4723-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 4724-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4725-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4726-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 4727-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4728-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 4729-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 4730-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 4731-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 4732-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4733-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4734-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4735-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 4736-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4737-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 4738-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4739-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4740-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4741-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 4742-06:07:53.9758313 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4743-06:07:53.9758313 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4744-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4745-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 4746-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4747-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4748-06:07:53.9758313 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4749-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4750-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 4751-06:07:53.9758313 svchost.exe 4776 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4752-06:07:53.9758313 svchost.exe 4776 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 4753-06:07:53.9758313 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 4754-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4755-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 4756-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4757-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 4758-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4759-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4760-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4761-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4762-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 4763-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4764-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4765-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 4766-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4767-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4768-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4769-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4770-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 4771-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 4772-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4773-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4774-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4775-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 4776-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4777-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4778-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4779-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4780-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 4781-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 4782-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4783-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 4784-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4785-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 4786-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4787-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 4788-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4789-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 4790-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4791-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 4792-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4793-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 4794-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4795-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 4796-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4797-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 4798-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4799-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 4800-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4801-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 4802-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4803-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 4804-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4805-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 4806-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4807-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 4808-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4809-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 4810-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4811-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4812-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4813-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 4814-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 4815-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4816-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4817-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4818-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4819-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4820-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4821-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4822-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4823-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4824-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4825-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4826-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4827-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 4828-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4829-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4830-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4831-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4832-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4833-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4834-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4835-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4836-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4837-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4838-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4839-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4840-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 4841-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4842-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4843-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4844-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4845-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4846-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4847-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4848-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4849-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4850-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4851-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4852-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4853-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 4854-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4855-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4856-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4857-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4858-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4859-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4860-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4861-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4862-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4863-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4864-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4865-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4866-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 4867-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4868-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4869-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4870-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4871-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4872-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4873-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4874-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4875-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4876-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4877-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4878-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4879-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 4880-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4881-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4882-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4883-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4884-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4885-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4886-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4887-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4888-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4889-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4890-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4891-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4892-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 4893-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4894-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4895-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4896-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4897-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4898-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4899-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4900-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4901-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4902-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4903-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4904-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4905-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4906-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 4907-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4908-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4909-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4910-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4911-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4912-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 4913-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 4914-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 4915-06:07:53.9915796 svchost.exe 4776 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4916-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4917-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 4918-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4919-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 4920-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4921-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 4922-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 4923-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4924-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 4925-06:07:53.9915796 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 4926-06:07:53.9915796 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 4927-06:07:53.9915796 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4928-06:07:53.9915796 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 4929-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4930-06:07:53.9915796 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 4931-06:07:53.9915796 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 4932-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 4933-06:07:53.9915796 svchost.exe 4776 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 4934-06:07:53.9915796 svchost.exe 4776 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 4935-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4936-06:07:53.9915796 svchost.exe 4776 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 4937-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4938-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing access:0x00020019 0x00000000 [操作成功完成。 ] 4939-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4940-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4941-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4942-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\RegKeyPathRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4943-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\RegValueNameRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4944-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4945-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4946-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing access:0x00020019 0x00000000 [操作成功完成。 ] 4947-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4948-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4949-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4950-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4951-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 4952-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4953-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 4954-06:07:53.9915796 svchost.exe 4248 FILE_remove C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.allow.json.new - 0x00000000 [操作成功完成。 ] 4955-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4956-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack access:0x00000002 0x00000000 [操作成功完成。 ] 4957-06:07:53.9915796 svchost.exe 4248 REG_rmval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\UnexpectedStopsSinceSettingsDownload keyname:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack 0x00000000 [操作成功完成。 ] 4958-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 4959-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 4960-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4961-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 4962-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 4963-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 4964-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4965-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4966-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData access:0x0002001B 0x00000000 [操作成功完成。 ] 4967-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\TickCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4968-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\ClockTimeSeconds type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4969-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 4970-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 4971-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 4972-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceTicket type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4973-06:07:53.9915796 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 4974-06:07:53.9915796 svchost.exe 4776 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 4975-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4976-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4977-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4978-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4979-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 4980-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 4981-06:07:53.9915796 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 4982-06:07:53.9915796 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property\0018000C08E0F97E type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4983-06:07:53.9915796 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 4984-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4985-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4986-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4987-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4988-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4989-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4990-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4991-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4992-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 4993-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4994-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4995-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 4996-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 4997-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 4998-06:07:53.9915796 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 4999-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5000-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5001-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5002-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5003-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 5004-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5005-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5006-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5007-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5008-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5009-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 5010-06:07:53.9915796 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5011-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5012-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 5013-06:07:53.9915796 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5014-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5015-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5016-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 5017-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 5018-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5019-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5020-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5021-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5022-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5023-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5024-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5025-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5026-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 5027-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5028-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 5029-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5030-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 5031-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5032-06:07:53.9915796 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 5033-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5034-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5035-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5036-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5037-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5038-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5039-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5040-06:07:54.0074428 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5041-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5042-06:07:54.0074428 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 5043-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5044-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 5045-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5046-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5047-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 5048-06:07:54.0074428 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AmiHivePermissionsCorrect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5049-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5050-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5051-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5052-06:07:54.0074428 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 5053-06:07:54.0074428 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AmiHiveOwnerCorrect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5054-06:07:54.0074428 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5055-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5056-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5057-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5058-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5059-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5060-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5061-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5062-06:07:54.0074428 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5063-06:07:54.0074428 svchost.exe 4248 FILE_open C:\Windows\appcompat\Programs\Amcache.hve access:0x00020003 alloc_size:0 attrib:0x00000000 share_access:0x00000000 disposition:0x00000003 options:0x00008024 0x00000000 [操作成功完成。 ] 5064-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 5065-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 5066-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5067-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5068-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5069-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5070-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5071-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5072-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 5073-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5074-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5075-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5076-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5077-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5078-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5079-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5080-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5081-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5082-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5083-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5084-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5085-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5086-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5087-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5088-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5089-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5090-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5091-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5092-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5093-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5094-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5095-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5096-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5097-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5098-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5099-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5100-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5101-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5102-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5103-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5104-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5105-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5106-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5107-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5108-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5109-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5110-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5111-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5112-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5113-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5114-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5115-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5116-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5117-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5118-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5119-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5120-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5121-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5122-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5123-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5124-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5125-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5126-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5127-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5128-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5129-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5130-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5131-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5132-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5133-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5134-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 5135-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5136-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5137-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5138-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 5139-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5140-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5141-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5142-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 5143-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 5144-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5145-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5146-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5147-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5148-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5149-06:07:54.0074428 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5150-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5151-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 5152-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5153-06:07:54.0074428 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5154-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5155-06:07:54.0074428 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 5156-06:07:54.0074428 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 5157-06:07:54.0074428 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 5158-06:07:54.0074428 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4736 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 5159-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 5160-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 5161-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5162-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 5163-06:07:54.0074428 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5164-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5165-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5166-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5167-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5168-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 5169-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5170-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 5171-06:07:54.0074428 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5172-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5173-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5174-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5175-06:07:54.0074428 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5176-06:07:54.0074428 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5177-06:07:54.0074428 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5178-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 5179-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5180-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5181-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 5182-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5183-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 5184-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5185-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5186-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5187-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5188-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 5189-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 5190-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5191-06:07:54.0074428 svchost.exe 4736 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 5192-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 5193-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 5194-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5195-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 5196-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 5197-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5198-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5199-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5200-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5201-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5202-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5203-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 5204-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5205-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 5206-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5207-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5208-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5209-06:07:54.0074428 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5210-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5211-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 5212-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5213-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 5214-06:07:54.0074428 svchost.exe 4736 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 5215-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5216-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5217-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5218-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5219-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5220-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5221-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5222-06:07:54.0074428 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 5223-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5224-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5225-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 5226-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 5227-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5228-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5229-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5230-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 5231-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 5232-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 5233-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5234-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5235-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5236-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 5237-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5238-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5239-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 5240-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 5241-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5242-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 5243-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5244-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 5245-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5246-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5247-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5248-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5249-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 5250-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 5251-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 5252-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 5253-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 5254-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 5255-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5256-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 5257-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5258-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5259-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 5260-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 5261-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5262-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 5263-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5264-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5265-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5266-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5267-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5268-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 5269-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5270-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5271-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5272-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 5273-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5274-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5275-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5276-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5277-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 5278-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 5279-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5280-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5281-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 5282-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5283-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 5284-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 5285-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5286-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5287-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5288-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5289-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5290-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 5291-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5292-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5293-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5294-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5295-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5296-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 5297-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5298-06:07:54.0231742 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5299-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5300-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5301-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5302-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5303-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5304-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5305-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 5306-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5307-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 5308-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5309-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5310-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 5311-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5312-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5313-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5314-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5315-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5316-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5317-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5318-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5319-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5320-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 5321-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5322-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5323-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5324-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5325-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 5326-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 5327-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5328-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5329-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5330-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 5331-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5332-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5333-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5334-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5335-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 5336-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 5337-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5338-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 5339-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5340-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 5341-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5342-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 5343-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5344-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 5345-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5346-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 5347-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5348-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 5349-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5350-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 5351-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5352-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 5353-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5354-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 5355-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5356-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 5357-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5358-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 5359-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5360-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 5361-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5362-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 5363-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5364-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 5365-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5366-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5367-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5368-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 5369-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 5370-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5371-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5372-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5373-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5374-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5375-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5376-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5377-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5378-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5379-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5380-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5381-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5382-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 5383-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5384-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5385-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5386-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5387-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5388-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5389-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5390-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5391-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5392-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5393-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5394-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5395-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 5396-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5397-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5398-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5399-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5400-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5401-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5402-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5403-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5404-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5405-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5406-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5407-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5408-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 5409-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5410-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5411-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5412-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5413-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5414-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5415-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5416-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5417-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5418-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5419-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5420-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5421-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 5422-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5423-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5424-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5425-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5426-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5427-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5428-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5429-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5430-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5431-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5432-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5433-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5434-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 5435-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5436-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5437-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5438-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5439-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5440-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5441-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5442-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5443-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5444-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5445-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5446-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5447-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 5448-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5449-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5450-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5451-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5452-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5453-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5454-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5455-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5456-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5457-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5458-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5459-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5460-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5461-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 5462-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5463-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5464-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5465-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5466-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 5467-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5468-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5469-06:07:54.0231742 svchost.exe 4736 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5470-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5471-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 5472-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5473-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 5474-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5475-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 5476-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 5477-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5478-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 5479-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5480-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5481-06:07:54.0231742 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5482-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5483-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5484-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5485-06:07:54.0231742 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5486-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 5487-06:07:54.0231742 svchost.exe 4736 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5488-06:07:54.0231742 svchost.exe 4736 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 5489-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5490-06:07:54.0231742 svchost.exe 4736 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 5491-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5492-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5493-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5494-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18 access:0x00020019 0x00000000 [操作成功完成。 ] 5495-06:07:54.0391760 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18\DeviceLicenseUpdateFailureCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5496-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5497-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5498-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5499-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5500-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5501-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5502-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5503-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5504-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5505-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 5506-06:07:54.0391760 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5507-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5508-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\International access:0x00020019 0x00000000 [操作成功完成。 ] 5509-06:07:54.0391760 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5510-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5511-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5512-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5513-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5514-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 5515-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5516-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5517-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5518-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5519-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5520-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 5521-06:07:54.0391760 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5522-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5523-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 5524-06:07:54.0391760 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5525-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5526-06:07:54.0391760 svchost.exe 4736 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 5527-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5528-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 5529-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 5530-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5531-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5532-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5533-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5534-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5535-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5536-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 5537-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5538-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 5539-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5540-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 5541-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5542-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 5543-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 5544-06:07:54.0391760 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 5545-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5546-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5547-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5548-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5549-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5550-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5551-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5552-06:07:54.0391760 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5553-06:07:54.0391760 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 5554-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5555-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5556-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5557-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5558-06:07:54.0391760 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5559-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5560-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5561-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5562-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5563-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5564-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5565-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5566-06:07:54.0391760 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5567-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 5568-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 5569-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5570-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5571-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5572-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5573-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5574-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5575-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 5576-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5577-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5578-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5579-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5580-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5581-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5582-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5583-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5584-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5585-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5586-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5587-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5588-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5589-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5590-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5591-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5592-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5593-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5594-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5595-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5596-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5597-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5598-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5599-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5600-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5601-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5602-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5603-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5604-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5605-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5606-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5607-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5608-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5609-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5610-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5611-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5612-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5613-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5614-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5615-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5616-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5617-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5618-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5619-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5620-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 5621-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5622-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5623-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5624-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5625-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5626-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5627-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5628-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5629-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5630-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5631-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5632-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 5633-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5634-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5635-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5636-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5637-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 5638-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5639-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5640-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5641-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 5642-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5643-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5644-06:07:54.0391760 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5645-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 5646-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 5647-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5648-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5649-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5650-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5651-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5652-06:07:54.0391760 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5653-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5654-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 5655-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5656-06:07:54.0391760 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5657-06:07:54.0391760 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5658-06:07:54.0391760 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 5659-06:07:54.0391760 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 5660-06:07:54.0391760 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 5661-06:07:54.0391760 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:4060 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 5662-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 5663-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 5664-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5665-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 5666-06:07:54.0548849 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5667-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5668-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5669-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5670-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5671-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 5672-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5673-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 5674-06:07:54.0548849 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5675-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5676-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5677-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5678-06:07:54.0548849 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 5679-06:07:54.0548849 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5680-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5681-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 5682-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5683-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5684-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 5685-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5686-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 5687-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5688-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5689-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5690-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5691-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 5692-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 5693-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5694-06:07:54.0548849 svchost.exe 4060 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 5695-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 5696-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 5697-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5698-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 5699-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 5700-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5701-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5702-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5703-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5704-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5705-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5706-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 5707-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5708-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 5709-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5710-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5711-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5712-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5713-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5714-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 5715-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5716-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 5717-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 5718-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5719-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5720-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5721-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5722-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5723-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5724-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5725-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 5726-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 5727-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 5728-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 5729-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 5730-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5731-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5732-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5733-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 5734-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 5735-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 5736-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5737-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5738-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5739-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 5740-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5741-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5742-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 5743-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 5744-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5745-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 5746-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5747-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 5748-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5749-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5750-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5751-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5752-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 5753-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 5754-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 5755-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 5756-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 5757-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 5758-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5759-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 5760-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5761-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5762-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 5763-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 5764-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5765-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 5766-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5767-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5768-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5769-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5770-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5771-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 5772-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5773-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5774-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 5775-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 5776-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5777-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5778-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5779-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 5780-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 5781-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 5782-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5783-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5784-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 5785-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5786-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 5787-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 5788-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5789-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 5790-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5791-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5792-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5793-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 5794-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5795-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5796-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5797-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5798-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5799-06:07:54.0548849 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5800-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 5801-06:07:54.0548849 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5802-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5803-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5804-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5805-06:07:54.0548849 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5806-06:07:54.0548849 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5807-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5808-06:07:54.0548849 svchost.exe 4060 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 5809-06:07:54.0548849 svchost.exe 4060 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5810-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 5811-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 5812-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5813-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 5814-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5815-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5816-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5817-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5818-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5819-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5820-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 5821-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5822-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5823-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 5824-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5825-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5826-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5827-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5828-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 5829-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 5830-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5831-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5832-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5833-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 5834-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5835-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5836-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5837-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5838-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 5839-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 5840-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5841-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 5842-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5843-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 5844-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5845-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 5846-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5847-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 5848-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5849-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 5850-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5851-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 5852-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5853-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 5854-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5855-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 5856-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5857-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 