Samedi 1 avril 2006
Process Request IRP Flags FsContext Path Status More info
1 15:20:31.593 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00000010 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS FileNameInformation
2 15:20:31.593 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00000010 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS FileNameInformation
3 15:20:31.593 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSPrefetchIEDW.EXE-1880380E.pf STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000020 Access: 0x00120089 Share: 0 Attrib: 0 Result: FILE_SUPERSEDED
4 15:20:31.593 0 iedw.exe IRP_MJ_FILE_SYSTEM_CONTROL/IRP_MN_USER_FS_REQUEST 00000800 E1D7CA58 C:Documents and SettingsInternet2Bureau STATUS_SUCCESS FSCTL_IS_VOLUME_MOUNTED (0x00090028)
5 15:20:31.593 0 iedw.exe IRP_MJ_FILE_SYSTEM_CONTROL/IRP_MN_USER_FS_REQUEST 00000800 E1D7CA58 C:Documents and SettingsInternet2Bureau STATUS_SUCCESS FSCTL_IS_VOLUME_MOUNTED (0x00090028)
6 15:20:31.593 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEF83A34-805B3A5D EndOfFile: FEF839C0-FEF83A64 Attrib: 0x00F80016
7 15:20:31.593 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0009D000 EndOfFile: 00000000-0009C400 Attrib: 0x00000020
8 15:20:31.593 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
9 15:20:31.593 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS AllocationSize: 00000000-0009D000 EndOfFile: 00000000-0009C400 NumberOfLinks: 1 DeletePending: 0 Directory: 0
10 15:20:31.593 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 1000 Read 1000
11 15:20:31.609 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS FileNameInformation
12 15:20:31.609 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS
13 15:20:31.609 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00091E00 ToRead 400 Read 400
14 15:20:31.609 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00087400 ToRead 7400 Read 7400
15 15:20:31.625 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
16 15:20:31.625 15 iedw.exe IRP_MJ_READ 00000043 E186BD90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
17 15:20:31.640 15 iedw.exe IRP_MJ_READ 00000043 E186CC70 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
18 15:20:31.656 15 iedw.exe IRP_MJ_READ 00000043 E18700D0 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 2000 Read 2000
19 15:20:31.671 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32CRYPTUI.dll.2.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
20 15:20:31.671 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32CRYPTUI.dll.2.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
21 15:20:31.671 15 iedw.exe IRP_MJ_READ 00000043 E186FD50 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
22 15:20:31.687 0 iedw.exe IRP_MJ_READ 00000043 E1871D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
23 15:20:31.687 0 iedw.exe IRP_MJ_READ 00000043 E1839718 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
24 15:20:31.687 15 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
25 15:20:31.703 0 iedw.exe IRP_MJ_READ 00000043 E1867D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
26 15:20:31.703 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F8000E
27 15:20:31.703 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00002000 EndOfFile: 00000000-00001400 Attrib: 0x00000020
28 15:20:31.703 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
29 15:20:31.703 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS FileNameInformation
30 15:20:31.703 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS
31 15:20:31.703 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS
32 15:20:31.718 15 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000E00 ToRead 400 Read 400
33 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80014
34 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00023000 EndOfFile: 00000000-00022C00 Attrib: 0x00000020
35 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
36 15:20:31.734 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS FileNameInformation
37 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS
38 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS
39 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
40 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 800 Read 800
41 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80016
42 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00010000 EndOfFile: 00000000-00010000 Attrib: 0x00000020
43 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
44 15:20:31.734 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS FileNameInformation
45 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS
46 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS
47 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000001 Attrib: 0x00000080 Result: FILE_OPENED
48 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
49 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
50 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
51 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSAppPatchsystest.sdb STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000001 Attrib: 0x00000080 Result: FILE_SUPERSEDED
52 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS
53 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS
54 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0000E400 ToRead 8000 Read 8000
55 15:20:31.734 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0008E800 ToRead 3600 Read 3600
56 15:20:31.750 15 iedw.exe IRP_MJ_READ 00000043 E186CC70 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00084200 ToRead 2400 Read 2400
57 15:20:31.765 15 iedw.exe IRP_MJ_READ 00000043 E1839718 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00021600 ToRead 800 Read 800
