"Time of Day","Process Name","PID","Operation","Path","Result","Detail"
"9:50:25.9944537","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:25.9944932","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:25.9945225","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:25.9945369","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9945566","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9947480","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:25.9947862","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:25.9948095","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:25.9948253","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:25.9948437","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0004524","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0004903","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0005152","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0005291","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0005471","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0009802","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0010174","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0010404","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0010539","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0010716","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0034335","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0034753","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0035072","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0035227","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0035414","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0044578","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0044950","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0045183","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0045321","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0045496","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0049583","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0049948","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0050175","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0050313","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0050487","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0064304","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0065094","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0065353","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0065495","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0065679","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0074222","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0074587","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0074814","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0074952","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0075126","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0080282","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0080650","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0080877","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0081015","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0081189","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0089624","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0089985","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0090212","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0090350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0090525","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0094415","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0094783","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0095010","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0095145","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0095319","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0104598","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0104993","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0105269","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0105414","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0105595","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0109419","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0109790","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0110021","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0110159","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0110330","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0110869","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0112066","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:26.0112628","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:26.0112799","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, FileAttributes: A, AllocationSize: 184, EndOfFile: 180, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:26.0114213","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 180"
"9:50:26.0114348","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 180, Priority: Normal"
"9:50:26.0119149","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0129556","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:26.0129951","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0139710","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:26.0140085","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0149673","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0150061","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0150334","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0150472","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0150660","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0154997","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0155405","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0155855","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0156000","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0156184","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0163211","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0163668","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0164007","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0164161","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0164352","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0173579","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0173986","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0174305","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0174453","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0174647","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0181424","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0181793","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0182033","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0182171","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0182348","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0209506","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0209881","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0210131","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0210272","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0210450","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0214192","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0214557","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0214787","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0214925","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0215106","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0224296","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0224665","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0224898","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0225036","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0225214","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0229364","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0229729","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0229955","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0230090","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0230265","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0245016","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0245440","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0245759","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0245910","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0246101","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0314220","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0314585","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0314841","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0314979","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0315160","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0344481","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\s.test.rb","FAST IO DISALLOWED",""
"9:50:26.0344849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\s.test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:26.0354421","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0354786","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0355033","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0355171","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0355349","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0389632","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0389997","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0390250","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0390388","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0390569","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0414678","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0415043","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0415273","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0415411","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0415589","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0439452","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0439827","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0440057","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0440195","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0440372","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0465508","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:26.0465905","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:26.0466205","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:26.0466353","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:26.0466540","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:27.6895525","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:27.6895617","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:27.6895686","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5328267","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:29.5328675","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:29.5338145","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:29.5338523","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:29.5338809","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:29.5338950","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5339144","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5340999","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:29.5341377","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:29.5341614","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:29.5341752","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5341956","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:29.5346615","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:29.5347016","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.3465348","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3465746","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3466035","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3466183","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3466384","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3467896","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3468271","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3468508","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3468652","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3468833","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3476607","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3477054","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3477416","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3477570","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3477781","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3481694","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3482101","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3482407","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3482552","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3482739","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3488793","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3489191","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3489464","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3489608","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3489796","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3491861","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3492249","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3492518","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3492663","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3492857","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3497296","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3497668","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3497918","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3498056","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3498230","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3499388","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3499753","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3499986","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3500121","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3500298","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3504593","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3504961","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3505188","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3505326","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3505500","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3509551","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3509920","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3510156","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3510291","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3510469","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3511764","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3512129","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3512356","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