5858-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5859-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 5860-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5861-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 5862-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5863-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 5864-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5865-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 5866-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5867-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 5868-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5869-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5870-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5871-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 5872-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 5873-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5874-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5875-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5876-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5877-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5878-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5879-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5880-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5881-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5882-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5883-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5884-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5885-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 5886-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5887-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5888-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5889-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5890-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5891-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5892-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5893-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5894-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5895-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5896-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5897-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5898-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 5899-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5900-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5901-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5902-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5903-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5904-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5905-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5906-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5907-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5908-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5909-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5910-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5911-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 5912-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5913-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5914-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5915-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5916-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5917-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5918-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5919-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5920-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5921-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5922-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5923-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5924-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 5925-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5926-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5927-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5928-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5929-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5930-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5931-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5932-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5933-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5934-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5935-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5936-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5937-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 5938-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5939-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5940-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5941-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5942-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5943-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5944-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5945-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5946-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5947-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5948-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5949-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5950-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 5951-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5952-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5953-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5954-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5955-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5956-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5957-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5958-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5959-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5960-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5961-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5962-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5963-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5964-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 5965-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5966-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5967-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5968-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5969-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 5970-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5971-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 5972-06:07:54.0705164 svchost.exe 4060 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5973-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5974-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 5975-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5976-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 5977-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5978-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 5979-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 5980-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5981-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 5982-06:07:54.0705164 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 5983-06:07:54.0705164 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 5984-06:07:54.0705164 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 5985-06:07:54.0705164 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5986-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5987-06:07:54.0705164 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 5988-06:07:54.0705164 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 5989-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 5990-06:07:54.0705164 svchost.exe 4060 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 5991-06:07:54.0705164 svchost.exe 4060 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 5992-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5993-06:07:54.0705164 svchost.exe 4060 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 5994-06:07:54.0705164 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5995-06:07:54.0705164 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5996-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5997-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 5998-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 5999-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 6000-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6001-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 6002-06:07:54.0705164 svchost.exe 4248 FILE_open C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json.new access:0x0013019F alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000005 options:0x00000060 0x00000000 [操作成功完成。 ] 6003-06:07:54.0705164 svchost.exe 4248 FILE_touch C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json.new access:0x0013019F alloc_size:0 attrib:0x00000100 share_access:0x00000001 disposition:0x00000005 options:0x00000060 0x00000000 [操作成功完成。 ] 6004-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6005-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 6006-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6007-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 6008-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6009-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 6010-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6011-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 6012-06:07:54.0705164 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 6013-06:07:54.0705164 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 6014-06:07:54.0705164 svchost.exe 2164 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities access:0x00020019 0x00000000 [操作成功完成。 ] 6015-06:07:54.0705164 svchost.exe 4060 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6016-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6017-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 6018-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6019-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 6020-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6021-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks\Volatile access:0x00000001 0x00000000 [操作成功完成。 ] 6022-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6023-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TestHooks access:0x00000001 0x00000000 [操作成功完成。 ] 6024-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6025-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads access:0x00020019 0x00000000 [操作成功完成。 ] 6026-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6027-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6028-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6029-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\RegKeyPathRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6030-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\RegValueNameRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6031-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6032-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6033-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads access:0x00020019 0x00000000 [操作成功完成。 ] 6034-06:07:54.0705164 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\DisableOneSettingsDownloads\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6035-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6036-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 6037-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6038-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 6039-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6040-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 6041-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6042-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 6043-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6044-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 6045-06:07:54.0705164 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6046-06:07:54.0805862 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 6047-06:07:54.0805862 svchost.exe 4248 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6048-06:07:54.0805862 svchost.exe 4248 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x00000001 0x00000000 [操作成功完成。 ] 6049-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6050-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6051-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6052-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6053-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6054-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6055-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6056-06:07:54.0805862 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6057-06:07:54.0805862 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 6058-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6059-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6060-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6061-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6062-06:07:54.0805862 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6063-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6064-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6065-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6066-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6067-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6068-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6069-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6070-06:07:54.0805862 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6071-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 6072-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 6073-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6074-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6075-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6076-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6077-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6078-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6079-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 6080-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6081-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6082-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6083-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6084-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6085-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6086-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6087-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6088-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6089-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6090-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6091-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6092-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6093-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6094-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6095-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6096-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6097-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6098-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6099-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6100-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6101-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6102-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6103-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6104-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6105-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6106-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6107-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6108-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6109-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6110-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6111-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6112-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6113-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6114-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6115-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6116-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6117-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6118-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6119-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6120-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6121-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6122-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6123-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6124-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6125-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6126-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6127-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6128-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6129-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6130-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6131-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6132-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6133-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6134-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6135-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6136-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6137-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6138-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6139-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6140-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6141-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 6142-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6143-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6144-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6145-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 6146-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6147-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6148-06:07:54.0805862 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6149-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 6150-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 6151-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6152-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6153-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6154-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6155-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6156-06:07:54.0805862 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6157-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6158-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 6159-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6160-06:07:54.0805862 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6161-06:07:54.0805862 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6162-06:07:54.0805862 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 6163-06:07:54.0865005 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 6164-06:07:54.0865005 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 6165-06:07:54.0883485 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:2160 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6166-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 6167-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 6168-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6169-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 6170-06:07:54.0883485 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6171-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6172-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6173-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6174-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6175-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 6176-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6177-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 6178-06:07:54.0883485 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6179-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6180-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6181-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6182-06:07:54.0883485 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6183-06:07:54.0883485 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6184-06:07:54.0883485 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6185-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 6186-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6187-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6188-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 6189-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6190-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 6191-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6192-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6193-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6194-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6195-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 6196-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 6197-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6198-06:07:54.0883485 svchost.exe 2160 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6199-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 6200-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 6201-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6202-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 6203-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 6204-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6205-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6206-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6207-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6208-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6209-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6210-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 6211-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6212-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 6213-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6214-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6215-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6216-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6217-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6218-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 6219-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6220-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 6221-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 