58 15:20:31.781 0 iedw.exe IRP_MJ_READ 00000043 E1871D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00028800 ToRead 400 Read 400
59 15:20:31.781 0 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00088000 ToRead 2200 Read 2200
60 15:20:31.796 0 iedw.exe IRP_MJ_READ 00000043 E1867D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00020400 ToRead 4000 Read 4000
61 15:20:31.796 0 iedw.exe IRP_MJ_READ 00000043 E186FD50 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00047800 ToRead 400 Read 400
62 15:20:31.796 15 iedw.exe IRP_MJ_READ 00000043 E186BD90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-000D7400 ToRead 1600 Read 1600
63 15:20:31.812 0 iedw.exe IRP_MJ_READ 00000043 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS Offset 00000000-00018400 ToRead 200 Read 200
64 15:20:31.812 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80016
65 15:20:31.812 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0000F000 EndOfFile: 00000000-0000F000 Attrib: 0x00000020
66 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
67 15:20:31.812 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS FileNameInformation
68 15:20:31.812 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS
69 15:20:31.812 0 iedw.exe IRP_MJ_CLOSE 00000404 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS
70 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
71 15:20:31.812 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS AllocationSize: 00000000-0081D000 EndOfFile: 00000000-0081CE00 NumberOfLinks: 1 DeletePending: 0 Directory: 0
72 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll.124.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
73 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll.124.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
74 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS
75 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS
76 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
77 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
78 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
79 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
80 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS AllocationSize: 00000000-00101000 EndOfFile: 00000000-00100800 NumberOfLinks: 1 DeletePending: 0 Directory: 0
81 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
82 15:20:31.828 0 iedw.exe IRP_MJ_READ 00000043 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 8000 Read 8000
83 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
84 15:20:31.828 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FileNameInformation
85 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
86 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
87 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
88 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
89 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
90 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
91 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
92 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
93 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
94 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
95 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
96 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
97 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
98 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
99 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
100 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
101 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
102 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
103 15:20:31.843 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
104 15:20:31.843 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
105 15:20:31.843 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
106 15:20:31.843 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0002F400 ToRead 8000 Read 8000
107 15:20:31.843 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00027400 ToRead 8000 Read 8000
108 15:20:31.843 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0007E400 ToRead 8000 Read 8000
109 15:20:31.859 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00008400 ToRead 6000 Read 6000
110 15:20:31.859 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00017400 ToRead 8000 Read 8000
111 15:20:31.859 0 iedw.exe IRP_MJ_SET_INFORMATION 00000834 E18750D0 C:WINDOWSsystem32configsoftware.LOG STATUS_SUCCESS FileEndOfFileInformation EndOfFile: 00000000-00003000
112 15:20:31.859 0 iedw.exe IRP_MJ_SET_INFORMATION 00000834 E18750D0 C:WINDOWSsystem32configsoftware.LOG STATUS_SUCCESS FileEndOfFileInformation EndOfFile: 00000000-00003000
113 15:20:31.859 15 iedw.exe IRP_MJ_READ 00000043 E18700D0 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-0000D600 ToRead 200 Read 200
114 15:20:31.875 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
115 15:20:31.875 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS AllocationSize: 00000000-000A2000 EndOfFile: 00000000-000A1C00 NumberOfLinks: 1 DeletePending: 0 Directory: 0
116 15:20:31.875 62 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 8000 Read 8000
117 15:20:31.937 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll.123.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
118 15:20:31.937 15 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS Offset 00000000-0008A000 ToRead 8000 Read 8000
119 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll.123.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
120 15:20:31.953 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS
121 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
122 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
123 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
124 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
