04:09:07.4514464 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10356 04:09:07.4514785 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11512 04:09:08.9515957 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11512, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:09.5127859 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5128055 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:09.5128325 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:09.5140884 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5141108 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:09.5141420 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:09.5144001 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5144109 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:09.5144272 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:09.5157529 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5157627 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:09.5157776 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:09.5160908 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5161085 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:09.5161257 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:09.5161471 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:09.5161602 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:09.5161742 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:09.5163471 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5163568 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:09.5163718 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:09.5172180 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.5172273 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:09.5172418 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:09.5172548 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:09.5172632 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:09.5172753 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:09.7267364 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.7267466 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:09.7267606 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:09.7267764 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:09.7267858 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:09.7267960 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:09.7268888 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:09.7268953 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:09.7269060 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:09.7269162 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:09.7269232 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:09.7269316 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.3791461 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.3791606 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.3791788 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.3792007 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.3792114 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.3792235 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.3794029 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.3794136 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:11.3794309 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:11.3796671 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.3796764 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.3796895 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.3797030 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.3797123 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.3797240 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.3798777 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.3798866 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:11.3799006 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:11.3814370 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 04:09:11.3814649 Ssms.exe 7244 QueryNetworkOpenInformationFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS CreationTime: 05/01/2021 03:18:34, LastAccessTime: 05/01/2021 03:18:34, LastWriteTime: 05/01/2021 03:18:34, ChangeTime: 05/01/2021 03:18:34, AllocationSize: 01/01/1601 00:00:00, EndOfFile: 01/01/1601 00:00:00, FileAttributes: A 04:09:11.3814747 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS 04:09:11.4006452 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4006550 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4006685 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4006815 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4006899 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4007011 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4010781 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4010860 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4010986 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4011112 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4011196 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4011298 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4086705 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4086798 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4086934 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4087064 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4087148 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4087255 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4088979 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 04:09:11.4089208 Ssms.exe 7244 QueryNetworkOpenInformationFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS CreationTime: 05/01/2021 03:18:34, LastAccessTime: 05/01/2021 03:18:34, LastWriteTime: 05/01/2021 03:18:34, ChangeTime: 05/01/2021 03:18:34, AllocationSize: 01/01/1601 00:00:00, EndOfFile: 01/01/1601 00:00:00, FileAttributes: A 04:09:11.4089301 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS 04:09:11.4091072 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4091183 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:11.4091333 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:11.4093397 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4093485 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4093616 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4093751 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4093858 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4093975 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4095536 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4095624 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:11.4095755 Ssms.exe 7244 RegOpenKey HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\KnownClasses NAME NOT FOUND Desired Access: Read 04:09:11.4099264 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 1172 04:09:11.4108416 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4108514 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4108737 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4108873 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4108970 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4109096 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4799083 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11304 04:09:11.4799339 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10456 04:09:11.4799684 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 8968 04:09:11.4800052 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10732 04:09:11.4800145 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11980 04:09:11.4800527 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11652 04:09:11.4807461 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 04:09:11.4807792 Ssms.exe 7244 QueryNetworkOpenInformationFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS