5:13:08.4143612 PM	Explorer.EXE	2420	RegOpenKey	HKLM\software\microsoft\windows\currentversion\setup\PnpLockdownFiles	ACCESS DENIED	Desired Access: Read	Tau\User
5:13:11.0115562 PM	Explorer.EXE	2420	RegOpenKey	HKLM\software\microsoft\windows\currentversion\setup\PnpLockdownFiles	ACCESS DENIED	Desired Access: Read	Tau\User
5:13:14.0793012 PM	Explorer.EXE	2420	CreateFile	C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A91000000001}\SC_Reader.ico	ACCESS DENIED	Desired Access: Generic Read, Write Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a	Tau\User
5:13:14.4144943 PM	Explorer.EXE	2420	CreateFile	C:\Windows\Installer\{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}\QTPlayer.ico	ACCESS DENIED	Desired Access: Generic Read, Write Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a	Tau\User
5:13:16.1214611 PM	rundll32.exe	4980	RegOpenKey	HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache	ACCESS DENIED	Desired Access: Query Value, Set Value, Create Sub Key, Enumerate Sub Keys	Tau\Madmaxistrator
5:13:16.1573641 PM	rundll32.exe	4980	RegOpenKey	HKLM\System\CurrentControlSet\Services\WinSock2\Parameters	ACCESS DENIED	Desired Access: All Access	Tau\Madmaxistrator
5:13:16.1715232 PM	rundll32.exe	4980	RegCreateKey	HKLM\Software\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1719865 PM	rundll32.exe	4980	RegCreateKey	HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1721538 PM	rundll32.exe	4980	RegCreateKey	HKLM\Software\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1726675 PM	rundll32.exe	4980	RegCreateKey	HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1729154 PM	rundll32.exe	4980	RegCreateKey	HKLM\Software\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1733787 PM	rundll32.exe	4980	RegCreateKey	HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1782610 PM	rundll32.exe	4980	RegOpenKey	HKCU	ACCESS DENIED	Desired Access: Query Value, Set Value	Tau\Madmaxistrator
5:13:16.1843447 PM	rundll32.exe	4980	RegOpenKey	HKLM\System\CurrentControlSet\Services\WinSock2\Parameters	ACCESS DENIED	Desired Access: All Access	Tau\Madmaxistrator
5:13:16.2765736 PM	Explorer.EXE	2420	CreateFile	C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A91000000001}\SC_Reader.ico	ACCESS DENIED	Desired Access: Generic Read, Write Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a	Tau\User
5:13:16.5972979 PM	Explorer.EXE	2420	CreateFile	C:\Windows\Installer\{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}\QTPlayer.ico	ACCESS DENIED	Desired Access: Generic Read, Write Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Random Access, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a	Tau\User
5:15:16.1404820 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
5:15:16.3150301 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
5:15:22.3054742 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
5:17:38.1479882 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
5:17:38.4060558 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
5:17:43.2861257 PM	wmpnetwk.exe	3188	CreateFile	C:\Users\User	ACCESS DENIED	Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a	NT AUTHORITY\NETWORK SERVICE
