18:17:29.3651907    111.exe    1584    RegSetValue    HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed    SUCCESS    Type: REG_BINARY, Length: 80, Data: C2 74 80 13 5A C9 35 88 B9 1F 98 A8 BE A2 DA 1B
18:17:29.7338962    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed    SUCCESS    Type: REG_BINARY, Length: 80, Data: 19 BA F3 DF D4 71 F2 99 44 93 B6 4D 94 9B 2C 71
18:17:30.0260392    111.exe    1600    RegSetValue    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache    SUCCESS    Type: REG_SZ, Length: 140, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files
18:17:30.0309094    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Directory    SUCCESS    Type: REG_SZ, Length: 164, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files\Content.IE5
18:17:30.0309393    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Paths    SUCCESS    Type: REG_DWORD, Length: 4, Data: 4
18:17:30.0309982    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1\CachePath    SUCCESS    Type: REG_SZ, Length: 178, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files\Content.IE5\Cache1
18:17:30.0310331    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2\CachePath    SUCCESS    Type: REG_SZ, Length: 178, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files\Content.IE5\Cache2
18:17:30.0310583    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3\CachePath    SUCCESS    Type: REG_SZ, Length: 178, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files\Content.IE5\Cache3
18:17:30.0310834    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4\CachePath    SUCCESS    Type: REG_SZ, Length: 178, Data: C:\Documents and Settings\tao\Local Settings\Temporary Internet Files\Content.IE5\Cache4
18:17:30.0311077    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1\CacheLimit    SUCCESS    Type: REG_DWORD, Length: 4, Data: 32694
18:17:30.0311315    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2\CacheLimit    SUCCESS    Type: REG_DWORD, Length: 4, Data: 32694
18:17:30.0311547    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3\CacheLimit    SUCCESS    Type: REG_DWORD, Length: 4, Data: 32694
18:17:30.0311778    111.exe    1600    RegSetValue    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4\CacheLimit    SUCCESS    Type: REG_DWORD, Length: 4, Data: 32694
18:17:30.0341933    111.exe    1600    RegSetValue    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies    SUCCESS    Type: REG_SZ, Length: 76, Data: C:\Documents and Settings\tao\Cookies
18:17:30.0352999    111.exe    1600    RegSetValue    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History    SUCCESS    Type: REG_SZ, Length: 106, Data: C:\Documents and Settings\tao\Local Settings\History
18:17:30.1033027    111.exe    1600    RegSetValue    HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass    SUCCESS    Type: REG_DWORD, Length: 4, Data: 1
18:17:30.1033367    111.exe    1600