3512494","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3512669","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3516825","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3517197","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3517427","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3517562","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3517746","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3518893","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3519262","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3519492","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3519627","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3519804","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3534256","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3534664","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3534946","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3535091","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3535275","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3589258","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3589643","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3589893","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3590031","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3590212","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3593763","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3594135","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3594361","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3594500","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3594674","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3628986","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3629358","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3629608","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3629743","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3629924","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3633981","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3634350","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3634580","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3634718","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3634889","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3674058","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3674426","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3674663","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3674798","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3674976","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3679109","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3679477","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3679701","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3679836","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3680010","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3680523","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3681779","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:30.3682345","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.3682516","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, FileAttributes: A, AllocationSize: 184, EndOfFile: 180, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.3697441","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.3697872","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.3698187","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.3698338","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3698526","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.3750102","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 16 384"
"9:50:30.3750233","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 180, Priority: Normal"
"9:50:30.3757132","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 180, Length: 16 384"
"9:50:30.3757260","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","END OF FILE","Offset: 180, Length: 16 384, Priority: Normal"
"9:50:30.3794667","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4094159","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4094524","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4104250","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4104684","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4104964","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4105102","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4105290","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4108808","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4109173","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4109406","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4109544","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4109722","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4118860","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4119228","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4129465","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4129830","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4130063","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4130201","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4130379","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4134048","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4134407","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4134634","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:49:16, ChangeTime: 17.01.2013 9:49:16, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4134768","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4134943","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4135544","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Overwritten"
"9:50:30.4136541","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:30.4136866","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:30.4137113","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4137271","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4139116","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4139507","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4139763","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4139905","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4140086","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4140635","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4140901","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4141036","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4143522","VirtualBox.exe","4132","SetBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 01.01.1601 4:00:00, LastAccessTime: 01.01.1601 4:00:00, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 01.01.1601 4:00:00, FileAttributes: n/a"
"9:50:30.4143877","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4144012","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4149654","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:30.4149917","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:30.4150138","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:30.4150269","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:30.4153528","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4153712","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4158848","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4159226","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4159486","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4159627","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4159805","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4164596","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 55, Priority: Normal"
"9:50:30.4168581","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 55, Length: 124"
"9:50:30.4168729","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 55, Length: 124, Priority: Normal"
"9:50:30.4174697","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4175099","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4175395","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:28, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4175542","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4175825","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4179061","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4180495","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4180689","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4189337","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4189711","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4199287","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:30.4199655","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:30.4208934","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4209303","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4209539","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4209681","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4209858","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4213959","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:30.4214344","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:30.4214587","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:30.4214728","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:30.4214906","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3771603","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:32.3772018","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:32.3781146","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3781527","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3781813","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3781955","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3782149","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3788449","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3788830","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3789071","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3789218","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3789399","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3796101","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3796472","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3796706","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3796847","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3797028","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3801336","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:32.3801710","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:32.3801944","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:32.3802085","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:32.3802266","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:34.2783320","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:34.2783738","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:37.6897672","System","4","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 4 096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
"9:50:37.6897800","System","4","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 179"
"9:50:37.6897896","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:37.6898027","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:37.6898109","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4082357","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4082749","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4083035","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4083179","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4083377","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4087878","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4088256","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4088500","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4088644","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4088829","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4094419","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4094800","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4095037","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4095181","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4095362","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4097602","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:38.4103573","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:38.4103918","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:38.4104070","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:38.4104270","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3796518","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3796913","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3797202","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3797350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3797544","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3799455","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3799839","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3800080","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3800221","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3800402","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3809125","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3809589","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3810020","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3810194","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3810398","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3811644","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3812049","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3812312","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3812460","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3812644","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3830124","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3830545","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3830847","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3830995","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3831183","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3859958","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3860369","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3860688","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3860836","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3861027","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3869228","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3869596","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3869826","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3869967","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3870148","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3882864","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3883328","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3883673","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3883827","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