18:06:33 cmd.exe:3564 IRP_MJ_READ* E: SUCCESS Offset: 77824 Length: 4096 18:06:33 cmd.exe:3564 IRP_MJ_READ* E: SUCCESS Offset: 0 Length: 4096 18:06:33 cmd.exe:3564 IRP_MJ_READ* E: SUCCESS Offset: 0 Length: 4096 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 cmd.exe:3564 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\test.txt SUCCESS Options: Open Access: All 18:06:33 System:3564 IRP_MJ_CLEANUP E: SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_READ* E: SUCCESS Offset: 0 Length: 4096 18:06:33 cmd.exe:3564 FASTIO_QUERY_STANDARD_INFO E:\test.txt SUCCESS Length: 512 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 cmd.exe:3564 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 cmd.exe:3564 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 cmd.exe:3564 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 cmd.exe:3564 FASTIO_QUERY_BASIC_INFO E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 FASTIO_QUERY_STANDARD_INFO E:\test.txt SUCCESS Length: 512 18:06:33 cmd.exe:3564 IRP_MJ_QUERY_INFORMATION E:\test.txt SUCCESS FileNameInformation 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 cmd.exe:3564 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 cmd.exe:3564 FASTIO_QUERY_STANDARD_INFO E:\test.txt SUCCESS Length: 512 18:06:33 cmd.exe:3564 FASTIO_QUERY_STANDARD_INFO E:\test.txt SUCCESS Length: 512 18:06:33 cmd.exe:3564 IRP_MJ_CLEANUP E:\test.txt SUCCESS 18:06:33 cmd.exe:3564 IRP_MJ_CLOSE E:\test.txt SUCCESS 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\ SUCCESS Attributes: DHSA 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 cmd.exe:3564 FASTIO_QUERY_OPEN E:\ SUCCESS Attributes: DHSA 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E: SUCCESS Options: Open Access: All 18:06:33 notepad.exe:4008 IRP_MJ_QUERY_VOLUME_INFORMATION E: BUFFER OVERFLOW FileFsVolumeInformation 18:06:33 notepad.exe:4008 IOCTL: 0x90120 E: SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 notepad.exe:4008 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileNamesInformation 18:06:33 notepad.exe:4008 IRP_MJ_DIRECTORY_CONTROL E:\ NO MORE FILES FileNamesInformation 18:06:33 System:4008 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 System:4008 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 System:4008 IRP_MJ_CLEANUP E: SUCCESS 18:06:33 System:4008 IRP_MJ_CLOSE E: SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: Traverse 18:06:33 notepad.exe:4008 FSCTL_IS_VOLUME_MOUNTED E:\ SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 notepad.exe:4008 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 notepad.exe:4008 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CLOSE E:\ SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E:\test.txt SUCCESS Options: Open Access: All 18:06:33 System:4008 IRP_MJ_CLEANUP E: SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CLOSE E:\test.txt SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_QUERY_VOLUME_INFORMATION E:\test.txt BUFFER OVERFLOW FileFsVolumeInformation 18:06:33 notepad.exe:4008 IRP_MJ_QUERY_INFORMATION E:\test.txt BUFFER OVERFLOW FileAllInformation 18:06:33 notepad.exe:4008 FASTIO_QUERY_STANDARD_INFO E:\test.txt SUCCESS Length: 512 18:06:33 notepad.exe:4008 IRP_MJ_CLEANUP E:\test.txt SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CLOSE E:\test.txt SUCCESS 18:06:33 System:4 IRP_MJ_QUERY_INFORMATION E:\test.txt SUCCESS FileNameInformation 18:06:33 System:4 IRP_MJ_CREATE E: SUCCESS Options: Open Access: All 18:06:33 System:4 IRP_MJ_QUERY_VOLUME_INFORMATION E: BUFFER OVERFLOW FileFsVolumeInformation 18:06:33 System:4 IRP_MJ_CLEANUP E: SUCCESS 18:06:33 System:4 IRP_MJ_CLOSE E: SUCCESS 18:06:33 notepad.exe:4008 FASTIO_QUERY_OPEN E:\test.txt SUCCESS Attributes: A 18:06:33 notepad.exe:4008 IRP_MJ_CREATE E:\ SUCCESS Options: Open Directory Access: All 18:06:33 notepad.exe:4008 IRP_MJ_DIRECTORY_CONTROL E:\ SUCCESS FileBothDirectoryInformation: test.txt 18:06:33 notepad.exe:4008 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:33 notepad.exe:4008 IRP_MJ_CLOSE E:\ SUCCESS 18:06:35 notepad.exe:4008 IRP_MJ_CLEANUP E:\ SUCCESS 18:06:35 notepad.exe:4008 IRP_MJ_CLOSE E:\ SUCCESS