API tools faq
paste
unixfreaxjp

DFIR - DarkKomet? File I/O

unixfreaxjp
Feb 1st, 2013
286
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 347.12 KB | None | 0 0
raw download clone embed print report
  1. FileIO-001.txt(57): 23:14:26.5720987","Adobe-Flash_WIN.exe","3952","QueryNameInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Name: \Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe"
  2. FileIO-001.txt(58): 23:14:26.5726362","Adobe-Flash_WIN.exe","3952","QueryNameInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Name: \Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe"
  3. FileIO-001.txt(59): 23:14:26.5728270","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Prefetch\ADOBE-FLASH_WIN.EXE-28D518A3.pf","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: None, AllocationSize: n/a"
  4. FileIO-001.txt(60): 23:14:26.5733751","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  5. FileIO-001.txt(61): 23:14:26.5747376","Adobe-Flash_WIN.exe","3952","FileSystemControl","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Control: FSCTL_IS_VOLUME_MOUNTED"
  6. FileIO-001.txt(62): 23:14:26.5753709","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  7. FileIO-001.txt(63): 23:14:26.5756335","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  8. FileIO-001.txt(64): 23:14:26.5762227","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  9. FileIO-001.txt(65): 23:14:26.5765417","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  10. FileIO-001.txt(66): 23:14:26.5768015","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\mscoree.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  11. FileIO-001.txt(67): 23:14:26.5768149","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","AllocationSize: 294,912, EndOfFile: 282,112, NumberOfLinks: 1, DeletePending: False, Directory: False"
  12. FileIO-001.txt(68): 23:14:26.5768381","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\mscoree.dll","SUCCESS","SyncType: SyncTypeOther"
  13. FileIO-001.txt(69): 23:14:26.5777181","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  14. FileIO-001.txt(70): 23:14:26.5783685","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  15. FileIO-001.txt(71): 23:14:26.5789468","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  16. FileIO-001.txt(72): 23:14:26.5793753","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  17. FileIO-001.txt(73): 23:14:26.5800813","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  18. FileIO-001.txt(74): 23:14:26.5803430","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\mscoree.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  19. FileIO-001.txt(75): 23:14:26.5804039","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\MSCOREE.DLL","SUCCESS","SyncType: SyncTypeOther"
  20. FileIO-001.txt(76): 23:14:26.5807897","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  21. FileIO-001.txt(77): 23:14:26.5842723","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll.local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  22. FileIO-001.txt(78): 23:14:26.5896735","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  23. FileIO-001.txt(79): 23:14:26.5898406","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  24. FileIO-001.txt(80): 23:14:26.5899956","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  25. FileIO-001.txt(81): 23:14:26.5905292","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  26. FileIO-001.txt(82): 23:14:26.5906946","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  27. FileIO-001.txt(83): 23:14:26.5907083","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\IMM32.DLL","SUCCESS","AllocationSize: 114,688, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
  28. FileIO-001.txt(84): 23:14:26.5907323","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\IMM32.DLL","SUCCESS","SyncType: SyncTypeOther"
  29. FileIO-001.txt(85): 23:14:26.5909005","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  30. FileIO-001.txt(86): 23:14:26.5917042","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  31. FileIO-001.txt(87): 23:14:26.5918657","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  32. FileIO-001.txt(88): 23:14:26.5938109","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  33. FileIO-001.txt(89): 23:14:26.5940381","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  34. FileIO-001.txt(90): 23:14:26.5942054","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  35. FileIO-001.txt(91): 23:14:26.5942191","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\IMM32.DLL","SUCCESS","AllocationSize: 114,688, EndOfFile: 110,080, NumberOfLinks: 1, DeletePending: False, Directory: False"
  36. FileIO-001.txt(92): 23:14:26.5942434","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\IMM32.DLL","SUCCESS","SyncType: SyncTypeOther"
  37. FileIO-001.txt(93): 23:14:26.5965093","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  38. FileIO-001.txt(94): 23:14:26.5969555","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  39. FileIO-001.txt(95): 23:14:26.6380336","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  40. FileIO-001.txt(96): 23:14:26.6381875","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  41. FileIO-001.txt(97): 23:14:26.6384160","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  42. FileIO-001.txt(98): 23:14:26.6397576","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imm32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  43. FileIO-001.txt(99): 23:14:26.6398171","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\IMM32.DLL","SUCCESS","SyncType: SyncTypeOther"
  44. FileIO-001.txt(100): 23:14:26.6399866","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  45. FileIO-001.txt(101): 23:14:26.6425409","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  46. FileIO-001.txt(102): 23:14:26.6442240","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  47. FileIO-001.txt(103): 23:14:26.6443799","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  48. FileIO-001.txt(104): 23:14:26.6450384","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  49. FileIO-001.txt(105): 23:14:26.6516814","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  50. FileIO-001.txt(106): 23:14:26.6518356","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  51. FileIO-001.txt(107): 23:14:26.6549640","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・PK.DLL","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  52. FileIO-001.txt(108): 23:14:26.6570452","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\lpk.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  53. FileIO-001.txt(109): 23:14:26.6576436","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\lpk.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  54. FileIO-001.txt(110): 23:14:26.6583722","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\lpk.dll","SUCCESS",""
  55. FileIO-001.txt(111): 23:14:26.6586192","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\lpk.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  56. FileIO-001.txt(112): 23:14:26.6588077","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\lpk.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  57. FileIO-001.txt(113): 23:14:26.6588631","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\LPK.DLL","SUCCESS","SyncType: SyncTypeOther"
  58. FileIO-001.txt(114): 23:14:26.6597375","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\lpk.dll","SUCCESS",""
  59. FileIO-001.txt(115): 23:14:26.6624901","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・SP10.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  60. FileIO-001.txt(116): 23:14:26.6629775","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\usp10.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  61. FileIO-001.txt(117): 23:14:26.6631832","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\usp10.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  62. FileIO-001.txt(118): 23:14:26.6639327","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\usp10.dll","SUCCESS",""
  63. FileIO-001.txt(119): 23:14:26.6641984","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\usp10.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  64. FileIO-001.txt(120): 23:14:26.6644062","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\usp10.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  65. FileIO-001.txt(121): 23:14:26.6644710","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\USP10.DLL","SUCCESS","SyncType: SyncTypeOther"
  66. FileIO-001.txt(122): 23:14:26.6662713","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\usp10.dll","SUCCESS",""
  67. FileIO-001.txt(123): 23:14:26.6693446","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
  68. FileIO-001.txt(124): 23:14:26.6694876","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  69. FileIO-001.txt(125): 23:14:26.6695622","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  70. FileIO-001.txt(126): 23:14:26.6696242","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  71. FileIO-001.txt(127): 23:14:26.6696379","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  72. FileIO-001.txt(128): 23:14:26.6696625","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeOther"
  73. FileIO-001.txt(129): 23:14:26.6713468","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  74. FileIO-001.txt(130): 23:14:26.6714920","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  75. FileIO-001.txt(131): 23:14:26.6715647","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  76. FileIO-001.txt(132): 23:14:26.6722399","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  77. FileIO-001.txt(133): 23:14:26.6722536","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  78. FileIO-001.txt(134): 23:14:26.6722768","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeOther"
  79. FileIO-001.txt(135): 23:14:26.6723863","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  80. FileIO-001.txt(136): 23:14:26.6731436","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  81. FileIO-001.txt(137): 23:14:26.6732129","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Filter: mscorwks.dll, 1: mscorwks.dll"
  82. FileIO-001.txt(138): 23:14:26.6732978","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727","SUCCESS",""
  83. FileIO-001.txt(139): 23:14:26.6755934","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  84. FileIO-001.txt(140): 23:14:26.6756632","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Filter: mscorwks.dll, 1: mscorwks.dll"
  85. FileIO-001.txt(141): 23:14:26.6765726","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727","SUCCESS",""
  86. FileIO-001.txt(142): 23:14:26.6768991","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  87. FileIO-001.txt(143): 23:14:26.6776822","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","CreationTime: 2007/10/24 1:47:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:36, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  88. FileIO-001.txt(144): 23:14:26.6777750","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS",""
  89. FileIO-001.txt(145): 23:14:26.6779401","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  90. FileIO-001.txt(146): 23:14:26.6792249","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  91. FileIO-001.txt(147): 23:14:26.6792391","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","AllocationSize: 5,816,320, EndOfFile: 5,814,784, NumberOfLinks: 1, DeletePending: False, Directory: False"
  92. FileIO-001.txt(148): 23:14:26.6792631","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","SyncType: SyncTypeOther"
  93. FileIO-001.txt(149): 23:14:26.6793693","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS",""
  94. FileIO-001.txt(150): 23:14:26.6797207","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  95. FileIO-001.txt(151): 23:14:26.6813919","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","CreationTime: 2007/10/24 1:47:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:36, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  96. FileIO-001.txt(152): 23:14:26.6814858","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS",""
