16:02:25,7924624 java.exe 5612 CreateFile C:\pbtest\foo.txt SUCCESS Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Overwritten 16:02:25,9070108 sh.exe 6712 DeviceIoControl C:\pbtest\foo.txt INVALID PARAMETER Control: 0x1b0050 (Device:0x1b Function:20 Method: 0) 16:02:25,9070460 sh.exe 6712 QueryNameInformationFile C:\pbtest\foo.txt SUCCESS Name: \pbtest\foo.txt 16:02:25,9094194 sh.exe 6712 CreateFile C:\pbtest\foo.txt SUCCESS Desired Access: Read EA, Read Attributes, Read Control, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened 16:02:25,9095628 sh.exe 6712 QueryInformationVolume C:\pbtest\foo.txt SUCCESS VolumeCreationTime: 31/01/2013 21:13:11, VolumeSerialNumber: 5003-210E, SupportsObjects: True, VolumeLabel: CSC ESOE 16:02:25,9095844 sh.exe 6712 QueryAttributeInformationVolume C:\pbtest\foo.txt SUCCESS FileSystemAttributes: Case Preserved, Case Sensitive, Unicode, ACLs, Compression, Named Streams, Object IDs, Reparse Points, Sparse Files, Quotas, Transactions, 0x3c00000, MaximumComponentNameLength: 255, FileSystemName: NTFS 16:02:25,9096107 sh.exe 6712 QueryNetworkOpenInformationFile C:\pbtest\foo.txt SUCCESS CreationTime: 18/09/2014 13:38:07, LastAccessTime: 18/09/2014 15:43:47, LastWriteTime: 18/09/2014 16:02:25, ChangeTime: 18/09/2014 16:02:25, AllocationSize: 01/01/1601 02:00:00, EndOfFile: 01/01/1601 02:00:00, FileAttributes: A 16:02:25,9096323 sh.exe 6712 CloseFile C:\pbtest\foo.txt SUCCESS 16:02:25,9332531 sh.exe 6712 WriteFile C:\pbtest\foo.txt SUCCESS Offset: 0, Length: 15, Priority: Normal 16:02:25,9335022 sh.exe 6712 CloseFile C:\pbtest\foo.txt SUCCESS