16:02:51,0072167	java.exe	5612	CreateFile	C:\pbtest\foo.txt	SUCCESS	Desired Access: Append Data/Add Subdirectory/Create Pipe Instance, Write EA, Read Attributes, Write Attributes, Read Control, Synchronize, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Opened
16:02:51,0952435	sh.exe	3192	DeviceIoControl	C:\pbtest\foo.txt	INVALID PARAMETER	Control: 0x1b0050 (Device:0x1b Function:20 Method: 0)
16:02:51,0952795	sh.exe	3192	QueryNameInformationFile	C:\pbtest\foo.txt	SUCCESS	Name: \pbtest\foo.txt
16:02:51,0969548	sh.exe	3192	CreateFile	C:\pbtest\foo.txt	SUCCESS	Desired Access: Read EA, Read Attributes, Read Control, Disposition: Open, Options: Open For Backup, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
16:02:51,0970670	sh.exe	3192	QueryInformationVolume	C:\pbtest\foo.txt	SUCCESS	VolumeCreationTime: 31/01/2013 21:13:11, VolumeSerialNumber: 5003-210E, SupportsObjects: True, VolumeLabel: CSC ESOE
16:02:51,0970883	sh.exe	3192	QueryAttributeInformationVolume	C:\pbtest\foo.txt	SUCCESS	FileSystemAttributes: Case Preserved, Case Sensitive, Unicode, ACLs, Compression, Named Streams, Object IDs, Reparse Points, Sparse Files, Quotas, Transactions, 0x3c00000, MaximumComponentNameLength: 255, FileSystemName: NTFS
16:02:51,0971132	sh.exe	3192	QueryNetworkOpenInformationFile	C:\pbtest\foo.txt	SUCCESS	CreationTime: 18/09/2014 13:38:07, LastAccessTime: 18/09/2014 15:43:47, LastWriteTime: 18/09/2014 16:02:25, ChangeTime: 18/09/2014 16:02:25, AllocationSize: 01/01/1601 02:00:00, EndOfFile: 01/01/1601 02:00:00, FileAttributes: A
16:02:51,0971351	sh.exe	3192	CloseFile	C:\pbtest\foo.txt	SUCCESS	
16:02:51,1362820	sh.exe	3192	CloseFile	C:\pbtest\foo.txt	SUCCESS