  97. FileIO-001.txt(153): 23:14:26.6826247","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  98. FileIO-001.txt(154): 23:14:26.6827270","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","CreationTime: 2007/10/24 1:47:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:36, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  99. FileIO-001.txt(155): 23:14:26.6828195","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS",""
  100. FileIO-001.txt(156): 23:14:26.6838573","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  101. FileIO-001.txt(157): 23:14:26.6839640","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  102. FileIO-001.txt(158): 23:14:26.6841749","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","SyncType: SyncTypeOther"
  103. FileIO-001.txt(159): 23:14:26.6842844","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS",""
  104. FileIO-001.txt(160): 23:14:26.6871717","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  105. FileIO-001.txt(161): 23:14:26.6907249","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  106. FileIO-001.txt(162): 23:14:26.7031106","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  107. FileIO-001.txt(163): 23:14:26.7034003","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  108. FileIO-001.txt(164): 23:14:26.7035031","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","CreationTime: 2012/10/07 20:25:28, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:25:30, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  109. FileIO-001.txt(165): 23:14:26.7048105","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  110. FileIO-001.txt(166): 23:14:26.7049689","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  111. FileIO-001.txt(167): 23:14:26.7051712","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  112. FileIO-001.txt(168): 23:14:26.7073988","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  113. FileIO-001.txt(169): 23:14:26.7074620","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","SyncType: SyncTypeOther"
  114. FileIO-001.txt(170): 23:14:26.7076058","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS",""
  115. FileIO-001.txt(171): 23:14:26.7093915","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  116. FileIO-001.txt(172): 23:14:26.7095312","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS","CreationTime: 2007/10/24 1:47:56, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:56, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  117. FileIO-001.txt(173): 23:14:26.7096592","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll","SUCCESS",""
  118. FileIO-001.txt(174): 23:14:26.7103576","Adobe-Flash_WIN.exe","3952","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  119. FileIO-001.txt(175): 23:14:26.7103850","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS","SUCCESS","Filter: WINDOWS, 1: WINDOWS"
  120. FileIO-001.txt(176): 23:14:26.7104241","Adobe-Flash_WIN.exe","3952","CloseFile","C:\","SUCCESS",""
  121. FileIO-001.txt(177): 23:14:26.7109722","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  122. FileIO-001.txt(178): 23:14:26.7110370","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\WinSxS","SUCCESS","Filter: WinSxS, 1: WinSxS"
  123. FileIO-001.txt(179): 23:14:26.7125836","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS","SUCCESS",""
  124. FileIO-001.txt(180): 23:14:26.7127498","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  125. FileIO-001.txt(181): 23:14:26.7128562","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll","SUCCESS","Filter: MSVCR80.dll, 1: msvcr80.dll"
  126. FileIO-001.txt(182): 23:14:26.7140433","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  127. FileIO-001.txt(185): 23:14:26.7232173","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  128. FileIO-001.txt(186): 23:14:26.7233852","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 0, Length: 4,095"
  129. FileIO-001.txt(187): 23:14:26.7238786","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 4,095, Length: 6,135"
  130. FileIO-001.txt(188): 23:14:26.7242191","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 10,230, Length: 8,178"
  131. FileIO-001.txt(189): 23:14:26.7255067","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS",""
  132. FileIO-001.txt(190): 23:14:26.7256411","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a"
  133. FileIO-001.txt(191): 23:14:26.7260009","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.localgac","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  134. FileIO-001.txt(192): 23:14:26.7311200","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  135. FileIO-001.txt(193): 23:14:26.7312938","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  136. FileIO-001.txt(194): 23:14:26.7314779","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  137. FileIO-001.txt(195): 23:14:26.7324777","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  138. FileIO-001.txt(196): 23:14:26.7341888","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  139. FileIO-001.txt(197): 23:14:26.7343559","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\shell32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  140. FileIO-001.txt(198): 23:14:26.7343696","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\shell32.dll","SUCCESS","AllocationSize: 8,372,224, EndOfFile: 8,367,104, NumberOfLinks: 1, DeletePending: False, Directory: False"
  141. FileIO-001.txt(199): 23:14:26.7343939","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\System32\shell32.dll","SUCCESS","SyncType: SyncTypeOther"
  142. FileIO-001.txt(200): 23:14:26.7345528","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\shell32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  143. FileIO-001.txt(201): 23:14:26.7355175","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\shell32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  144. FileIO-001.txt(202): 23:14:26.7565959","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\shell32.dll","SUCCESS",""
  145. FileIO-001.txt(203): 23:14:26.7573437","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  146. FileIO-001.txt(204): 23:14:26.7576337","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  147. FileIO-001.txt(205): 23:14:26.7584704","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","CreationTime: 2012/10/07 18:19:17, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 18:19:18, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  148. FileIO-001.txt(206): 23:14:26.7585640","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
  149. FileIO-001.txt(207): 23:14:26.7587235","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  150. FileIO-001.txt(208): 23:14:26.7626531","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  151. FileIO-001.txt(209): 23:14:26.7628048","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  152. FileIO-001.txt(210): 23:14:26.7628201","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","AllocationSize: 1,064,960, EndOfFile: 1,054,208, NumberOfLinks: 1, DeletePending: False, Directory: False"
  153. FileIO-001.txt(211): 23:14:26.7628472","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
  154. FileIO-001.txt(212): 23:14:26.7629939","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
  155. FileIO-001.txt(213): 23:14:26.7974044","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  156. FileIO-001.txt(214): 23:14:26.7975592","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  157. FileIO-001.txt(215): 23:14:26.7976525","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WINSXS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.5512_X-WW_35D4CE83\COMCTL32.DLL","SUCCESS","SyncType: SyncTypeOther"
  158. FileIO-001.txt(216): 23:14:26.8011688","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll","SUCCESS",""
  159. FileIO-001.txt(217): 23:14:26.8051347","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  160. FileIO-001.txt(218): 23:14:26.8051981","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 2012/10/07 18:40:07, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 18:40:08, ChangeTime: 1601/01/01 9:00:00, FileAttributes: RHA"
  161. FileIO-001.txt(219): 23:14:26.8052515","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  162. FileIO-001.txt(220): 23:14:26.8068157","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  163. FileIO-001.txt(221): 23:14:26.8068838","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  164. FileIO-001.txt(222): 23:14:26.8068986","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 16,384, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  165. FileIO-001.txt(223): 23:14:26.8069238","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  166. FileIO-001.txt(224): 23:14:26.8069914","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  167. FileIO-001.txt(225): 23:14:26.8079982","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  168. FileIO-001.txt(226): 23:14:26.8080594","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","CreationTime: 2012/10/07 18:40:07, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 18:40:08, ChangeTime: 1601/01/01 9:00:00, FileAttributes: RHA"
  169. FileIO-001.txt(227): 23:14:26.8089131","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  170. FileIO-001.txt(228): 23:14:26.8090388","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  171. FileIO-001.txt(229): 23:14:26.8091059","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  172. FileIO-001.txt(230): 23:14:26.8091199","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 16,384, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  173. FileIO-001.txt(231): 23:14:26.8091439","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  174. FileIO-001.txt(232): 23:14:26.8109799","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  175. FileIO-001.txt(233): 23:14:26.8111243","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  176. FileIO-001.txt(234): 23:14:26.8111900","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  177. FileIO-001.txt(235): 23:14:26.8112039","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 16,384, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  178. FileIO-001.txt(236): 23:14:26.8112282","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","SyncType: SyncTypeOther"
  179. FileIO-001.txt(237): 23:14:26.8125234","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS","AllocationSize: 16,384, EndOfFile: 749, NumberOfLinks: 1, DeletePending: False, Directory: False"
  180. FileIO-001.txt(238): 23:14:26.8126181","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WindowsShell.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  181. FileIO-001.txt(239): 23:14:26.8266478","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WindowsShell.Manifest","SUCCESS",""
  182. FileIO-001.txt(240): 23:14:26.8326203","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  183. FileIO-001.txt(241): 23:14:26.8327983","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  184. FileIO-001.txt(242): 23:14:26.8328142","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS","AllocationSize: 622,592, EndOfFile: 617,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
  185. FileIO-001.txt(243): 23:14:26.8328405","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\comctl32.dll","SUCCESS","SyncType: SyncTypeOther"
  186. FileIO-001.txt(244): 23:14:26.8339923","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\comctl32.dll.124.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  187. FileIO-001.txt(245): 23:14:26.8342831","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\comctl32.dll.124.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  188. FileIO-001.txt(246): 23:14:26.8361803","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\comctl32.dll","SUCCESS",""