CreationTime: 05/01/2021 03:18:34, LastAccessTime: 05/01/2021 03:18:34, LastWriteTime: 05/01/2021 03:18:34, ChangeTime: 05/01/2021 03:18:34, AllocationSize: 01/01/1601 00:00:00, EndOfFile: 01/01/1601 00:00:00, FileAttributes: A 04:09:11.4807899 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS 04:09:11.4919295 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4919444 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4919626 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4919835 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4919938 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4920059 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4924123 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.4924202 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.4924332 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.4924463 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.4924542 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.4924696 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.4998504 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 04:09:11.4998742 Ssms.exe 7244 QueryNetworkOpenInformationFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS CreationTime: 05/01/2021 03:18:34, LastAccessTime: 05/01/2021 03:18:34, LastWriteTime: 05/01/2021 03:18:34, ChangeTime: 05/01/2021 03:18:34, AllocationSize: 01/01/1601 00:00:00, EndOfFile: 01/01/1601 00:00:00, FileAttributes: A 04:09:11.4998840 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\Documents\SQL Server Management Studio\rretretretertretret.sql SUCCESS 04:09:11.5066125 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.5066223 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.5066358 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.5066493 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.5066577 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.5066679 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.5067951 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 1172, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:11.7408075 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.7408187 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.7408345 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.7408522 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.7408616 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.7408732 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:11.7409631 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:11.7409701 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:11.7409813 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:11.7409920 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:11.7409995 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:11.7410083 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:13.0113341 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11304, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:13.4487413 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4487580 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:13.4487655 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4487795 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:09:13.4487953 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:09:13.4488116 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:13.4488191 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4488275 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4488419 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4488522 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4488601 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4488666 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4488764 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4488839 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4488894 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:09:13.4489020 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:09:13.4493307 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4493424 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:13.4493485 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4493587 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:09:13.4493699 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:09:13.4493811 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:13.4493876 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4493946 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4494062 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4494146 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4494216 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4494281 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4494375 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4494449 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4494505 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:09:13.4494598 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:09:13.4497567 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4497678 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:13.4497734 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:13.4497832 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:09:13.4497935 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:09:13.4498047 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:13.4498112 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4498177 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4498289 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4498373 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4498443 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:09:13.4498503 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:09:13.4498592 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:13.4498662 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:09:13.4498718 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:09:13.4498806 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:09:13.9660224 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:13.9660350 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:13.9660550 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:13.9660783 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:13.9660890 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:13.9661016 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:13.9662018 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:13.9662083 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:13.9662190 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:13.9662302 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:13.9662372 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:13.9662461 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:16.1846220 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1846351 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1846467 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1846551 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1846724 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Read 04:09:16.1846896 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1847059 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1847143 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: Name 04:09:16.1847236 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: HandleTags, HandleTags: 0x401 04:09:16.1847395 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:16.1847492 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1847614 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1847791 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:16.1847847 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:16.1847935 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1848033 