125 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
126 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
127 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80018
128 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0006A000 EndOfFile: 00000000-00069600 Attrib: 0x00000020
129 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
130 15:20:31.953 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS AllocationSize: 00000000-0006A000 EndOfFile: 00000000-00069600 NumberOfLinks: 1 DeletePending: 0 Directory: 0
131 15:20:31.953 15 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 1000 Read 1000
132 15:20:31.968 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS FileNameInformation
133 15:20:31.968 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS
134 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-0005F400 ToRead 4000 Read 4000
135 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00057400 ToRead 7A00 Read 7A00
136 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
137 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-0005EE00 ToRead 600 Read 600
138 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
139 15:20:31.968 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS AllocationSize: 00000000-0016D000 EndOfFile: 00000000-0016C800 NumberOfLinks: 1 DeletePending: 0 Directory: 0
140 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll.123.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
141 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll.123.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
142 15:20:32.000 0 iedw.exe IRP_MJ_CLEANUP 00000404 E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS
143 15:20:32.000 0 iedw.exe IRP_MJ_CLOSE 00000404 E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS
144 15:20:32.000 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFEBA9F30
145 15:20:32.000 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
146 15:20:32.000 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
147 15:20:32.000 0 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000C00 ToRead 200 Read 200
148 15:20:32.000 15 iedw.exe IRP_MJ_READ 00000043 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS Offset 00000000-00003C00 ToRead 400 Read 400
149 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEBA9FA4-805B3A5D EndOfFile: FEBA9F30-FEBA9FD4 Attrib: 0x00F80018
150 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-002DA000 EndOfFile: 00000000-002D9200 Attrib: 0x00000080
151 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
152 15:20:32.015 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS FileNameInformation
153 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS
154 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS
155 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
156 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
157 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
158 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
159 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
160 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
161 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
162 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
163 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
164 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
165 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
166 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
167 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
168 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
169 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
170 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
171 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFEBA9F30
172 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
173 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
174 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
175 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:DOCUME~1INTERN~1LOCALS~1Tempie437A.tmp STATUS_SUCCESS FILE_OVERWRITE_IF CreOpts: 0x00001060 Access: 0x0013019F Share: 0x00000005 Attrib: 0x00000080 Result: FILE_CREATED
176 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEBA9FA4-805B3A5D EndOfFile: FEBA9F30-FEBA9FD4 Attrib: 0x00F80012
177 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00006000 EndOfFile: 00000000-00005A00 Attrib: 0x00000020
178 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
179 15:20:32.015 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS FileNameInformation
180 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS
181 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS
182 15:20:32.015 15 iedw.exe IRP_MJ_READ
1 15:20:31.593 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00000010 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS FileNameInformation
2 15:20:31.593 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00000010 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS FileNameInformation
3 15:20:31.593 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSPrefetchIEDW.EXE-1880380E.pf STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000020 Access: 0x00120089 Share: 0 Attrib: 0 Result: FILE_SUPERSEDED
4 15:20:31.593 0 iedw.exe IRP_MJ_FILE_SYSTEM_CONTROL/IRP_MN_USER_FS_REQUEST 00000800 E1D7CA58 C:Documents and SettingsInternet2Bureau STATUS_SUCCESS FSCTL_IS_VOLUME_MOUNTED (0x00090028)
5 15:20:31.593 0 iedw.exe IRP_MJ_FILE_SYSTEM_CONTROL/IRP_MN_USER_FS_REQUEST 00000800 E1D7CA58 C:Documents and SettingsInternet2Bureau STATUS_SUCCESS FSCTL_IS_VOLUME_MOUNTED (0x00090028)
6 15:20:31.593 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEF83A34-805B3A5D EndOfFile: FEF839C0-FEF83A64 Attrib: 0x00F80016