  189. FileIO-001.txt(247): 23:14:26.8387569","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Application Data","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  190. FileIO-001.txt(248): 23:14:26.8388222","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\Documents and Settings\%USER%\Application Data","SUCCESS","CreationTime: 2012/10/07 18:49:52, LastAccessTime: 2012/10/07 0:00:00, LastWriteTime: 2012/10/07 18:19:58, ChangeTime: 1601/01/01 9:00:00, FileAttributes: RHD"
  191. FileIO-001.txt(249): 23:14:26.8388787","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\Application Data","SUCCESS",""
  192. FileIO-001.txt(250): 23:14:26.8400632","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Application Data\Microsoft\CLR Security Config\v2.0.50727.42\security.config","PATH NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  193. FileIO-001.txt(251): 23:14:26.8401408","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Application Data\Microsoft\CLR Security Config\v2.0.50727.42\security.config.cch","PATH NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a"
  194. FileIO-001.txt(252): 23:14:26.8408893","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index1d.dat","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  195. FileIO-001.txt(253): 23:14:26.8465620","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  196. FileIO-001.txt(254): 23:14:26.8467218","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:28:32, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:28:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  197. FileIO-001.txt(255): 23:14:26.8468691","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS",""
  198. FileIO-001.txt(256): 23:14:26.8478438","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  199. FileIO-001.txt(257): 23:14:26.8480083","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  200. FileIO-001.txt(258): 23:14:26.8480237","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","AllocationSize: 11,730,944, EndOfFile: 11,722,752, NumberOfLinks: 1, DeletePending: False, Directory: False"
  201. FileIO-001.txt(259): 23:14:26.8480508","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  202. FileIO-001.txt(260): 23:14:26.8482137","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS",""
  203. FileIO-001.txt(261): 23:14:26.8497611","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  204. FileIO-001.txt(262): 23:14:26.8499206","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:28:32, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:28:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  205. FileIO-001.txt(263): 23:14:26.8508277","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS",""
  206. FileIO-001.txt(264): 23:14:26.8512369","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  207. FileIO-001.txt(265): 23:14:26.8522069","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:28:32, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:28:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  208. FileIO-001.txt(266): 23:14:26.8523558","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS",""
  209. FileIO-001.txt(267): 23:14:26.8525843","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  210. FileIO-001.txt(268): 23:14:26.8534755","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  211. FileIO-001.txt(269): 23:14:26.8536800","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  212. FileIO-001.txt(270): 23:14:26.8538465","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS",""
  213. FileIO-001.txt(271): 23:14:26.8574288","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  214. FileIO-001.txt(272): 23:14:26.8576897","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  215. FileIO-001.txt(273): 23:14:26.8579384","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  216. FileIO-001.txt(274): 23:14:26.8619397","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  217. FileIO-001.txt(275): 23:14:26.8621364","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI","NO SUCH FILE","Filter: mscorlib.INI"
  218. FileIO-001.txt(276): 23:14:26.8623305","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089","SUCCESS",""
  219. FileIO-001.txt(277): 23:14:26.8643249","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  220. FileIO-001.txt(278): 23:14:26.8669666","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","CreationTime: 2013/01/30 22:54:45, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/30 15:49:08, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  221. FileIO-001.txt(279): 23:14:26.8670250","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  222. FileIO-001.txt(280): 23:14:26.8671155","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  223. FileIO-001.txt(281): 23:14:26.8688149","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings\%USER%","SUCCESS","Filter: %USER%, 1: %USER%"
  224. FileIO-001.txt(282): 23:14:26.8688601","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings","SUCCESS",""
  225. FileIO-001.txt(283): 23:14:26.8689917","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  226. FileIO-001.txt(284): 23:14:26.8737487","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Filter: 郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・ 1: 郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・
  227. FileIO-001.txt(285): 23:14:26.8738351","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%","SUCCESS",""
  228. FileIO-001.txt(286): 23:14:26.8755490","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  229. FileIO-001.txt(287): 23:14:26.8756180","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","CreationTime: 2013/01/30 22:54:45, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/30 15:49:08, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  230. FileIO-001.txt(288): 23:14:26.8756758","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  231. FileIO-001.txt(289): 23:14:26.8773537","Adobe-Flash_WIN.exe","3952","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  232. FileIO-001.txt(290): 23:14:26.8773813","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings","SUCCESS","Filter: Documents and Settings, 1: Documents and Settings"
  233. FileIO-001.txt(291): 23:14:26.8774207","Adobe-Flash_WIN.exe","3952","CloseFile","C:\","SUCCESS",""
  234. FileIO-001.txt(292): 23:14:26.8787293","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  235. FileIO-001.txt(293): 23:14:26.8787966","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Filter: 郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・ 1: 郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・
  236. FileIO-001.txt(294): 23:14:26.8788804","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%","SUCCESS",""
  237. FileIO-001.txt(295): 23:14:26.8801549","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  238. FileIO-001.txt(296): 23:14:26.8802278","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Filter: Adobe-Flash_WIN.exe, 1: Adobe-Flash_WIN.exe"
  239. FileIO-001.txt(297): 23:14:26.8832620","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS",""
  240. FileIO-001.txt(298): 23:14:26.8838484","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ole32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  241. FileIO-001.txt(299): 23:14:26.8883500","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ole32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  242. FileIO-001.txt(300): 23:14:26.8909141","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  243. FileIO-001.txt(301): 23:14:26.8924011","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  244. FileIO-001.txt(302): 23:14:26.8925542","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS",""
  245. FileIO-001.txt(303): 23:14:26.8927805","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  246. FileIO-001.txt(304): 23:14:26.8942075","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\rpcss.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  247. FileIO-001.txt(305): 23:14:26.8942229","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS","AllocationSize: 409,600, EndOfFile: 399,360, NumberOfLinks: 1, DeletePending: False, Directory: False"
  248. FileIO-001.txt(306): 23:14:26.8942477","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\rpcss.dll","SUCCESS","SyncType: SyncTypeOther"
  249. FileIO-001.txt(307): 23:14:26.8944162","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\rpcss.dll","SUCCESS",""
  250. FileIO-001.txt(308): 23:14:26.8962564","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  251. FileIO-001.txt(309): 23:14:26.8974462","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  252. FileIO-001.txt(310): 23:14:26.8976012","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  253. FileIO-001.txt(311): 23:14:26.8978272","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  254. FileIO-001.txt(312): 23:14:26.8989078","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  255. FileIO-001.txt(313): 23:14:26.8989221","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","AllocationSize: 229,376, EndOfFile: 217,600, NumberOfLinks: 1, DeletePending: False, Directory: False"
  256. FileIO-001.txt(314): 23:14:26.8989466","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","SyncType: SyncTypeOther"
  257. FileIO-001.txt(315): 23:14:26.8991162","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  258. FileIO-001.txt(316): 23:14:26.9011383","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  259. FileIO-001.txt(317): 23:14:26.9013011","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  260. FileIO-001.txt(318): 23:14:26.9014559","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  261. FileIO-001.txt(319): 23:14:26.9028776","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  262. FileIO-001.txt(320): 23:14:26.9030460","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  263. FileIO-001.txt(321): 23:14:26.9031078","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\UXTHEME.DLL","SUCCESS","SyncType: SyncTypeOther"
  264. FileIO-001.txt(322): 23:14:26.9032796","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  265. FileIO-001.txt(323): 23:14:26.9143086","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  266. FileIO-001.txt(324): 23:14:26.9144712","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  267. FileIO-001.txt(325): 23:14:26.9146260","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  268. FileIO-001.txt(326): 23:14:26.9202354","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  269. FileIO-001.txt(327): 23:14:26.9203999","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  270. FileIO-001.txt(328): 23:14:26.9222764","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  271. FileIO-001.txt(329): 23:14:26.9260043","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  272. FileIO-001.txt(330): 23:14:26.9261727","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  273. FileIO-001.txt(331): 23:14:26.9263289","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\uxtheme.dll","SUCCESS",""
  274. FileIO-001.txt(332): 23:14:26.9275170","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  275. FileIO-001.txt(333): 23:14:26.9277266","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  276. FileIO-001.txt(334): 23:14:26.9279260","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  277. FileIO-001.txt(335): 23:14:26.9287982","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  278. FileIO-001.txt(336): 23:14:26.9290128","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  279. FileIO-001.txt(337): 23:14:26.9290270","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","AllocationSize: 311,296, EndOfFile: 297,472, NumberOfLinks: 1, DeletePending: False, Directory: False"
  280. FileIO-001.txt(338): 23:14:26.9290519","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","SyncType: SyncTypeOther"