3884018","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3885202","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3885580","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3885817","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3885955","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3886136","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3894251","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3894619","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3894850","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3894991","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3895168","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3899519","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3899884","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3900111","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3900245","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3900430","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3910127","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3910508","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3910771","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3910916","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3911097","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3944959","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3945340","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3945590","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3945732","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3945912","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3947418","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3947787","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3948020","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3948158","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3948339","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3979587","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3979952","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3980182","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3980320","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3980498","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3984921","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.3985332","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.3985644","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.3985795","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.3985986","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4016971","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4017395","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4017717","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4017869","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4018059","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4020203","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4020604","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4020917","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4021065","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4021249","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4021805","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4023015","VirtualBox.exe","4132","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:50:40.4023570","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:40.4023741","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, FileAttributes: A, AllocationSize: 184, EndOfFile: 179, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:40.4030364","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4030772","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4031081","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4031235","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4031423","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4069382","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 0, Length: 16 384"
"9:50:40.4069520","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 179, Priority: Normal"
"9:50:40.4079313","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 179, Length: 16 384"
"9:50:40.4079441","VirtualBox.exe","4132","ReadFile","C:\Users\gutov\Documents\Ruby\test.rb","END OF FILE","Offset: 179, Length: 16 384, Priority: Normal"
"9:50:40.4143344","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4221061","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:40.4221459","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:40.4230019","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4230393","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4230656","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4230795","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4230979","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4234484","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4234849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4235079","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4235214","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4235392","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4244868","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4245236","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4245470","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4245608","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4245782","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4249547","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:40.4249909","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:40.4250136","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:40.4250271","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:40.4250445","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.6887416","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:41.6887663","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.6887745","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8152121","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8152562","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8169552","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8169976","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8170305","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8170453","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8170647","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8176579","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8176954","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8177191","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:30, ChangeTime: 17.01.2013 9:50:30, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8177329","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8177500","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8178147","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: OverwriteIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Overwritten"
"9:50:41.8179216","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:41.8179555","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:41.8179969","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8180147","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8181403","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8181797","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8182060","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8182199","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8182379","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8182948","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Write, Read Attributes, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8183208","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8183343","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8185921","VirtualBox.exe","4132","SetBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 01.01.1601 4:00:00, LastAccessTime: 01.01.1601 4:00:00, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 01.01.1601 4:00:00, FileAttributes: n/a"
"9:50:41.8186309","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8186450","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8189314","VirtualBox.exe","4132","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 0"
"9:50:41.8189581","VirtualBox.exe","4132","SetAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 0"
"9:50:41.8189824","VirtualBox.exe","4132","QueryInformationVolume","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","VolumeCreationTime: 09.01.2012 1:32:47, VolumeSerialNumber: DE12-C429, SupportsObjects: True, VolumeLabel: "
"9:50:41.8189959","VirtualBox.exe","4132","QueryAllInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A, AllocationSize: 0, EndOfFile: 0, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x1300000000b1c9, EaSize: 0, Access: Generic Write, Read Attributes, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
"9:50:41.8191350","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8191567","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8196437","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8196834","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8197117","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8197262","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8197439","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8203582","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 66, Priority: Normal"
"9:50:41.8205884","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED","Offset: 66, Length: 113"
"9:50:41.8206025","VirtualBox.exe","4132","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 66, Length: 113, Priority: Normal"
"9:50:41.8207363","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8207755","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8208028","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:40, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8208172","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8208455","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8210770","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8212144","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8221082","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8221460","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8231058","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\.#test.rb","FAST IO DISALLOWED",""
"9:50:41.8231427","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\.#test.rb","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
"9:50:41.8246220","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8247151","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8247430","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8247572","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8247759","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8252445","VirtualBox.exe","4132","QueryOpen","C:\Users\gutov\Documents\Ruby\test.rb","FAST IO DISALLOWED",""
"9:50:41.8252849","VirtualBox.exe","4132","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:50:41.8253145","VirtualBox.exe","4132","QueryNetworkOpenInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, AllocationSize: 01.01.1601 4:00:00, EndOfFile: 01.01.1601 4:00:00, FileAttributes: A"
"9:50:41.8253293","VirtualBox.exe","4132","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:41.8253481","VirtualBox.exe","4132","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:43.6880596","System","4","WriteFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Offset: 0, Length: 4 096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O, Priority: Normal"
"9:50:43.6880863","System","4","SetEndOfFileInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","EndOfFile: 179"
"9:50:43.6880988","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:50:43.6881076","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:50:43.6881155","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7433709","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Open Reparse Point, Open Requiring Oplock, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7435156","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:51:40.7435771","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_REQUEST_FILTER_OPLOCK"
"9:51:40.7435939","SearchProtocolHost.exe","4248","QueryStandardInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","AllocationSize: 184, EndOfFile: 179, NumberOfLinks: 1, DeletePending: False, Directory: False"
"9:51:40.7436073","SearchProtocolHost.exe","4248","QueryBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A"
"9:51:40.7436195","SearchProtocolHost.exe","4248","QueryFileInternalInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","IndexNumber: 0x1300000000b1c9"
"9:51:40.7436346","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","NOT REPARSE POINT","Control: FSCTL_GET_REPARSE_POINT"
"9:51:40.7436606","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","Information: Owner, Group, DACL"
"9:51:40.7436774","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Information: Owner, Group, DACL"
"9:51:40.7436991","SearchProtocolHost.exe","4248","QueryNameInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Name: \Users\gutov\Documents\Ruby\test.rb"
"9:51:40.7438701","SearchProtocolHost.exe","4248","QueryBasicInformationFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","CreationTime: 14.11.2012 17:22:46, LastAccessTime: 17.01.2013 7:28:04, LastWriteTime: 17.01.2013 9:50:41, ChangeTime: 17.01.2013 9:50:41, FileAttributes: A"
"9:51:40.7440023","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7441213","SearchProtocolHost.exe","4248","FileSystemControl","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Control: FSCTL_READ_FILE_USN_DATA"
"9:51:40.7494739","SearchProtocolHost.exe","4248","CreateFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Desired Access: Read Attributes, Read Control, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
"9:51:40.7495094","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","BUFFER OVERFLOW","Information: Owner"
"9:51:40.7495265","SearchProtocolHost.exe","4248","QuerySecurityFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","Information: Owner"
"9:51:40.7495419","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7495600","SearchProtocolHost.exe","4248","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502190","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502420","SearchProtocolHost.exe","4248","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:40.7502640","SearchProtocolHost.exe","4248","CloseFile","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:41.6880633","System","4","CreateFileMapping","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS","SyncType: SyncTypeOther"
"9:51:41.6880718","System","4","FASTIO_RELEASE_FOR_SECTION_SYNCHRONIZATION","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""
"9:51:41.6880784","System","4","IRP_MJ_CLOSE","C:\Users\gutov\Documents\Ruby\test.rb","SUCCESS",""