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1848094 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1848168 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1849095 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1849175 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1849249 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1849305 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1849408 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Read 04:09:16.1849524 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1849622 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1849692 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: Name 04:09:16.1849762 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: HandleTags, HandleTags: 0x401 04:09:16.1849874 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:16.1849958 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1850046 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1850158 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:16.1850209 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:16.1850288 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1850372 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1850433 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1850503 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1850969 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1851048 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1851118 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1851169 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1851262 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Read 04:09:16.1851369 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1851458 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1851519 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: Name 04:09:16.1851588 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: HandleTags, HandleTags: 0x401 04:09:16.1851691 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:16.1851770 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1851891 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1852003 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:16.1852059 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:16.1852138 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1852218 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1852278 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1852348 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1904926 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1905057 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1905173 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:09:16.1905248 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:09:16.1905406 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Read 04:09:16.1905583 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1905746 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1905825 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: Name 04:09:16.1905919 Ssms.exe 7244 RegQueryKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Query: HandleTags, HandleTags: 0x401 04:09:16.1906068 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 NAME NOT FOUND Desired Access: Maximum Allowed 04:09:16.1906166 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1906287 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:16.1906445 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:16.1906496 Ssms.exe 7244 RegQueryKey HKLM SUCCESS Query: Name 04:09:16.1906590 Ssms.exe 7244 RegOpenKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS Desired Access: Read 04:09:16.1906683 Ssms.exe 7244 RegSetInfoKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:16.1906743 Ssms.exe 7244 RegQueryValue HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32\(Default) SUCCESS Type: REG_EXPAND_SZ, Length: 80, Data: %systemroot%\system32\wbem\wmiutils.dll 04:09:16.1906818 Ssms.exe 7244 RegCloseKey HKCR\Wow6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32 SUCCESS 04:09:30.3388405 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11136, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:31.4840966 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10456, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:31.4841381 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 8968, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:31.4841856 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11980, User Time: 0.0156250, Kernel Time: 0.0000000 04:09:31.4842318 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10732, User Time: 0.0156250, Kernel Time: 0.0000000 04:09:31.4843072 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10356, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:31.4843576 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11652, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:37.4553644 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10944 04:09:37.4553947 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11668 04:09:37.7053962 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10304 04:09:37.7054694 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 10084 04:09:38.9720053 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11668, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:47.0631982 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11920 04:09:53.1250574 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 9700 04:09:57.1287467 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:57.1287579 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:57.1287732 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS Desired Access: Read 04:09:57.1287979 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:57.1288072 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover\AutoRecover Enabled NAME NOT FOUND Length: 144 04:09:57.1288170 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS 04:09:57.1288930 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:57.1288995 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:57.1289093 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS Desired Access: Read 04:09:57.1289200 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:57.1289270 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover\AutoRecover Enabled NAME NOT FOUND Length: 144 04:09:57.1289354 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS 04:09:57.1290412 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\AutoRecoverDat\7244.dat NAME NOT FOUND Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a 04:09:57.1292625 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0 SUCCESS Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 04:09:57.1292854 Ssms.exe 7244 QueryNetworkOpenInformationFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0 SUCCESS CreationTime: 07/11/2018 19:51:16, LastAccessTime: 07/11/2018 19:51:55, LastWriteTime: 07/11/2018 19:51:55, ChangeTime: 07/11/2018 19:51:55, AllocationSize: 01/01/1601 00:00:00, EndOfFile: 01/01/1601 00:00:00, FileAttributes: D 04:09:57.1292942 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0 SUCCESS 04:09:57.1293893 Ssms.exe 7244 CreateFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Open No Recall, Attributes: n/a, ShareMode: None, AllocationSize: 0, OpenResult: Overwritten 04:09:57.1295561 Ssms.exe 7244 QueryBasicInformationFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS CreationTime: 07/11/2018 19:51:20, LastAccessTime: 07/11/2018 19:51:20, LastWriteTime: 05/01/2021 04:09:57, ChangeTime: 05/01/2021 04:09:57, FileAttributes: A 04:09:57.1309792 Ssms.exe 7244 WriteFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Offset: 0, Length: 6,143, Priority: Normal 04:09:57.1319182 Ssms.exe 7244 WriteFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Offset: 