  281. FileIO-001.txt(339): 23:14:26.9292650","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  282. FileIO-001.txt(340): 23:14:26.9304696","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  283. FileIO-001.txt(341): 23:14:26.9306764","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  284. FileIO-001.txt(342): 23:14:26.9308756","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  285. FileIO-001.txt(343): 23:14:26.9319285","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  286. FileIO-001.txt(344): 23:14:26.9321402","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  287. FileIO-001.txt(345): 23:14:26.9322014","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\MSCTF.DLL","SUCCESS","SyncType: SyncTypeOther"
  288. FileIO-001.txt(346): 23:14:26.9324165","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  289. FileIO-001.txt(347): 23:14:26.9337832","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  290. FileIO-001.txt(348): 23:14:26.9346056","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  291. FileIO-001.txt(349): 23:14:26.9347562","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS",""
  292. FileIO-001.txt(350): 23:14:26.9390895","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  293. FileIO-001.txt(351): 23:14:26.9392512","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imm32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  294. FileIO-001.txt(352): 23:14:26.9394049","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imm32.dll","SUCCESS",""
  295. FileIO-001.txt(353): 23:14:26.9418965","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  296. FileIO-001.txt(354): 23:14:26.9431288","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  297. FileIO-001.txt(355): 23:14:26.9432822","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\kernel32.dll","SUCCESS",""
  298. FileIO-001.txt(356): 23:14:26.9470636","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Local Settings\Temporary Internet Files","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  299. FileIO-001.txt(357): 23:14:26.9471313","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\Documents and Settings\%USER%\Local Settings\Temporary Internet Files","SUCCESS","CreationTime: 2012/10/07 18:49:52, LastAccessTime: 2012/10/07 0:00:00, LastWriteTime: 2012/10/07 18:19:58, ChangeTime: 1601/01/01 9:00:00, FileAttributes: SD"
  300. FileIO-001.txt(358): 23:14:26.9471891","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\Local Settings\Temporary Internet Files","SUCCESS",""
  301. FileIO-001.txt(359): 23:14:26.9482744","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.config","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  302. FileIO-001.txt(360): 23:14:26.9492729","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  303. FileIO-001.txt(361): 23:14:26.9493447","Adobe-Flash_WIN.exe","3952","QueryNetworkOpenInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","CreationTime: 2013/01/30 22:54:45, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/30 15:49:08, ChangeTime: 1980/01/01 0:00:00, AllocationSize: 1601/01/01 9:00:00, EndOfFile: 1601/01/01 9:00:00, FileAttributes: A"
  304. FileIO-001.txt(362): 23:14:26.9494042","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  305. FileIO-001.txt(363): 23:14:26.9505702","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  306. FileIO-001.txt(364): 23:14:26.9506446","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  307. FileIO-001.txt(365): 23:14:26.9507049","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  308. FileIO-001.txt(366): 23:14:26.9507189","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  309. FileIO-001.txt(367): 23:14:26.9507429","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeOther"
  310. FileIO-001.txt(368): 23:14:26.9509890","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  311. FileIO-001.txt(369): 23:14:26.9517198","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  312. FileIO-001.txt(370): 23:14:26.9517930","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.INI","NO SUCH FILE","Filter: Adobe-Flash_WIN.INI"
  313. FileIO-001.txt(371): 23:14:26.9522897","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS",""
  314. FileIO-001.txt(372): 23:14:26.9529390","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\pubpol1.dat","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  315. FileIO-001.txt(373): 23:14:26.9531102","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC\PublisherPolicy.tme","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  316. FileIO-001.txt(374): 23:14:26.9534117","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  317. FileIO-001.txt(375): 23:14:26.9535159","Adobe-Flash_WIN.exe","3952","QueryNetworkOpenInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","CreationTime: 2007/10/24 1:47:34, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:34, ChangeTime: 1980/01/01 0:00:00, AllocationSize: 1601/01/01 9:00:00, EndOfFile: 1601/01/01 9:00:00, FileAttributes: A"
  318. FileIO-001.txt(376): 23:14:26.9536092","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS",""
  319. FileIO-001.txt(377): 23:14:26.9537924","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  320. FileIO-001.txt(378): 23:14:26.9539349","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 0, Length: 4,095"
  321. FileIO-001.txt(379): 23:14:26.9550060","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 4,095, Length: 6,135"
  322. FileIO-001.txt(380): 23:14:26.9553681","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 10,230, Length: 8,178"
  323. FileIO-001.txt(381): 23:14:26.9557919","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS",""
  324. FileIO-001.txt(382): 23:14:26.9629637","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  325. FileIO-001.txt(383): 23:14:26.9631266","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:30:15, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:30:18, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  326. FileIO-001.txt(384): 23:14:26.9639652","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS",""
  327. FileIO-001.txt(385): 23:14:26.9642019","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  328. FileIO-001.txt(386): 23:14:26.9643686","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  329. FileIO-001.txt(387): 23:14:26.9643848","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,265,728, NumberOfLinks: 1, DeletePending: False, Directory: False"
  330. FileIO-001.txt(388): 23:14:26.9644131","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  331. FileIO-001.txt(389): 23:14:26.9652428","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS",""
  332. FileIO-001.txt(390): 23:14:26.9657333","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  333. FileIO-001.txt(391): 23:14:26.9664267","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:30:15, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:30:18, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  334. FileIO-001.txt(392): 23:14:26.9665784","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS",""
  335. FileIO-001.txt(393): 23:14:26.9669910","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  336. FileIO-001.txt(394): 23:14:26.9694796","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:30:15, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:30:18, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  337. FileIO-001.txt(395): 23:14:26.9696302","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS",""
  338. FileIO-001.txt(396): 23:14:26.9708390","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  339. FileIO-001.txt(397): 23:14:26.9710061","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  340. FileIO-001.txt(398): 23:14:26.9711662","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  341. FileIO-001.txt(399): 23:14:26.9713315","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS",""
  342. FileIO-001.txt(400): 23:14:26.9730672","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  343. FileIO-001.txt(401): 23:14:26.9738950","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  344. FileIO-001.txt(402): 23:14:26.9741478","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  345. FileIO-001.txt(403): 23:14:26.9758106","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  346. FileIO-001.txt(404): 23:14:26.9759472","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","CreationTime: 2013/01/21 18:51:12, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/21 18:51:14, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  347. FileIO-001.txt(405): 23:14:26.9760659","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS",""
  348. FileIO-001.txt(406): 23:14:26.9767889","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  349. FileIO-001.txt(407): 23:14:26.9769283","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  350. FileIO-001.txt(408): 23:14:26.9769445","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","AllocationSize: 1,753,088, EndOfFile: 1,740,800, NumberOfLinks: 1, DeletePending: False, Directory: False"
  351. FileIO-001.txt(409): 23:14:26.9769733","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  352. FileIO-001.txt(410): 23:14:26.9772460","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS",""
  353. FileIO-001.txt(411): 23:14:26.9776625","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  354. FileIO-001.txt(412): 23:14:26.9777938","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","CreationTime: 2013/01/21 18:51:12, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/21 18:51:14, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  355. FileIO-001.txt(413): 23:14:26.9779117","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS",""
  356. FileIO-001.txt(414): 23:14:26.9782690","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  357. FileIO-001.txt(415): 23:14:26.9783995","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","CreationTime: 2013/01/21 18:51:12, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/21 18:51:14, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  358. FileIO-001.txt(416): 23:14:26.9785168","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS",""
  359. FileIO-001.txt(417): 23:14:26.9787180","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  360. FileIO-001.txt(418): 23:14:26.9788585","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  361. FileIO-001.txt(419): 23:14:26.9789440","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  362. FileIO-001.txt(420): 23:14:26.9790781","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS",""
  363. FileIO-001.txt(421): 23:14:26.9800494","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  364. FileIO-001.txt(422): 23:14:26.9803123","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  365. FileIO-001.txt(423): 23:14:26.9809473","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  366. FileIO-001.txt(424): 23:14:26.9815895","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  367. FileIO-001.txt(425): 23:14:26.9817552","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI","NO SUCH FILE","Filter: Microsoft.VisualBasic.INI"
  368. FileIO-001.txt(426): 23:14:26.9821072","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a","SUCCESS",""
  369. FileIO-001.txt(427): 23:14:26.9828956","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  370. FileIO-001.txt(428): 23:14:26.9830945","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI","NO SUCH FILE","Filter: System.INI"
  371. FileIO-001.txt(429): 23:14:26.9837680","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089","SUCCESS",""
  372. FileIO-001.txt(430): 23:14:26.9849056","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  373. FileIO-001.txt(431): 23:14:26.9850146","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","CreationTime: 2007/10/24 1:47:40, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  374. FileIO-001.txt(432): 23:14:26.9851087","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS",""
  375. FileIO-001.txt(433): 23:14:26.9852911","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  376. FileIO-001.txt(434): 23:14:26.9854012","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  377. FileIO-001.txt(435): 23:14:26.9854160","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","AllocationSize: 360,448, EndOfFile: 348,672, NumberOfLinks: 1, DeletePending: False, Directory: False"