7 15:20:31.593 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0009D000 EndOfFile: 00000000-0009C400 Attrib: 0x00000020
8 15:20:31.593 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
9 15:20:31.593 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS AllocationSize: 00000000-0009D000 EndOfFile: 00000000-0009C400 NumberOfLinks: 1 DeletePending: 0 Directory: 0
10 15:20:31.593 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 1000 Read 1000
11 15:20:31.609 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS FileNameInformation
12 15:20:31.609 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS
13 15:20:31.609 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00091E00 ToRead 400 Read 400
14 15:20:31.609 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00087400 ToRead 7400 Read 7400
15 15:20:31.625 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
16 15:20:31.625 15 iedw.exe IRP_MJ_READ 00000043 E186BD90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
17 15:20:31.640 15 iedw.exe IRP_MJ_READ 00000043 E186CC70 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
18 15:20:31.656 15 iedw.exe IRP_MJ_READ 00000043 E18700D0 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 2000 Read 2000
19 15:20:31.671 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32CRYPTUI.dll.2.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
20 15:20:31.671 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32CRYPTUI.dll.2.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
21 15:20:31.671 15 iedw.exe IRP_MJ_READ 00000043 E186FD50 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
22 15:20:31.687 0 iedw.exe IRP_MJ_READ 00000043 E1871D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
23 15:20:31.687 0 iedw.exe IRP_MJ_READ 00000043 E1839718 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
24 15:20:31.687 15 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
25 15:20:31.703 0 iedw.exe IRP_MJ_READ 00000043 E1867D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00000400 ToRead 1000 Read 1000
26 15:20:31.703 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F8000E
27 15:20:31.703 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00002000 EndOfFile: 00000000-00001400 Attrib: 0x00000020
28 15:20:31.703 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
29 15:20:31.703 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS FileNameInformation
30 15:20:31.703 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS
31 15:20:31.703 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS
32 15:20:31.718 15 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000E00 ToRead 400 Read 400
33 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80014
34 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00023000 EndOfFile: 00000000-00022C00 Attrib: 0x00000020
35 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
36 15:20:31.734 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS FileNameInformation
37 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS
38 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS
39 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
40 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 800 Read 800
41 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80016
42 15:20:31.734 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00010000 EndOfFile: 00000000-00010000 Attrib: 0x00000020
43 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
44 15:20:31.734 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS FileNameInformation
45 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS
46 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CFB710 C:WINDOWSsystem32ShimEng.dll STATUS_SUCCESS
47 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000001 Attrib: 0x00000080 Result: FILE_OPENED
48 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
49 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
50 15:20:31.734 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS AllocationSize: 00000000-00123000 EndOfFile: 00000000-00122B8C NumberOfLinks: 1 DeletePending: 0 Directory: 0
51 15:20:31.734 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSAppPatchsystest.sdb STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000001 Attrib: 0x00000080 Result: FILE_SUPERSEDED
52 15:20:31.734 0 iedw.exe IRP_MJ_CLEANUP 00000404 E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS
53 15:20:31.734 0 iedw.exe IRP_MJ_CLOSE 00000404 E15610D0 C:WINDOWSAppPatchsysmain.sdb STATUS_SUCCESS
54 15:20:31.734 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0000E400 ToRead 8000 Read 8000
55 15:20:31.734 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0008E800 ToRead 3600 Read 3600
56 15:20:31.750 15 iedw.exe IRP_MJ_READ 00000043 E186CC70 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00084200 ToRead 2400 Read 2400
57 15:20:31.765 15 iedw.exe IRP_MJ_READ 00000043 E1839718 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00021600 ToRead 800 Read 800
58 15:20:31.781 0 iedw.exe IRP_MJ_READ 00000043 E1871D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00028800 ToRead 400 Read 400
59 15:20:31.781 0 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00088000 ToRead 2200 Read 2200
60 15:20:31.796 0 iedw.exe IRP_MJ_READ 00000043 E1867D90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00020400 ToRead 4000 Read 4000
61 15:20:31.796 0 iedw.exe IRP_MJ_READ 00000043 E186FD50 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-00047800 ToRead 400 Read 400
62 15:20:31.796 15 iedw.exe IRP_MJ_READ 00000043 E186BD90 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-000D7400 ToRead 1600 Read 1600
63 15:20:31.812 0 iedw.exe IRP_MJ_READ 00000043 E1CE3430 C:WINDOWSsystem32sfc_os.dll STATUS_SUCCESS Offset 00000000-00018400 ToRead 200 Read 200
64 15:20:31.812 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80016