6,143, Length: 6,143, Priority: Normal 04:09:57.1330501 Ssms.exe 7244 WriteFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Offset: 12,286, Length: 6,143, Priority: Normal 04:09:57.1341871 Ssms.exe 7244 WriteFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Offset: 18,429, Length: 6,145 04:09:57.1343474 Ssms.exe 7244 WriteFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS Offset: 24,574, Length: 2,251 04:09:57.1343637 Ssms.exe 7244 CloseFile C:\Users\Administrator.AD\AppData\Roaming\Microsoft\SQL Server Management Studio\12.0\Design_x52sl1tr.fpp.winprf SUCCESS 04:09:57.1401998 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:57.1402115 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:57.1402278 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0 SUCCESS Desired Access: Read/Write 04:09:57.1402460 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:57.1402642 Ssms.exe 7244 RegQueryKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0 SUCCESS Query: HandleTags, HandleTags: 0x400 04:09:57.1402753 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General SUCCESS Desired Access: Read 04:09:57.1402902 Ssms.exe 7244 RegQueryKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0 SUCCESS Query: HandleTags, HandleTags: 0x400 04:09:57.1402996 Ssms.exe 7244 RegCreateKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General SUCCESS Desired Access: Write, Disposition: REG_OPENED_EXISTING_KEY 04:09:57.1403121 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General SUCCESS 04:09:57.1403215 Ssms.exe 7244 RegQueryKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General SUCCESS Query: HandleTags, HandleTags: 0x400 04:09:57.1403303 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS Desired Access: Write 04:09:57.1403429 Ssms.exe 7244 RegSetValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover\AutoRecover Last From Restart Manager SUCCESS Type: REG_DWORD, Length: 4, Data: 0 04:09:57.1403532 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General\AutoRecover SUCCESS 04:09:57.1403615 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0\General SUCCESS 04:09:57.1403695 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0 SUCCESS 04:09:57.5459544 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:57.5459646 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:57.5459796 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:57.5459968 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:57.5460066 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:57.5460182 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:57.5461142 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: HandleTags, HandleTags: 0x0 04:09:57.5461208 Ssms.exe 7244 RegQueryKey HKCU SUCCESS Query: Name 04:09:57.5461310 Ssms.exe 7244 RegOpenKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS Desired Access: Read 04:09:57.5461408 Ssms.exe 7244 RegSetInfoKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:09:57.5461478 Ssms.exe 7244 RegQueryValue HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244\UseDebugLaunchService NAME NOT FOUND Length: 144 04:09:57.5461566 Ssms.exe 7244 RegCloseKey HKCU\Software\Microsoft\SQL Server Management Studio\12.0_Config_7244 SUCCESS 04:09:57.7076866 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10944, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:57.7077318 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10084, User Time: 0.0000000, Kernel Time: 0.0000000 04:09:57.7077826 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 10304, User Time: 0.0000000, Kernel Time: 0.0000000 04:10:07.0829018 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0829237 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:10:07.0829349 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0829521 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:10:07.0829708 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:10:07.0829908 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:10:07.0830011 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0830113 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0830262 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0830360 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0830449 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0830514 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0830616 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0830700 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0830770 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:10:07.0830873 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:10:07.0834890 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0835062 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:10:07.0835141 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0835267 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:10:07.0835491 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:10:07.0835621 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:10:07.0835696 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0835766 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0835878 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0835975 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0836050 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0836115 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0836208 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0836278 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0836339 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:10:07.0836432 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:10:07.0839340 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0839484 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: HandleTags, HandleTags: 0x1 04:10:07.0839545 Ssms.exe 7244 RegQueryKey HKCU\Software\Classes SUCCESS Query: Name 04:10:07.0839652 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Read 04:10:07.0839764 Ssms.exe 7244 RegOpenKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Desired Access: Read 04:10:07.0839876 Ssms.exe 7244 RegSetInfoKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0 04:10:07.0839941 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0840006 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0840123 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0840216 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0840370 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: Name 04:10:07.0840440 Ssms.exe 7244 RegQueryKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS Query: HandleTags, HandleTags: 0x601 04:10:07.0840542 Ssms.exe 7244 RegOpenKey HKCU\Software\Classes\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 NAME NOT FOUND Desired Access: Maximum Allowed 04:10:07.0840617 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) BUFFER OVERFLOW Length: 144 04:10:07.0840673 Ssms.exe 7244 RegQueryValue HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010\(Default) SUCCESS Type: REG_BINARY, Length: 310, Data: 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 04:10:07.0840761 Ssms.exe 7244 RegCloseKey HKCR\Licenses\0B47443B-87E1-43c2-8AF7-3B82E8574FF6\01010 SUCCESS 04:10:07.4576543 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 9884 04:10:07.4576902 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11900 04:10:08.9734554 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11900, User Time: 0.0000000, Kernel Time: 0.0000000 04:10:27.4653143 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 9884, User Time: 0.0000000, Kernel Time: 0.0000000 04:10:37.4705045 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 1732 04:10:37.4705404 Ssms.exe 7244 Thread Create SUCCESS Thread ID: 11404 04:10:38.9862129 Ssms.exe 7244 Thread Exit SUCCESS Thread ID: 11404, User Time: 0.0000000, Kernel Time: 0.0000000