  378. FileIO-001.txt(436): 23:14:26.9854409","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","SyncType: SyncTypeOther"
  379. FileIO-001.txt(437): 23:14:26.9855481","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS",""
  380. FileIO-001.txt(438): 23:14:26.9859029","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  381. FileIO-001.txt(439): 23:14:26.9860060","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","CreationTime: 2007/10/24 1:47:40, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  382. FileIO-001.txt(440): 23:14:26.9860996","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS",""
  383. FileIO-001.txt(441): 23:14:26.9863918","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  384. FileIO-001.txt(442): 23:14:26.9864944","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","CreationTime: 2007/10/24 1:47:40, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  385. FileIO-001.txt(443): 23:14:26.9865877","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS",""
  386. FileIO-001.txt(444): 23:14:26.9867536","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  387. FileIO-001.txt(445): 23:14:26.9868600","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  388. FileIO-001.txt(446): 23:14:26.9869215","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS","SyncType: SyncTypeOther"
  389. FileIO-001.txt(447): 23:14:26.9870313","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll","SUCCESS",""
  390. FileIO-001.txt(448): 23:14:26.9875456","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  391. FileIO-001.txt(449): 23:14:26.9877596","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  392. FileIO-001.txt(450): 23:14:26.9995675","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  393. FileIO-001.txt(451): 23:14:26.9998595","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  394. FileIO-001.txt(452): 23:14:26.9999639","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","CreationTime: 2012/10/07 20:25:28, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:25:30, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  395. FileIO-001.txt(453): 23:14:27.0000573","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  396. FileIO-001.txt(454): 23:14:27.0002157","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  397. FileIO-001.txt(455): 23:14:27.0028710","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  398. FileIO-001.txt(456): 23:14:27.0030087","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:02, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  399. FileIO-001.txt(457): 23:14:27.0031250","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS",""
  400. FileIO-001.txt(458): 23:14:27.0034988","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  401. FileIO-001.txt(459): 23:14:27.0036359","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  402. FileIO-001.txt(460): 23:14:27.0036532","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","AllocationSize: 1,671,168, EndOfFile: 1,667,072, NumberOfLinks: 1, DeletePending: False, Directory: False"
  403. FileIO-001.txt(461): 23:14:27.0036826","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  404. FileIO-001.txt(462): 23:14:27.0038144","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS",""
  405. FileIO-001.txt(463): 23:14:27.0042273","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  406. FileIO-001.txt(464): 23:14:27.0043553","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:02, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  407. FileIO-001.txt(465): 23:14:27.0044704","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS",""
  408. FileIO-001.txt(466): 23:14:27.0048235","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  409. FileIO-001.txt(467): 23:14:27.0049512","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:02, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  410. FileIO-001.txt(468): 23:14:27.0050666","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS",""
  411. FileIO-001.txt(469): 23:14:27.0052629","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  412. FileIO-001.txt(470): 23:14:27.0053951","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  413. FileIO-001.txt(471): 23:14:27.0054781","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  414. FileIO-001.txt(472): 23:14:27.0056105","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS",""
  415. FileIO-001.txt(473): 23:14:27.0067528","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  416. FileIO-001.txt(474): 23:14:27.0070171","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  417. FileIO-001.txt(475): 23:14:27.0072685","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  418. FileIO-001.txt(476): 23:14:27.0082097","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  419. FileIO-001.txt(477): 23:14:27.0083432","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:23, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:26, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  420. FileIO-001.txt(478): 23:14:27.0084617","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS",""
  421. FileIO-001.txt(479): 23:14:27.0086625","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  422. FileIO-001.txt(480): 23:14:27.0088050","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  423. FileIO-001.txt(481): 23:14:27.0088218","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","AllocationSize: 13,205,504, EndOfFile: 13,193,216, NumberOfLinks: 1, DeletePending: False, Directory: False"
  424. FileIO-001.txt(482): 23:14:27.0088497","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  425. FileIO-001.txt(483): 23:14:27.0089830","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS",""
  426. FileIO-001.txt(484): 23:14:27.0096426","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  427. FileIO-001.txt(485): 23:14:27.0097750","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:23, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:26, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  428. FileIO-001.txt(486): 23:14:27.0098937","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS",""
  429. FileIO-001.txt(487): 23:14:27.0102454","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  430. FileIO-001.txt(488): 23:14:27.0103770","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:23, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:26, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  431. FileIO-001.txt(489): 23:14:27.0104949","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS",""
  432. FileIO-001.txt(490): 23:14:27.0106941","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  433. FileIO-001.txt(491): 23:14:27.0108301","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  434. FileIO-001.txt(492): 23:14:27.0110595","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  435. FileIO-001.txt(493): 23:14:27.0111967","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS",""
  436. FileIO-001.txt(494): 23:14:27.0120498","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  437. FileIO-001.txt(495): 23:14:27.0123071","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  438. FileIO-001.txt(496): 23:14:27.0125569","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  439. FileIO-001.txt(497): 23:14:27.0131891","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  440. FileIO-001.txt(498): 23:14:27.0133548","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI","NO SUCH FILE","Filter: System.Windows.Forms.INI"
  441. FileIO-001.txt(499): 23:14:27.0135168","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089","SUCCESS",""
  442. FileIO-001.txt(500): 23:14:27.0142060","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  443. FileIO-001.txt(501): 23:14:27.0143700","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI","NO SUCH FILE","Filter: System.Drawing.INI"
  444. FileIO-001.txt(502): 23:14:27.0147169","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a","SUCCESS",""
  445. FileIO-001.txt(503): 23:14:27.0224380","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Globalization\ja-jp.nlp","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  446. FileIO-001.txt(504): 23:14:27.0233708","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\l_intl.nls","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  447. FileIO-001.txt(505): 23:14:27.0237575","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\l_intl.nls","SUCCESS","AllocationSize: 16,384, EndOfFile: 7,046, NumberOfLinks: 1, DeletePending: False, Directory: False"
  448. FileIO-001.txt(506): 23:14:27.0238860","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\l_intl.nls","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  449. FileIO-001.txt(507): 23:14:27.0239008","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\l_intl.nls","SUCCESS","AllocationSize: 16,384, EndOfFile: 7,046, NumberOfLinks: 1, DeletePending: False, Directory: False"
  450. FileIO-001.txt(508): 23:14:27.0239265","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\l_intl.nls","SUCCESS","SyncType: SyncTypeOther"
  451. FileIO-001.txt(509): 23:14:27.0240701","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\l_intl.nls","SUCCESS",""
  452. FileIO-001.txt(510): 23:14:27.0252132","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  453. FileIO-001.txt(511): 23:14:27.0253906","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  454. FileIO-001.txt(512): 23:14:27.0254613","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeOther"
  455. FileIO-001.txt(513): 23:14:27.0262394","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  456. FileIO-001.txt(514): 23:14:27.0264117","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.INI","NO SUCH FILE","Filter: System.Runtime.Remoting.INI"
  457. FileIO-001.txt(515): 23:14:27.0265740","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089","SUCCESS",""
  458. FileIO-001.txt(516): 23:14:27.0279376","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  459. FileIO-001.txt(517): 23:14:27.0281086","Adobe-Flash_WIN.exe","3952","QueryInformationVolume","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","VolumeCreationTime: 1601/01/01 9:00:00, VolumeSerialNumber: 9455-E50D, SupportsObjects: False, VolumeLabel: "
  460. FileIO-001.txt(518): 23:14:27.0282678","Adobe-Flash_WIN.exe","3952","QueryAllInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","BUFFER OVERFLOW","CreationTime: 2012/10/07 20:26:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:26:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A, AllocationSize: 311,296, EndOfFile: 299,008, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xcess: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
  461. FileIO-001.txt(519): 23:14:27.0284259","Adobe-Flash_WIN.exe","3952","QueryInformationVolume","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","VolumeCreationTime: 1601/01/01 9:00:00, VolumeSerialNumber: 9455-E50D, SupportsObjects: False, VolumeLabel: "
  462. FileIO-001.txt(520): 23:14:27.0285818","Adobe-Flash_WIN.exe","3952","QueryAllInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","BUFFER OVERFLOW","CreationTime: 2012/10/07 20:26:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:26:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A, AllocationSize: 311,296, EndOfFile: 299,008, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xcess: Generic Read, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Word"
  463. FileIO-001.txt(521): 23:14:27.0289992","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  464. FileIO-001.txt(522): 23:14:27.0291598","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","CreationTime: 2012/10/07 20:26:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:26:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  465. FileIO-001.txt(523): 23:14:27.0296395","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  466. FileIO-001.txt(524): 23:14:27.0298772","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  467. FileIO-001.txt(525): 23:14:27.0300435","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  468. FileIO-001.txt(526): 23:14:27.0300591","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","AllocationSize: 311,296, EndOfFile: 299,008, NumberOfLinks: 1, DeletePending: False, Directory: False"
