filemon results
Code:
09:50 bash.exe:1856 FASTIO_QUERY_OPEN C:\cygwin\bin\sed.exe SUCCESS Attributes: A
09:50 bash.exe:1856 IRP_MJ_CREATE C:\cygwin\bin\sed.exe SUCCESS Options: [B]Open Access: 00020080 [/B]
09:50 bash.exe:1856 IRP_MJ_QUERY_INFORMATION C:\cygwin\bin\sed.exe SUCCESS FileNameInformation
09:50 bash.exe:1856 IRP_MJ_QUERY_VOLUME_INFORMATION C:\cygwin\bin\sed.exe SUCCESS FileFsVolumeInformation
09:50 bash.exe:1856 IRP_MJ_QUERY_INFORMATION C:\cygwin\bin\sed.exe SUCCESS [B]FileAllInformation [/B]
[COLOR="Red"]09:50 bash.exe:1856 IRP_MJ_QUERY_SECURITY C:\cygwin\bin\sed.exe BUFFER OVERFLOW [/COLOR]
while other IRP_MJ_QUERY.. complete ok
Code:
09:50 bash.exe:1856 IRP_MJ_CREATE C:\cygwin\bin\sed.exe SUCCESS Options: Open Access: 001000A1
09:50 bash.exe:1856 IRP_MJ_QUERY_INFORMATION C:\cygwin\bin\sed.exe SUCCESS FileNameInformation
09:50 bash.exe:1856 FASTIO_QUERY_BASIC_INFO C:\cygwin\bin\sed.exe SUCCESS Attributes: A
09:50 bash.exe:1856 FASTIO_QUERY_STANDARD_INFO C:\cygwin\bin\sed.exe SUCCESS Length: 97280
09:50 bash.exe:1856 IRP_MJ_QUERY_INFORMATION C:\cygwin\bin\sed.exe SUCCESS FileNameInformation
09:50 bash.exe:1856 FASTIO_QUERY_OPEN C:\cygwin\bin\sed.exe SUCCESS Attributes: A
09:50 bash.exe:1856 FASTIO_QUERY_STANDARD_INFO C:\cygwin\bin\sed.exe SUCCESS Length: 97280
09:50 bash.exe:1856 FASTIO_QUERY_STANDARD_INFO C:\cygwin\bin\sed.exe SUCCESS Length: 97280
09:50 bash.exe:1856 IRP_MJ_QUERY_INFORMATION C:\cygwin\bin\sed.exe SUCCESS FileNameInformation
09:50 bash.exe:1856 IRP_MJ_CREATE C:\cygwin\bin\sed.exe SUCCESS Options: Open Access: Read
09:50 bash.exe:1856 FASTIO_QUERY_STANDARD_INFO C:\cygwin\bin\sed.exe SUCCESS Length: 97280
09:50 bash.exe:1856 IRP_MJ_READ C:\cygwin\bin\sed.exe SUCCESS Offset: 0 Length: 8192
09:50 System:4 IRP_MJ_CLOSE C:\cygwin\bin\sed.exe SUCCESS
is a puzzlement! (from the King & I)