6222-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6223-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6224-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6225-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6226-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6227-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6228-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6229-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 6230-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6231-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6232-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 6233-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 6234-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6235-06:07:54.0883485 svchost.exe 2160 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6236-06:07:54.0883485 svchost.exe 2160 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6237-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 6238-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 6239-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 6240-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6241-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6242-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6243-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 6244-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6245-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6246-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 6247-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 6248-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6249-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 6250-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6251-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 6252-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6253-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6254-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6255-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6256-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 6257-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 6258-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 6259-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 6260-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 6261-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 6262-06:07:54.0883485 svchost.exe 2160 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6263-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 6264-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6265-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6266-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 6267-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 6268-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6269-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 6270-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6271-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6272-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6273-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6274-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6275-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 6276-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6277-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6278-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6279-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 6280-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6281-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6282-06:07:54.0883485 svchost.exe 2160 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6283-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6284-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 6285-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 6286-06:07:54.0883485 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6287-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6288-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 6289-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6290-06:07:54.0883485 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 6291-06:07:54.0883485 svchost.exe 2160 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 6292-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6293-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6294-06:07:54.1025271 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6295-06:07:54.1025271 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6296-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6297-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 6298-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6299-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6300-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6301-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6302-06:07:54.1025271 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6303-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 6304-06:07:54.1025271 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6305-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6306-06:07:54.1025271 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6307-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6308-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6309-06:07:54.1025271 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6310-06:07:54.1025271 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6311-06:07:54.1025271 svchost.exe 2160 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6312-06:07:54.1025271 svchost.exe 2160 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 6313-06:07:54.1025271 svchost.exe 2160 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6314-06:07:54.1025271 svchost.exe 2160 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 6315-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6316-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6317-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 6318-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6319-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6320-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6321-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6322-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6323-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6324-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6325-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6326-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6327-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 6328-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6329-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6330-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6331-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6332-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 6333-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 6334-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6335-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6336-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6337-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 6338-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6339-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6340-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6341-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6342-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 6343-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 6344-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6345-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 6346-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6347-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 6348-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6349-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 6350-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6351-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 6352-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6353-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 6354-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6355-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 6356-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6357-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 6358-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6359-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 6360-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6361-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 6362-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6363-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 6364-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6365-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 6366-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6367-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 6368-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6369-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 6370-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6371-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 6372-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6373-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6374-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6375-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 6376-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 6377-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6378-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6379-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6380-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6381-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6382-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6383-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6384-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6385-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6386-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6387-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6388-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6389-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 6390-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6391-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6392-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6393-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6394-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6395-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6396-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6397-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6398-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6399-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6400-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6401-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6402-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 6403-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6404-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6405-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6406-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6407-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6408-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6409-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6410-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6411-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6412-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6413-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6414-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6415-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 6416-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6417-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6418-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6419-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6420-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6421-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6422-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6423-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6424-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6425-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6426-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6427-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6428-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 6429-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6430-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6431-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6432-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6433-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6434-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6435-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6436-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6437-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6438-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6439-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6440-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6441-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 6442-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6443-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6444-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6445-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6446-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6447-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6448-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6449-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6450-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6451-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6452-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6453-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6454-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 6455-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6456-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6457-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6458-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6459-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6460-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6461-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6462-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6463-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6464-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6465-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6466-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6467-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6468-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 6469-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6470-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6471-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6472-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6473-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 6474-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6475-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6476-06:07:54.1043082 svchost.exe 2160 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6477-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6478-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 6479-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6480-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 6481-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6482-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 6483-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 6484-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6485-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 6486-06:07:54.1043082 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6487-06:07:54.1043082 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6488-06:07:54.1043082 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6489-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6490-06:07:54.1043082 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 6491-06:07:54.1043082 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6492-06:07:54.1043082 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 6493-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 6494-06:07:54.1043082 svchost.exe 2160 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6495-06:07:54.1043082 svchost.exe 2160 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 6496-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6497-06:07:54.1043082 svchost.exe 2160 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 6498-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6499-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing access:0x00020019 0x00000000 [操作成功完成。 ] 6500-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\PolicyType type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6501-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6502-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\MergeAlgorithm type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6503-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\RegKeyPathRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6504-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\RegValueNameRedirect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6505-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Value type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6506-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6507-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing access:0x00020019 0x00000000 [操作成功完成。 ] 6508-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\System\EnableOneSettingsAuditing\Behavior type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6509-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6510-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 6511-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6512-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\System access:0x00020019 0x00000000 [操作成功完成。 ] 6513-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6514-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection access:0x00020019 0x00000000 [操作成功完成。 ] 6515-06:07:54.1043082 svchost.exe 4248 FILE_remove C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\utc.privacy.json.new - 0x00000000 [操作成功完成。 ] 6516-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6517-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack access:0x00000002 0x00000000 [操作成功完成。 ] 6518-06:07:54.1043082 svchost.exe 4248 REG_rmval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\UnexpectedStopsSinceSettingsDownload keyname:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack 0x00000000 [操作成功完成。 ] 6519-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 6520-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 6521-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\ApplicationFlags type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6522-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 6523-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 6524-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 6525-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6526-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6527-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData access:0x0002001B 0x00000000 [操作成功完成。 ] 6528-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\TickCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6529-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL\ClockData\ClockTimeSeconds type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6530-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 6531-06:07:54.1043082 svchost.exe 2160 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6532-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 6533-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935} access:0x00000001 0x00000000 [操作成功完成。 ] 6534-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Token\{2B379600-B42B-4FE9-A59C-A312FB934935}\DeviceTicket type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6535-06:07:54.1043082 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 6536-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6537-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6538-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6539-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6540-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT access:0x00000002 0x00000000 [操作成功完成。 ] 6541-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 6542-06:07:54.1043082 svchost.exe 4248 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property access:0x00000001 0x00000000 [操作成功完成。 ] 6543-06:07:54.1043082 svchost.exe 4248 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\Immersive\production\Property\0018000C08E0F97E type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6544-06:07:54.1043082 lsass.exe 1320 FILE_open C:\Windows\System32\Microsoft\Protect\S-1-5-18\User\Preferred access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00020066 0x00000000 [操作成功完成。 ] 6545-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6546-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6547-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6548-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6549-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6550-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6551-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6552-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6553-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 6554-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6555-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6556-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6557-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6558-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 6559-06:07:54.1043082 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6560-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6561-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6562-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6563-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6564-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 6565-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6566-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 6567-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6568-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 6569-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6570-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 6571-06:07:54.1043082 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6572-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6573-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 6574-06:07:54.1043082 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6575-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6576-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6577-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 6578-06:07:54.1043082 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 6579-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6580-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 6581-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6582-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6583-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6584-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6585-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 6586-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6587-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 6588-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6589-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 6590-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6591-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 6592-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 6593-06:07:54.1185911 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 6594-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6595-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6596-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6597-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6598-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6599-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6600-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6601-06:07:54.1185911 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6602-06:07:54.1185911 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 6603-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6604-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6605-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6606-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6607-06:07:54.1185911 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6608-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6609-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6610-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6611-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6612-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6613-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6614-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6615-06:07:54.1185911 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6616-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 6617-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 6618-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6619-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6620-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6621-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6622-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6623-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6624-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 6625-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6626-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6627-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6628-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6629-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6630-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6631-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6632-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6633-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6634-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6635-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6636-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6637-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6638-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6639-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6640-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6641-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6642-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6643-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6644-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6645-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6646-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6647-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6648-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6649-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6650-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6651-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6652-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6653-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6654-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6655-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6656-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6657-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6658-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6659-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6660-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6661-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6662-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6663-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6664-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6665-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6666-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6667-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6668-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6669-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 6670-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6671-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6672-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6673-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6674-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6675-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6676-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6677-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6678-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6679-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6680-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6681-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 6682-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6683-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6684-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6685-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6686-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 6687-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6688-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6689-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6690-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 6691-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6692-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6693-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6694-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 6695-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 6696-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6697-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6698-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6699-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6700-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6701-06:07:54.1185911 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6702-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6703-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 6704-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6705-06:07:54.1185911 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6706-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6707-06:07:54.1185911 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 6708-06:07:54.1185911 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 6709-06:07:54.1185911 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 6710-06:07:54.1185911 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:13120 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6711-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 6712-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 6713-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6714-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 6715-06:07:54.1185911 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6716-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6717-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6718-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6719-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6720-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 6721-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6722-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 6723-06:07:54.1185911 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6724-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6725-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6726-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6727-06:07:54.1185911 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 6728-06:07:54.1185911 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6729-06:07:54.1185911 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6730-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 6731-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6732-06:07:54.1185911 svchost.exe 13120 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 6733-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6734-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6735-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 6736-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6737-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6738-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6739-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6740-06:07:54.1185911 svchost.exe 13120 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 6741-06:07:54.1185911 svchost.exe 13120 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 6742-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6743-06:07:54.1185911 svchost.exe 13120 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 6744-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 6745-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 6746-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6747-06:07:54.1185911 svchost.exe 13120 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 6748-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 6749-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6750-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6751-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6752-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 6753-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6754-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6755-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 6756-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6757-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 6758-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6759-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6760-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6761-06:07:54.1185911 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6762-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6763-06:07:54.1185911 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 6764-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6765-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 6766-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 6767-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6768-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6769-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6770-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6771-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6772-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6773-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6774-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 6775-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 6776-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 6777-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 6778-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 6779-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6780-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6781-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6782-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 6783-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 6784-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 6785-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6786-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6787-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6788-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 6789-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6790-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6791-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 6792-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 6793-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6794-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 6795-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6796-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 6797-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6798-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6799-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6800-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6801-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 6802-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 6803-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 6804-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 6805-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 6806-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 6807-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6808-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 6809-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6810-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6811-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 6812-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 6813-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6814-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 6815-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6816-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6817-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6818-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6819-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6820-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 6821-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6822-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 6823-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 6824-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 6825-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6826-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6827-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6828-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 6829-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 6830-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 6831-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6832-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6833-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 6834-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6835-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 6836-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 6837-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6838-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 6839-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6840-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6841-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6842-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 6843-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6844-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6845-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6846-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6847-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6848-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 6849-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6850-06:07:54.1344976 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6851-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6852-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6853-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6854-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6855-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6856-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6857-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 6858-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6859-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 6860-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 6861-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\umpdc.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 6862-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\umpdc.dll base:0x00007FFAC20F0000 size:0x00014000 0x00000000 [操作成功完成。 ] 6863-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6864-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6865-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6866-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6867-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDllUnloadOnStop type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6868-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6869-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 6870-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 6871-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6872-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\ws2_32.dll base:0x00007FFAC3A30000 size:0x00074000 0x00000000 [操作成功完成。 ] 6873-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6874-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 6875-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 6876-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\WinSock_Registry_Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6877-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog access:0x00020019 0x00000000 [操作成功完成。 ] 6878-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1 access:0x00020019 0x00000000 [操作成功完成。 ] 6879-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\AppFullPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6880-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\2C69D9F1\PermittedLspCategories type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6881-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Callout type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6882-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9 access:0x02000000 0x00000000 [操作成功完成。 ] 6883-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6884-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6885-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Next_Catalog_Entry_ID type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6886-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6887-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 6888-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 6889-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6890-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 6891-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6892-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 6893-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6894-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 6895-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6896-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 6897-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6898-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 6899-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6900-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 6901-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6902-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008 access:0x00020019 0x00000000 [操作成功完成。 ] 6903-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000008\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6904-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009 access:0x00020019 0x00000000 [操作成功完成。 ] 6905-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000009\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6906-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010 access:0x00020019 0x00000000 [操作成功完成。 ] 6907-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000010\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6908-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011 access:0x00020019 0x00000000 [操作成功完成。 ] 6909-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000011\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6910-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012 access:0x00020019 0x00000000 [操作成功完成。 ] 6911-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000012\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6912-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013 access:0x00020019 0x00000000 [操作成功完成。 ] 6913-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000013\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6914-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014 access:0x00020019 0x00000000 [操作成功完成。 ] 6915-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000014\PackedCatalogItem type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6916-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5 access:0x02000000 0x00000000 [操作成功完成。 ] 6917-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6918-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Serial_Access_Num type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6919-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Num_Catalog_Entries64 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6920-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64 access:0x02000000 0x00000000 [操作成功完成。 ] 6921-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001 access:0x00020019 0x00000000 [操作成功完成。 ] 6922-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6923-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6924-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6925-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6926-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6927-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6928-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6929-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6930-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6931-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6932-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6933-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6934-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002 access:0x00020019 0x00000000 [操作成功完成。 ] 6935-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6936-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6937-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6938-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6939-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6940-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6941-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6942-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6943-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6944-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6945-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6946-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6947-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003 access:0x00020019 0x00000000 [操作成功完成。 ] 6948-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6949-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6950-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6951-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6952-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6953-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6954-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6955-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6956-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6957-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6958-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6959-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6960-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004 access:0x00020019 0x00000000 [操作成功完成。 ] 6961-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6962-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6963-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6964-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6965-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6966-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6967-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6968-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6969-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6970-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6971-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6972-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6973-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005 access:0x00020019 0x00000000 [操作成功完成。 ] 6974-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6975-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6976-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6977-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6978-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6979-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6980-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6981-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6982-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6983-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6984-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6985-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6986-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006 access:0x00020019 0x00000000 [操作成功完成。 ] 6987-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6988-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6989-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6990-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6991-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6992-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6993-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6994-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6995-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6996-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6997-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6998-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 6999-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007 access:0x00020019 0x00000000 [操作成功完成。 ] 7000-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7001-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\LibraryPath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7002-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7003-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7004-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\DisplayString type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7005-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderId type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7006-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\SupportedNameSpace type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7007-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Enabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7008-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\Version type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7009-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\StoresServiceClassInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7010-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7011-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000007\ProviderInfo type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7012-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7013-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinSock2\Parameters access:0x00000001 0x00000000 [操作成功完成。 ] 7014-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 7015-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Hostname type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7016-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7017-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\dnsapi.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7018-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\dnsapi.dll base:0x00007FFAC0C90000 size:0x0012A000 0x00000000 [操作成功完成。 ] 7019-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 7020-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 7021-06:07:54.1344976 svchost.exe 13120 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7022-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\Globalization\Sorting\SortDefault.nls access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7023-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids access:0x00020019 0x00000000 [操作成功完成。 ] 7024-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\IPHLPAPI.DLL access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7025-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\IPHLPAPI.DLL base:0x00007FFAC0C00000 size:0x00033000 0x00000000 [操作成功完成。 ] 7026-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\nsi.dll base:0x00007FFAC3A20000 size:0x0000A000 0x00000000 [操作成功完成。 ] 7027-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7028-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 7029-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7030-06:07:54.1344976 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces access:0x00020019 0x00000000 [操作成功完成。 ] 7031-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7032-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 7033-06:07:54.1344976 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7034-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7035-06:07:54.1344976 svchost.exe 13120 FILE_open C:\Windows\System32\FirewallAPI.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7036-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7037-06:07:54.1344976 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7038-06:07:54.1344976 svchost.exe 13120 EXEC_module_load C:\Windows\System32\FirewallAPI.dll base:0x00007FFAC0AA0000 size:0x000AE000 0x00000000 [操作成功完成。 ] 7039-06:07:54.1501515 svchost.exe 13120 FILE_open C:\Windows\System32\fwbase.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7040-06:07:54.1501515 svchost.exe 13120 EXEC_module_load C:\Windows\System32\fwbase.dll base:0x00007FFAC0A50000 size:0x00044000 0x00000000 [操作成功完成。 ] 7041-06:07:54.1501515 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7042-06:07:54.1501515 svchost.exe 13120 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService access:0x00020019 0x00000000 [操作成功完成。 ] 7043-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7044-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 7045-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7046-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18 access:0x00020019 0x00000000 [操作成功完成。 ] 7047-06:07:54.1501515 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-18\DeviceLicenseUpdateFailureCount type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7048-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7049-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7050-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7051-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7052-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 7053-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7054-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7055-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7056-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7057-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion access:0x00020019 0x00000000 [操作成功完成。 ] 7058-06:07:54.1501515 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\DeviceRegion\DeviceRegion type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7059-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7060-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\International access:0x00020019 0x00000000 [操作成功完成。 ] 7061-06:07:54.1501515 svchost.exe 6796 REG_getval HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7062-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7063-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7064-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7065-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 7066-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Software\Microsoft\IdentityCRL\StoredIdentities access:0x00020019 0x00000000 [操作成功完成。 ] 7067-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 7068-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7069-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7070-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7071-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7072-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 7073-06:07:54.1501515 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7074-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7075-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI access:0x00000001 0x00000000 [操作成功完成。 ] 7076-06:07:54.1501515 svchost.exe 6796 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM\WMI\WindowsAIKHash type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7077-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7078-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7079-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 7080-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control access:0x02020019 0x00000000 [操作成功完成。 ] 7081-06:07:54.1501515 svchost.exe 13120 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 7082-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7083-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System access:0x00020019 0x00000000 [操作成功完成。 ] 7084-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7085-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7086-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7087-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7088-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IdentityCRL access:0x00000001 0x00000000 [操作成功完成。 ] 7089-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7090-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 7091-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 7092-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 7093-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7094-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings access:0x00000001 0x00000000 [操作成功完成。 ] 7095-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS access:0x02000000 0x00000000 [操作成功完成。 ] 7096-06:07:54.1501515 svchost.exe 6796 REG_openkey HKEY_USERS\.DEFAULT access:0x00000001 0x00000000 [操作成功完成。 ] 7097-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7098-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\FailureActions type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7099-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7100-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7101-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7102-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7103-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\ObjectName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7104-06:07:54.1501515 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7105-06:07:54.1501515 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 7106-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7107-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\C type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7108-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7109-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Builtin\V type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7110-06:07:54.1501515 lsass.exe 1320 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7111-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group1 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7112-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group2 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7113-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group3 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7114-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group4 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7115-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7116-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group6 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7117-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group7 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7118-06:07:54.1501515 lsass.exe 1320 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\ComponentUpdates\SecurityInstallationProvider\S-1-5-19\Group8 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7119-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 7120-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x0002001F 0x00000000 [操作成功完成。 ] 7121-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7122-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\RequiredPrivileges type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7123-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 7124-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7125-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 7126-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7127-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 7128-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7129-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7130-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7131-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7132-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7133-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7134-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7135-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7136-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7137-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7138-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7139-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7140-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7141-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7142-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7143-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7144-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7145-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7146-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7147-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7148-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7149-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7150-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\asl.log type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7151-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PANEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7152-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_PYTHON type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7153-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\BT_SETUP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7154-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\ComSpec type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7155-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\DriverData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7156-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\NUMBER_OF_PROCESSORS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7157-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\OS type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7158-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7159-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PATHEXT type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7160-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7161-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_IDENTIFIER type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7162-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_LEVEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7163-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_REVISION type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7164-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\PSModulePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7165-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\StartPageUrl type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7166-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7167-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7168-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\UNRAR_LIB_PATH type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7169-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\USERNAME type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7170-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\windir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7171-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\POWERSHELL_DISTRIBUTION_CHANNEL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7172-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList access:0x00020019 0x00000000 [操作成功完成。 ] 7173-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7174-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7175-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7176-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7177-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7178-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7179-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7180-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7181-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86) type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7182-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7183-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7184-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion access:0x00020019 0x00000000 [操作成功完成。 ] 7185-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7186-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7187-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7188-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7189-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 7190-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7191-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7192-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7193-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders access:0x000F003F 0x00000000 [操作成功完成。 ] 7194-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7195-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7196-06:07:54.1501515 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7197-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE access:0x00020019 0x00000000 [操作成功完成。 ] 7198-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Environment access:0x00020019 0x00000000 [操作成功完成。 ] 7199-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7200-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7201-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7202-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\Path type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7203-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TEMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7204-06:07:54.1501515 services.exe 1236 REG_getval HKEY_USERS\S-1-5-19\Environment\TMP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7205-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7206-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management access:0x00000001 0x00000000 [操作成功完成。 ] 7207-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7208-06:07:54.1501515 services.exe 1236 FILE_open C:\Windows\System32\svchost.exe access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7209-06:07:54.1501515 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7210-06:07:54.1501515 services.exe 1236 FILE_read C:\Windows\System32\services.exe offset:0x00000000 datalen:0x000DB460 0x00000000 [操作成功完成。 ] 7211-06:07:54.1501515 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 7212-06:07:54.1501515 services.exe 1236 FILE_read C:\Windows\System32\svchost.exe offset:0x00000000 datalen:0x000158A8 0x00000000 [操作成功完成。 ] 7213-06:07:54.1660750 services.exe 1236 PROC_exec C:\Windows\System32\svchost.exe target_pid:11780 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 7214-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam\State\UserSettings\S-1-5-19 access:0x000F003F 0x00000000 [操作成功完成。 ] 7215-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders access:0x00000001 0x00000000 [操作成功完成。 ] 7216-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7217-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 7218-06:07:54.1660750 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7219-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7220-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7221-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7222-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7223-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide access:0x00020019 0x00000000 [操作成功完成。 ] 7224-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7225-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs access:0x00020019 0x00000000 [操作成功完成。 ] 7226-06:07:54.1660750 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates\ManifestedMergeStubSdbs\C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7227-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7228-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7229-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7230-06:07:54.1660750 csrss.exe 1064 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\SdbUpdates access:0x00020019 0x00000000 [操作成功完成。 ] 7231-06:07:54.1660750 csrss.exe 1064 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PublisherPolicyChangeTime type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7232-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7233-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage access:0x00020019 0x00000000 [操作成功完成。 ] 7234-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\ACP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7235-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\ntdll.dll base:0x00007FFAC5BC0000 size:0x00267000 0x00000000 [操作成功完成。 ] 7236-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CodePage\OEMCP type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7237-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 7238-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options access:0x00000009 0x00000000 [操作成功完成。 ] 7239-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7240-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe\MinimumStackCommitInBytes type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7241-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7242-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Notifications\41911A28A3BC10B5 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7243-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\kernel32.dll base:0x00007FFAC44F0000 size:0x000C9000 0x00000000 [操作成功完成。 ] 7244-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\KernelBase.dll base:0x00007FFAC30B0000 size:0x003F1000 0x00000000 [操作成功完成。 ] 7245-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7246-06:07:54.1660750 svchost.exe 11780 EXEC_create C:\Windows\System32\svchost.exe parent_pid:1236 image_base:0x00007FF716DD0000 image_size:0x00013000 cmdline:C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp 0x00000000 [操作成功完成。 ] 7247-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers access:0x00000001 0x00000000 [操作成功完成。 ] 7248-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem access:0x00020019 0x00000000 [操作成功完成。 ] 7249-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem\LongPathsEnabled type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7250-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\ucrtbase.dll base:0x00007FFAC2F30000 size:0x0014B000 0x00000000 [操作成功完成。 ] 7251-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions access:0x00020019 0x00000000 [操作成功完成。 ] 7252-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7253-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Versions\000605xx type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7254-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale access:0x00020019 0x00000000 [操作成功完成。 ] 7255-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale access:0x00020019 0x00000000 [操作成功完成。 ] 7256-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 7257-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7258-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 7259-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7260-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted access:0x00020019 0x00000000 [操作成功完成。 ] 7261-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityParam type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7262-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\CoInitializeSecurityAllowLowBox type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7263-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\COM_UnmarshalingPolicy type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7264-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\LocalServiceNetworkRestricted\DefaultRpcStackSize type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7265-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7266-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 7267-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7268-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\combase.dll base:0x00007FFAC3E20000 size:0x00382000 0x00000000 [操作成功完成。 ] 7269-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\rpcrt4.dll base:0x00007FFAC5040000 size:0x00118000 0x00000000 [操作成功完成。 ] 7270-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7271-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 7272-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7273-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 7274-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7275-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 7276-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7277-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x00020019 0x00000000 [操作成功完成。 ] 7278-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole access:0x00020019 0x00000000 [操作成功完成。 ] 7279-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x00020019 0x00000000 [操作成功完成。 ] 7280-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings access:0x00020019 0x00000000 [操作成功完成。 ] 7281-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19\Software\Classes\Local Settings\Software\Microsoft access:0x00020019 0x00000000 [操作成功完成。 ] 7282-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7283-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Windows\System32\rpcss.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7284-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Windows\System32\kernel.appcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7285-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\kernel.appcore.dll base:0x00007FFAC11F0000 size:0x0001B000 0x00000000 [操作成功完成。 ] 7286-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\msvcrt.dll base:0x00007FFAC4640000 size:0x000A9000 0x00000000 [操作成功完成。 ] 7287-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7288-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\bcryptprimitives.dll base:0x00007FFAC2E80000 size:0x000A5000 0x00000000 [操作成功完成。 ] 7289-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 7290-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\LsaPid type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7291-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions access:0x00020019 0x00000000 [操作成功完成。 ] 7292-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7293-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7294-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00020019 0x00000000 [操作成功完成。 ] 7295-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName access:0x00020019 0x00000000 [操作成功完成。 ] 7296-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7297-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 7298-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\OOBEInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7299-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SYSTEM\Setup access:0x00020019 0x00000000 [操作成功完成。 ] 7300-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7301-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7302-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7303-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7304-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc access:0x00000001 0x00000000 [操作成功完成。 ] 7305-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\user32.dll base:0x00007FFAC4990000 size:0x001C5000 0x00000000 [操作成功完成。 ] 7306-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\win32u.dll base:0x00007FFAC3080000 size:0x00027000 0x00000000 [操作成功完成。 ] 7307-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\gdi32.dll base:0x00007FFAC3AB0000 size:0x0002B000 0x00000000 [操作成功完成。 ] 7308-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\gdi32full.dll base:0x00007FFAC36C0000 size:0x0012A000 0x00000000 [操作成功完成。 ] 7309-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\msvcp_win.dll base:0x00007FFAC37F0000 size:0x000A3000 0x00000000 [操作成功完成。 ] 7310-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Windows\System32\imm32.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7311-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\imm32.dll base:0x00007FFAC4B70000 size:0x00031000 0x00000000 [操作成功完成。 ] 7312-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7313-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7314-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize access:0x00020019 0x00000000 [操作成功完成。 ] 7315-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00020019 0x00000000 [操作成功完成。 ] 7316-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7317-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32 access:0x00020019 0x00000000 [操作成功完成。 ] 7318-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7319-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7320-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7321-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7322-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7323-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MUI\Settings access:0x00020019 0x00000000 [操作成功完成。 ] 7324-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7325-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7326-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_USERS\S-1-5-19 access:0x02000000 0x00000000 [操作成功完成。 ] 7327-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 7328-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7329-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7330-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_26100.161.258.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\f6b4529b65cadef57c3fd95220f010e2\svchost.exe.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7331-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe access:0x00000009 0x00000000 [操作成功完成。 ] 7332-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx access:0x00020019 0x00000000 [操作成功完成。 ] 7333-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock access:0x00020019 0x00000000 [操作成功完成。 ] 7334-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7335-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7336-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat access:0x00020019 0x00000000 [操作成功完成。 ] 7337-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7338-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Classes access:0x02000000 0x00000000 [操作成功完成。 ] 7339-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\sechost.dll base:0x00007FFAC3D20000 size:0x000A7000 0x00000000 [操作成功完成。 ] 7340-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 7341-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa access:0x00000001 0x00000000 [操作成功完成。 ] 7342-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7343-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\Security\06184c97-5201-480e-92af-3a3626c5b140 type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7344-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7345-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SCMConfig access:0x00020019 0x00000000 [操作成功完成。 ] 7346-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7347-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 7348-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7349-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7350-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7351-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost access:0x00020019 0x00000000 [操作成功完成。 ] 7352-06:07:54.1660750 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 7353-06:07:54.1660750 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7354-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7355-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services access:0x00020019 0x00000000 [操作成功完成。 ] 7356-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp access:0x00020019 0x00000000 [操作成功完成。 ] 7357-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 7358-06:07:54.1660750 svchost.exe 11780 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7359-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Windows\System32\dhcpcore.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7360-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\dhcpcore.dll base:0x00007FFAA7560000 size:0x00070000 0x00000000 [操作成功完成。 ] 7361-06:07:54.1660750 svchost.exe 11780 FILE_open C:\Windows\System32\powrprof.dll access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7362-06:07:54.1660750 svchost.exe 11780 EXEC_module_load C:\Windows\System32\powrprof.dll base:0x00007FFAC2110000 size:0x0005E000 0x00000000 [操作成功完成。 ] 7363-06:07:54.1660750 svchost.exe 11780 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager access:0x00000001 0x00000000 [操作成功完成。 ] 7365-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7366-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7367-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7368-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7369-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7370-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7371-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7372-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7373-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7374-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7375-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7376-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7377-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7378-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7379-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7380-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7381-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7382-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7383-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7384-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7385-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7386-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7387-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7388-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7389-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7390-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7391-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7392-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7393-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7394-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7395-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7396-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7397-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7398-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7399-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7400-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7401-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7402-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers access:0x00020019 0x00000000 [操作成功完成。 ] 7403-06:07:54.4858129 svchost.exe 2932 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4} access:0x00020019 0x00000000 [操作成功完成。 ] 7404-06:07:54.4858129 svchost.exe 2932 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{555908d1-a6d7-4695-8e1e-26931d2012f4}\ type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7405-06:07:54.7387129 System 4 FILE_truncate C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderApiLogger.etl eof:0x006BC968 0x00000000 [操作成功完成。 ] 7406-06:07:54.7387129 pwsh.exe 2848 FILE_truncate C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt eof:0x0000ECED 0x00000000 [操作成功完成。 ] 7407-06:07:55.4731991 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 7408-06:07:55.4731991 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7409-06:07:55.4731991 services.exe 1236 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\PreferredUILanguages type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7410-06:07:55.4731991 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500 access:0x02000000 0x00000000 [操作成功完成。 ] 7411-06:07:55.4731991 services.exe 1236 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration access:0x00020019 0x00000000 [操作成功完成。 ] 7412-06:07:55.4731991 services.exe 1236 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Control Panel\Desktop\LanguageConfiguration\zh-CN type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7413-06:07:55.4755645 net1.exe 6092 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN access:0x00020019 0x00000000 [操作成功完成。 ] 7414-06:07:55.4755645 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Type type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7415-06:07:55.4755645 net1.exe 6092 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\LanguageOverlay\OverlayPackages\zh-CN\Latest type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7416-06:07:55.4755645 net1.exe 6092 FILE_open C:\Windows\System32\zh-CN\KernelBase.dll.mui access:0x00100001 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 0x00000000 [操作成功完成。 ] 7417-06:07:55.4755645 net1.exe 6092 EXEC_destroy C:\Windows\System32\net1.exe parent_pid:9384 cmdline:C:\Windows\system32\net1 start dhcp 0x00000000 [操作成功完成。 ] 7418-06:07:55.4755645 net.exe 9384 EXEC_destroy C:\Windows\System32\net.exe parent_pid:2848 cmdline:"C:\Windows\system32\net.exe" start dhcp 0x00000000 [操作成功完成。 ] 7419-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources filter:* 0x00000000 [操作成功完成。 ] 7420-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35 filter:* 0x00000000 [操作成功完成。 ] 7421-06:07:55.4755645 pwsh.exe 2848 FILE_open C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35\System.Management.Automation.Resources.dll access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00400060 0x00000000 [操作成功完成。 ] 7422-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources filter:* 0x00000000 [操作成功完成。 ] 7423-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35 filter:* 0x00000000 [操作成功完成。 ] 7424-06:07:55.4755645 pwsh.exe 2848 FILE_open C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35\System.Management.Automation.Resources.dll access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00400060 0x00000000 [操作成功完成。 ] 7425-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources filter:* 0x00000000 [操作成功完成。 ] 7426-06:07:55.4755645 pwsh.exe 2848 FILE_readdir C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35 filter:* 0x00000000 [操作成功完成。 ] 7427-06:07:55.4755645 pwsh.exe 2848 FILE_open C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation.Resources\v4.0_3.0.0.0_zh-HANS_31bf3856ad364e35\System.Management.Automation.Resources.dll access:0x00120089 alloc_size:0 attrib:0x00000000 share_access:0x00000001 disposition:0x00000001 options:0x00400060 0x00000000 [操作成功完成。 ] 7428-06:07:55.9986718 WindowsTerminal.exe 5332 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize access:0x00000001 0x00000000 [操作成功完成。 ] 7429-06:07:55.9986718 WindowsTerminal.exe 5332 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7430-06:07:55.9986718 WindowsTerminal.exe 5332 REG_openkey HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize access:0x00000001 0x00000000 [操作成功完成。 ] 7431-06:07:55.9986718 WindowsTerminal.exe 5332 REG_getval HKEY_USERS\S-1-5-21-3034489277-1165069589-1523088021-500\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7432-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7433-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances access:0x00010000 0x00000000 [操作成功完成。 ] 7434-06:07:56.0621276 svchost.exe 7152 REG_rmkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances - 0x00000000 [操作成功完成。 ] 7435-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7436-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances access:0x00020019 0x00000000 [操作成功完成。 ] 7437-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\ae413882-97a6-4568-b2c5-e81de7de28c8 access:0x00010000 0x00000000 [操作成功完成。 ] 7438-06:07:56.0621276 svchost.exe 7152 REG_rmkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances\ae413882-97a6-4568-b2c5-e81de7de28c8 - 0x00000000 [操作成功完成。 ] 7439-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7440-06:07:56.0621276 svchost.exe 7152 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances access:0x00010000 0x00000000 [操作成功完成。 ] 7441-06:07:56.0621276 svchost.exe 7152 REG_rmkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\ServiceInstances - 0x00000000 [操作成功完成。 ] 7442-06:07:56.0621276 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gpsvc access:0x00020019 0x00000000 [操作成功完成。 ] 7443-06:07:56.0621276 services.exe 1236 REG_openkey HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gpsvc\Parameters access:0x00020019 0x00000000 [操作成功完成。 ] 7444-06:07:56.0621276 services.exe 1236 REG_getval HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gpsvc\Parameters\ServiceDll type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7445-06:07:56.0621276 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7446-06:07:56.0621276 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT\Control Panel\Desktop access:0x00020019 0x00000000 [操作成功完成。 ] 7447-06:07:56.0621276 services.exe 1236 REG_openkey HKEY_USERS\.DEFAULT access:0x02000000 0x00000000 [操作成功完成。 ] 7448-06:07:56.0621276 svchost.exe 7152 EXEC_destroy C:\Windows\System32\svchost.exe parent_pid:1236 cmdline:C:\Windows\system32\svchost.exe -k GPSvcGroup 0x00000000 [操作成功完成。 ] 7449-06:07:56.0779560 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7450-06:07:56.0779560 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 7451-06:07:56.0779560 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7452-06:07:56.0779560 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 7453-06:07:56.0779560 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AmiHivePermissionsCorrect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7454-06:07:56.0779560 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE access:0x02000000 0x00000000 [操作成功完成。 ] 7455-06:07:56.0786978 svchost.exe 4248 REG_openkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags access:0x00000001 0x00000000 [操作成功完成。 ] 7456-06:07:56.0786978 svchost.exe 4248 REG_getval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AmiHiveOwnerCorrect type:0x00000000 datalen:0x00000000 data: 0x00000000 [操作成功完成。 ] 7457-06:07:56.0786978 svchost.exe 4248 FILE_open C:\Windows\appcompat\Programs\Amcache.hve access:0x00020003 alloc_size:0 attrib:0x00000000 share_access:0x00000000 disposition:0x00000003 options:0x00008024 0x00000000 [操作成功完成。 ]