  469. FileIO-001.txt(527): 23:14:27.0300865","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeOther"
  470. FileIO-001.txt(528): 23:14:27.0302496","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  471. FileIO-001.txt(529): 23:14:27.0306796","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  472. FileIO-001.txt(530): 23:14:27.0308402","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","CreationTime: 2012/10/07 20:26:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:26:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  473. FileIO-001.txt(531): 23:14:27.0309883","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  474. FileIO-001.txt(532): 23:14:27.0313981","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  475. FileIO-001.txt(533): 23:14:27.0315582","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","CreationTime: 2012/10/07 20:26:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:26:40, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  476. FileIO-001.txt(534): 23:14:27.0317068","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  477. FileIO-001.txt(535): 23:14:27.0319342","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  478. FileIO-001.txt(536): 23:14:27.0320985","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  479. FileIO-001.txt(537): 23:14:27.0325455","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS","SyncType: SyncTypeOther"
  480. FileIO-001.txt(538): 23:14:27.0327136","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  481. FileIO-001.txt(539): 23:14:27.0335685","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  482. FileIO-001.txt(540): 23:14:27.0338266","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  483. FileIO-001.txt(541): 23:14:27.0340758","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  484. FileIO-001.txt(542): 23:14:27.0343161","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  485. FileIO-001.txt(543): 23:14:27.0357146","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  486. FileIO-001.txt(544): 23:14:27.0361780","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  487. FileIO-001.txt(545): 23:14:27.0367678","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll","SUCCESS","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  488. FileIO-001.txt(546): 23:14:27.0369337","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  489. FileIO-001.txt(547): 23:14:27.0369491","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll","SUCCESS","AllocationSize: 5,013,504, EndOfFile: 5,013,504, NumberOfLinks: 1, DeletePending: False, Directory: False"
  490. FileIO-001.txt(548): 23:14:27.0369773","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll","SUCCESS","SyncType: SyncTypeOther"
  491. FileIO-001.txt(549): 23:14:27.0372494","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll.101.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  492. FileIO-001.txt(550): 23:14:27.0374849","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll.101.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  493. FileIO-001.txt(551): 23:14:27.0527637","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll","SUCCESS",""
  494. FileIO-001.txt(552): 23:14:27.0730551","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  495. FileIO-001.txt(553): 23:14:27.0732414","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  496. FileIO-001.txt(554): 23:14:27.0733959","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS",""
  497. FileIO-001.txt(555): 23:14:27.0736392","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  498. FileIO-001.txt(556): 23:14:27.0748612","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  499. FileIO-001.txt(557): 23:14:27.0748810","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","AllocationSize: 5,783,552, EndOfFile: 5,771,264, NumberOfLinks: 1, DeletePending: False, Directory: False"
  500. FileIO-001.txt(558): 23:14:27.0749112","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  501. FileIO-001.txt(559): 23:14:27.0750849","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS",""
  502. FileIO-001.txt(560): 23:14:27.0755990","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  503. FileIO-001.txt(561): 23:14:27.0762703","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  504. FileIO-001.txt(562): 23:14:27.0764253","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS",""
  505. FileIO-001.txt(563): 23:14:27.0769089","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  506. FileIO-001.txt(564): 23:14:27.0770746","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","CreationTime: 2012/10/07 20:31:36, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:31:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  507. FileIO-001.txt(565): 23:14:27.0772271","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS",""
  508. FileIO-001.txt(566): 23:14:27.0776858","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  509. FileIO-001.txt(567): 23:14:27.0778585","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  510. FileIO-001.txt(568): 23:14:27.0780026","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","SyncType: SyncTypeOther"
  511. FileIO-001.txt(569): 23:14:27.0781733","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS",""
  512. FileIO-001.txt(570): 23:14:27.0791913","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  513. FileIO-001.txt(571): 23:14:27.0794520","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS","CreationTime: 2007/10/24 1:47:38, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:38, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  514. FileIO-001.txt(572): 23:14:27.0797023","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\mscoree.dll","SUCCESS",""
  515. FileIO-001.txt(573): 23:14:27.0806046","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  516. FileIO-001.txt(574): 23:14:27.0808036","Adobe-Flash_WIN.exe","3952","QueryDirectory","C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI","NO SUCH FILE","Filter: System.Xml.INI"
  517. FileIO-001.txt(575): 23:14:27.0812153","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089","SUCCESS",""
  518. FileIO-001.txt(576): 23:14:27.0820372","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Open No Recall, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  519. FileIO-001.txt(577): 23:14:27.0824823","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","AllocationSize: 32,768, EndOfFile: 20,057, NumberOfLinks: 1, DeletePending: False, Directory: False"
  520. FileIO-001.txt(578): 23:14:27.0826454","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 0, Length: 4,096"
  521. FileIO-001.txt(579): 23:14:27.0831212","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 4,096, Length: 4,096"
  522. FileIO-001.txt(580): 23:14:27.0833039","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 8,192, Length: 4,096"
  523. FileIO-001.txt(581): 23:14:27.0834760","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 12,288, Length: 4,096"
  524. FileIO-001.txt(582): 23:14:27.0836528","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS","Offset: 16,384, Length: 3,673"
  525. FileIO-001.txt(583): 23:14:27.0838377","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","END OF FILE","Offset: 20,057, Length: 4,096"
  526. FileIO-001.txt(584): 23:14:27.0840031","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config","SUCCESS",""
  527. FileIO-001.txt(585): 23:14:27.0845040","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.config","NAME NOT FOUND","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Open No Recall, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  528. FileIO-001.txt(586): 23:14:27.0852636","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  529. FileIO-001.txt(587): 23:14:27.0870057","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS","AllocationSize: 32,768, EndOfFile: 20,320, NumberOfLinks: 1, DeletePending: False, Directory: False"
  530. FileIO-001.txt(588): 23:14:27.0872200","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  531. FileIO-001.txt(589): 23:14:27.0872337","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS","AllocationSize: 32,768, EndOfFile: 20,320, NumberOfLinks: 1, DeletePending: False, Directory: False"
  532. FileIO-001.txt(590): 23:14:27.0872580","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS","SyncType: SyncTypeOther"
  533. FileIO-001.txt(591): 23:14:27.0880128","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  534. FileIO-001.txt(592): 23:14:27.0882489","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS","AllocationSize: 32,768, EndOfFile: 28,288, NumberOfLinks: 1, DeletePending: False, Directory: False"
  535. FileIO-001.txt(593): 23:14:27.0884640","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  536. FileIO-001.txt(594): 23:14:27.0884783","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS","AllocationSize: 32,768, EndOfFile: 28,288, NumberOfLinks: 1, DeletePending: False, Directory: False"
  537. FileIO-001.txt(595): 23:14:27.0885026","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS","SyncType: SyncTypeOther"
  538. FileIO-001.txt(596): 23:14:27.0904780","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  539. FileIO-001.txt(597): 23:14:27.0907115","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS","AllocationSize: 278,528, EndOfFile: 262,148, NumberOfLinks: 1, DeletePending: False, Directory: False"
  540. FileIO-001.txt(598): 23:14:27.0909261","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  541. FileIO-001.txt(599): 23:14:27.0909398","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS","AllocationSize: 278,528, EndOfFile: 262,148, NumberOfLinks: 1, DeletePending: False, Directory: False"
  542. FileIO-001.txt(600): 23:14:27.0909643","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS","SyncType: SyncTypeOther"
  543. FileIO-001.txt(601): 23:14:27.1025007","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Globalization\en-us.nlp","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  544. FileIO-001.txt(602): 23:14:27.1028449","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.config","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  545. FileIO-001.txt(603): 23:14:27.1041297","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  546. FileIO-001.txt(604): 23:14:27.1042884","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  547. FileIO-001.txt(605): 23:14:27.1079182","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC\mscorlib.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  548. FileIO-001.txt(606): 23:14:27.1083646","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\mscorlib.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  549. FileIO-001.txt(607): 23:14:27.1085174","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\mscorlib.resources\mscorlib.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  550. FileIO-001.txt(608): 23:14:27.1086658","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\mscorlib.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  551. FileIO-001.txt(609): 23:14:27.1088147","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\mscorlib.resources\mscorlib.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  552. FileIO-001.txt(610): 23:14:27.1105138","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  553. FileIO-001.txt(611): 23:14:27.1123573","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","CreationTime: 2007/10/24 1:47:42, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:42, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  554. FileIO-001.txt(612): 23:14:27.1124883","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS",""