65 15:20:31.812 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0000F000 EndOfFile: 00000000-0000F000 Attrib: 0x00000020
66 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
67 15:20:31.812 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS FileNameInformation
68 15:20:31.812 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS
69 15:20:31.812 0 iedw.exe IRP_MJ_CLOSE 00000404 E1C660D0 C:WINDOWSsystem32sockspy.dll STATUS_SUCCESS
70 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
71 15:20:31.812 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS AllocationSize: 00000000-0081D000 EndOfFile: 00000000-0081CE00 NumberOfLinks: 1 DeletePending: 0 Directory: 0
72 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll.124.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
73 15:20:31.812 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHELL32.dll.124.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
74 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS
75 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E18590D0 C:WINDOWSsystem32SHELL32.dll STATUS_SUCCESS
76 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
77 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
78 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
79 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
80 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS AllocationSize: 00000000-00101000 EndOfFile: 00000000-00100800 NumberOfLinks: 1 DeletePending: 0 Directory: 0
81 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
82 15:20:31.828 0 iedw.exe IRP_MJ_READ 00000043 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 8000 Read 8000
83 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
84 15:20:31.828 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS FileNameInformation
85 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
86 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E1CE0B28 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9comctl32.dll STATUS_SUCCESS
87 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
88 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
89 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
90 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
91 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
92 15:20:31.828 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
93 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
94 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
95 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
96 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
97 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
98 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
99 15:20:31.828 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
100 15:20:31.828 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
101 15:20:31.828 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
102 15:20:31.828 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
103 15:20:31.843 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
104 15:20:31.843 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
105 15:20:31.843 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
106 15:20:31.843 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0002F400 ToRead 8000 Read 8000
107 15:20:31.843 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00027400 ToRead 8000 Read 8000
108 15:20:31.843 15 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-0007E400 ToRead 8000 Read 8000
109 15:20:31.859 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00008400 ToRead 6000 Read 6000
110 15:20:31.859 0 iedw.exe IRP_MJ_READ 00000043 E13C30D0 C:WINDOWSsystem32DBGHELP.dll STATUS_SUCCESS Offset 00000000-00017400 ToRead 8000 Read 8000
111 15:20:31.859 0 iedw.exe IRP_MJ_SET_INFORMATION 00000834 E18750D0 C:WINDOWSsystem32configsoftware.LOG STATUS_SUCCESS FileEndOfFileInformation EndOfFile: 00000000-00003000
112 15:20:31.859 0 iedw.exe IRP_MJ_SET_INFORMATION 00000834 E18750D0 C:WINDOWSsystem32configsoftware.LOG STATUS_SUCCESS FileEndOfFileInformation EndOfFile: 00000000-00003000
113 15:20:31.859 15 iedw.exe IRP_MJ_READ 00000043 E18700D0 C:[-=Not In Cache=-] STATUS_SUCCESS Offset 00000000-0000D600 ToRead 200 Read 200
114 15:20:31.875 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
115 15:20:31.875 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS AllocationSize: 00000000-000A2000 EndOfFile: 00000000-000A1C00 NumberOfLinks: 1 DeletePending: 0 Directory: 0
116 15:20:31.875 62 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 8000 Read 8000
117 15:20:31.937 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll.123.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
118 15:20:31.937 15 iedw.exe IRP_MJ_READ 00000043 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS Offset 00000000-0008A000 ToRead 8000 Read 8000
119 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32WININET.dll.123.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
120 15:20:31.953 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1865C08 C:WINDOWSsystem32WININET.dll STATUS_SUCCESS
121 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
122 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
123 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
124 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFECDDD08
125 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
126 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
127 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FECDDD7C-805B3A5D EndOfFile: FECDDD08-FECDDDAC Attrib: 0x00F80018
128 15:20:31.953 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-0006A000 EndOfFile: 00000000-00069600 Attrib: 0x00000020
129 15:20:31.953 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