  555. FileIO-001.txt(613): 23:14:27.1130222","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  556. FileIO-001.txt(614): 23:14:27.1144271","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  557. FileIO-001.txt(615): 23:14:27.1144408","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll","SUCCESS","AllocationSize: 32,768, EndOfFile: 27,136, NumberOfLinks: 1, DeletePending: False, Directory: False"
  558. FileIO-001.txt(616): 23:14:27.1144651","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll","SUCCESS","SyncType: SyncTypeOther"
  559. FileIO-001.txt(617): 23:14:27.1146106","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS",""
  560. FileIO-001.txt(618): 23:14:27.1150381","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  561. FileIO-001.txt(619): 23:14:27.1160983","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","CreationTime: 2007/10/24 1:47:42, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:42, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  562. FileIO-001.txt(620): 23:14:27.1162301","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS",""
  563. FileIO-001.txt(621): 23:14:27.1182555","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  564. FileIO-001.txt(622): 23:14:27.1183988","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","CreationTime: 2007/10/24 1:47:42, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:42, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  565. FileIO-001.txt(623): 23:14:27.1185301","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS",""
  566. FileIO-001.txt(624): 23:14:27.1480138","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  567. FileIO-001.txt(625): 23:14:27.1481705","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  568. FileIO-001.txt(626): 23:14:27.1482280","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll","SUCCESS","SyncType: SyncTypeOther"
  569. FileIO-001.txt(627): 23:14:27.1483783","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll","SUCCESS",""
  570. FileIO-001.txt(628): 23:14:27.1496182","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll.2.Manifest","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  571. FileIO-001.txt(629): 23:14:27.1504194","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll.2.Config","NAME NOT FOUND","Desired Access: Generic Read/Execute, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, AllocationSize: n/a"
  572. FileIO-001.txt(630): 23:14:27.1628408","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  573. FileIO-001.txt(631): 23:14:27.1631442","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  574. FileIO-001.txt(632): 23:14:27.1632487","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","CreationTime: 2012/10/07 20:25:28, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 20:25:30, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  575. FileIO-001.txt(633): 23:14:27.1633414","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  576. FileIO-001.txt(634): 23:14:27.3112923","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  577. FileIO-001.txt(635): 23:14:27.3117614","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  578. FileIO-001.txt(636): 23:14:27.3120877","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja-JP\mscorrc.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  579. FileIO-001.txt(637): 23:14:27.3594124","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja-JP\mscorrc.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  580. FileIO-001.txt(638): 23:14:27.3599902","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja-JP\mscorrc.dll.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  581. FileIO-001.txt(639): 23:14:27.3604478","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja\mscorrc.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  582. FileIO-001.txt(640): 23:14:27.3657948","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja\mscorrc.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  583. FileIO-001.txt(641): 23:14:27.3661351","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ja\mscorrc.dll.DLL","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  584. FileIO-001.txt(642): 23:14:27.3666645","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  585. FileIO-001.txt(688): 23:14:27.4652739","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","CreationTime: 2007/10/24 1:47:44, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:44, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  586. FileIO-001.txt(689): 23:14:27.4654519","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS",""
  587. FileIO-001.txt(690): 23:14:27.4657156","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  588. FileIO-001.txt(691): 23:14:27.4673518","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  589. FileIO-001.txt(692): 23:14:27.4673686","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","AllocationSize: 344,064, EndOfFile: 340,992, NumberOfLinks: 1, DeletePending: False, Directory: False"
  590. FileIO-001.txt(693): 23:14:27.4673940","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","SyncType: SyncTypeOther"
  591. FileIO-001.txt(694): 23:14:27.4675670","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS",""
  592. FileIO-001.txt(695): 23:14:27.4680704","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  593. FileIO-001.txt(696): 23:14:27.4688716","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","CreationTime: 2007/10/24 1:47:44, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2007/10/24 1:47:44, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  594. FileIO-001.txt(697): 23:14:27.4690300","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS",""
  595. FileIO-001.txt(698): 23:14:27.4692635","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  596. FileIO-001.txt(699): 23:14:27.4704411","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  597. FileIO-001.txt(700): 23:14:27.4704545","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","AllocationSize: 344,064, EndOfFile: 340,992, NumberOfLinks: 1, DeletePending: False, Directory: False"
  598. FileIO-001.txt(701): 23:14:27.4704782","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","SyncType: SyncTypeOther"
  599. FileIO-001.txt(702): 23:14:27.4706506","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS",""
  600. FileIO-001.txt(703): 23:14:27.4711562","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Globalization\ja.nlp","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  601. FileIO-001.txt(704): 23:14:27.4715376","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\mscorlib.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  602. FileIO-001.txt(705): 23:14:27.4723723","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  603. FileIO-001.txt(706): 23:14:27.4725248","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC\mscorlib.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  604. FileIO-001.txt(707): 23:14:27.4729059","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\mscorlib.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  605. FileIO-001.txt(708): 23:14:27.4730568","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\mscorlib.resources\mscorlib.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  606. FileIO-001.txt(709): 23:14:27.4731987","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\mscorlib.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  607. FileIO-001.txt(710): 23:14:27.4733459","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\mscorlib.resources\mscorlib.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  608. FileIO-001.txt(711): 23:14:27.4747676","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,460,544, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  609. FileIO-001.txt(712): 23:14:27.4904145","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Open No Recall, Attributes: n/a, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  610. FileIO-001.txt(713): 23:14:27.4905053","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","AllocationSize: 98,304, EndOfFile: 83,968, NumberOfLinks: 1, DeletePending: False, Directory: False"
  611. FileIO-001.txt(714): 23:14:27.4906897","Adobe-Flash_WIN.exe","3952","ReadFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Offset: 0, Length: 83,968"
  612. FileIO-001.txt(715): 23:14:27.4908604","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 2,211,840, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  613. FileIO-001.txt(716): 23:14:27.5166872","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  614. FileIO-001.txt(717): 23:14:27.5309272","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,521,920, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  615. FileIO-001.txt(718): 23:14:32.8344044","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,371,008, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  616. FileIO-001.txt(719): 23:14:32.8580297","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,009,984, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  617. FileIO-001.txt(720): 23:14:32.9053746","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,386,816, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  618. FileIO-001.txt(721): 23:14:32.9218775","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,670,016, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  619. FileIO-001.txt(722): 23:14:32.9348258","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 5,464,064, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  620. FileIO-001.txt(723): 23:14:32.9477967","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 6,270,976, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  621. FileIO-001.txt(724): 23:14:32.9584425","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,787,072, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  622. FileIO-001.txt(725): 23:14:32.9828894","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,766,592, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  623. FileIO-001.txt(726): 23:14:32.9857918","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,025,792, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  624. FileIO-001.txt(727): 23:14:32.9986951","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,486,912, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  625. FileIO-001.txt(728): 23:14:33.0084421","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,863,168, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  626. FileIO-001.txt(729): 23:14:33.0171413","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 942,080, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  627. FileIO-001.txt(730): 23:14:33.0257739","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,835,072, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  628. FileIO-001.txt(731): 23:14:33.0376154","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,963,200, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  629. FileIO-001.txt(732): 23:14:33.0519636","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,250,496, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  630. FileIO-001.txt(733): 23:14:33.0692943","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,096,640, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  631. FileIO-001.txt(734): 23:14:33.0865241","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,818,688, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  632. FileIO-001.txt(735): 23:14:33.0903791","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,048,064, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  633. FileIO-001.txt(736): 23:14:33.1072044","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,080,256, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  634. FileIO-001.txt(737): 23:14:33.1389763","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,313,728, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  635. FileIO-001.txt(738): 23:14:33.1536603","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,750,208, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  636. FileIO-001.txt(739): 