130 15:20:31.953 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS AllocationSize: 00000000-0006A000 EndOfFile: 00000000-00069600 NumberOfLinks: 1 DeletePending: 0 Directory: 0
131 15:20:31.953 15 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00000000 ToRead 1000 Read 1000
132 15:20:31.968 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS FileNameInformation
133 15:20:31.968 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS
134 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-0005F400 ToRead 4000 Read 4000
135 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00057400 ToRead 7A00 Read 7A00
136 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-00000400 ToRead 8000 Read 8000
137 15:20:31.968 0 iedw.exe IRP_MJ_READ 00000043 E1528D90 C:WINDOWSsystem32RichEd20.dll STATUS_SUCCESS Offset 00000000-0005EE00 ToRead 600 Read 600
138 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
139 15:20:31.968 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS AllocationSize: 00000000-0016D000 EndOfFile: 00000000-0016C800 NumberOfLinks: 1 DeletePending: 0 Directory: 0
140 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll.123.Manifest STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
141 15:20:31.968 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32SHDOCVW.dll.123.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
142 15:20:32.000 0 iedw.exe IRP_MJ_CLEANUP 00000404 E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS
143 15:20:32.000 0 iedw.exe IRP_MJ_CLOSE 00000404 E186BD90 C:WINDOWSsystem32SHDOCVW.dll STATUS_SUCCESS
144 15:20:32.000 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFEBA9F30
145 15:20:32.000 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
146 15:20:32.000 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
147 15:20:32.000 0 iedw.exe IRP_MJ_READ 00000043 E1CE5B98 C:WINDOWSsystem32sfc.dll STATUS_SUCCESS Offset 00000000-00000C00 ToRead 200 Read 200
148 15:20:32.000 15 iedw.exe IRP_MJ_READ 00000043 E14410D0 C:Program FilesInternet Exploreriedw.exe STATUS_SUCCESS Offset 00000000-00003C00 ToRead 400 Read 400
149 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEBA9FA4-805B3A5D EndOfFile: FEBA9F30-FEBA9FD4 Attrib: 0x00F80018
150 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-002DA000 EndOfFile: 00000000-002D9200 Attrib: 0x00000080
151 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
152 15:20:32.015 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS FileNameInformation
153 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS
154 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E1D59818 C:WINDOWSsystem32xpsp2res.dll STATUS_SUCCESS
155 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
156 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
157 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
158 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
159 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
160 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED Attrib: 0x00000023
161 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00120089 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
162 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
163 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
164 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
165 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_OPENED
166 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
167 15:20:32.015 0 iedw.exe FASTIO_QUERY_STANDARD_INFO E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS AllocationSize: 00000000-00001000 EndOfFile: 00000000-000002ED NumberOfLinks: 1 DeletePending: 0 Directory: 0
168 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWindowsShell.Config STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00000060 Access: 0x001200A9 Share: 0x00000001 Attrib: 0 Result: FILE_SUPERSEDED
169 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
170 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E13B5A58 C:WINDOWSWindowsShell.Manifest STATUS_SUCCESS
171 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: 00000005-00000000 EndOfFile: 805AFDF8-F6303C2C Attrib: 0xFEBA9F30
172 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
173 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000021 Access: 0x00100020 Share: 0x00000003 Attrib: 0 Result: FILE_OPENED
174 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00000000 EndOfFile: 00000000-00000000 Attrib: 0x00000010
175 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:DOCUME~1INTERN~1LOCALS~1Tempie437A.tmp STATUS_SUCCESS FILE_OVERWRITE_IF CreOpts: 0x00001060 Access: 0x0013019F Share: 0x00000005 Attrib: 0x00000080 Result: FILE_CREATED
176 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_OBJECT_NAME_NOT_FOUND FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: FILE_SUPERSEDED AllocationSize: FEBA9FA4-805B3A5D EndOfFile: FEBA9F30-FEBA9FD4 Attrib: 0x00F80012
177 15:20:32.015 0 iedw.exe FASTIO_QUERY_OPEN 00000000 C:[-=Error 0xc000000d Getting Name=-] STATUS_SUCCESS FILE_OPEN CreOpts: 0x00200000 Access: 0x00000080 Share: 0x00000007 Attrib: 0 Result: 00000038 AllocationSize: 00000000-00006000 EndOfFile: 00000000-00005A00 Attrib: 0x00000020
178 15:20:32.015 0 iedw.exe IRP_MJ_CREATE 00000884 00000000 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS FILE_OPEN CreOpts: 0x00000060 Access: 0x00100020 Share: 0x00000005 Attrib: 0 Result: FILE_OPENED
179 15:20:32.015 0 iedw.exe IRP_MJ_QUERY_INFORMATION 00001014 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS FileNameInformation
180 15:20:32.015 0 iedw.exe IRP_MJ_CLEANUP 00000404 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS
181 15:20:32.015 0 iedw.exe IRP_MJ_CLOSE 00000404 E1C61D90 C:WINDOWSsystem32psapi.dll STATUS_SUCCESS
182 15:20:32.015 15 iedw.exe IRP_MJ_READ