23:14:33.1627176","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,263,360, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  637. FileIO-001.txt(740): 23:14:33.2199849","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,807,552, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  638. FileIO-001.txt(741): 23:14:33.2658620","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,767,168, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  639. FileIO-001.txt(742): 23:14:33.3004711","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,793,472, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  640. FileIO-001.txt(743): 23:14:33.3281917","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,447,104, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  641. FileIO-001.txt(744): 23:14:33.3618745","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,015,296, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  642. FileIO-001.txt(745): 23:14:33.4011099","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 7,036,928, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  643. FileIO-001.txt(746): 23:14:33.4342750","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,244,096, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  644. FileIO-001.txt(747): 23:14:33.4610100","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,002,432, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  645. FileIO-001.txt(748): 23:14:33.4930124","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,137,600, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  646. FileIO-001.txt(749): 23:14:33.5282755","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,998,912, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  647. FileIO-001.txt(750): 23:14:33.5553443","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,227,712, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  648. FileIO-001.txt(751): 23:14:33.5575868","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,121,216, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  649. FileIO-001.txt(752): 23:14:33.5580603","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,186,752, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  650. FileIO-001.txt(753): 23:14:33.5881641","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,965,568, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  651. FileIO-001.txt(754): 23:14:33.6185333","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,747,904, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  652. FileIO-001.txt(755): 23:14:33.6607479","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,300,224, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  653. FileIO-001.txt(756): 23:14:33.7490860","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,039,872, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  654. FileIO-001.txt(757): 23:14:33.7882091","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,301,440, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  655. FileIO-001.txt(758): 23:14:33.8199967","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,280,960, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  656. FileIO-001.txt(759): 23:14:33.8511462","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,022,912, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  657. FileIO-001.txt(760): 23:14:33.8545740","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,986,048, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  658. FileIO-001.txt(761): 23:14:33.8774400","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,211,328, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  659. FileIO-001.txt(762): 23:14:33.8999632","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,117,120, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  660. FileIO-001.txt(763): 23:14:33.9160446","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,031,680, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  661. FileIO-001.txt(764): 23:14:33.9292022","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,883,648, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  662. FileIO-001.txt(765): 23:14:33.9564484","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,926,336, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  663. FileIO-001.txt(766): 23:14:33.9737500","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,080,832, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  664. FileIO-001.txt(767): 23:14:34.0196427","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,342,400, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  665. FileIO-001.txt(768): 23:14:34.0657653","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,063,872, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  666. FileIO-001.txt(769): 23:14:34.1090868","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,846,784, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  667. FileIO-001.txt(770): 23:14:34.1412255","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,160,960, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  668. FileIO-001.txt(771): 23:14:34.1837247","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,681,152, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  669. FileIO-001.txt(772): 23:14:34.2094794","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,433,600, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  670. FileIO-001.txt(773): 23:14:34.2531565","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,377,472, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  671. FileIO-001.txt(774): 23:14:34.2624652","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 7,004,160, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  672. FileIO-001.txt(775): 23:14:34.2886283","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,400,832, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  673. FileIO-001.txt(776): 23:14:34.3081947","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,144,576, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  674. FileIO-001.txt(777): 23:14:34.3117986","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,664,768, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  675. FileIO-001.txt(778): 23:14:34.3366886","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,361,088, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  676. FileIO-001.txt(779): 23:14:34.3467435","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,006,464, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  677. FileIO-001.txt(780): 23:14:34.3659160","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,471,680, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  678. FileIO-001.txt(781): 23:14:34.4086799","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 7,073,792, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  679. FileIO-001.txt(782): 23:14:34.4344155","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 7,110,656, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  680. FileIO-001.txt(783): 23:14:34.4658483","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,973,696, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  681. FileIO-001.txt(784): 23:14:34.4974596","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,403,200, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  682. FileIO-001.txt(785): 23:14:34.5236710","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,379,200, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  683. FileIO-001.txt(786): 23:14:34.5547565","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 5,668,864, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  684. FileIO-001.txt(787): 23:14:34.6134785","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 6,369,280, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  685. FileIO-001.txt(788): 23:14:34.6721041","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,533,696, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  686. FileIO-001.txt(789): 23:14:34.7591641","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,914,048, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  687. FileIO-001.txt(790): 23:14:34.7971256","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,189,056, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  688. FileIO-001.txt(791): 23:14:34.8336819","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 905,216, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  689. FileIO-001.txt(792): 23:14:34.8765441","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 733,184, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  690. FileIO-001.txt(793): 23:14:34.9041537","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,355,776, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  691. FileIO-001.txt(794): 23:14:34.9277374","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,323,008, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  692. FileIO-001.txt(795): 23:14:34.9305635","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,130,496, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  693. FileIO-001.txt(796): 23:14:34.9442815","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 700,416, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  694. FileIO-001.txt(797): 23:14:34.9508404","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 675,840, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  695. FileIO-001.txt(798): 23:14:34.9536360","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 872,448, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  696. FileIO-001.txt(799): 23:14:34.9603709","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 815,104, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  697. FileIO-001.txt(800): 23:14:34.9621536","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 757,760, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  698. FileIO-001.txt(801): 23:14:34.9790068","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 688,128, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  699. FileIO-001.txt(802): 23:14:34.9939266","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 782,336, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  700. FileIO-001.txt(803): 23:14:35.0005744","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 847,872, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  701. FileIO-001.txt(804): 23:14:35.0037030","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,105,920, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  702. FileIO-001.txt(805): 23:14:35.0283455","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,777,728, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  703. FileIO-001.txt(806): 23:14:35.0735644","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 868,352, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  704. FileIO-001.txt(807): 23:14:35.0970464","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,093,632, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  705. FileIO-001.txt(808): 23:14:35.0997512","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,735,616, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  706. FileIO-001.txt(809): 23:14:35.1114231","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 917,504, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  707. FileIO-001.txt(810): 23:14:35.1511753","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 278,528, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  708. FileIO-001.txt(811): 23:14:35.1943065","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 323,584, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  709. FileIO-001.txt(812): 23:14:35.2278979","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 192,512, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  710. FileIO-001.txt(813): 23:14:35.2445269","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 98,304, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  711. FileIO-001.txt(814): 23:14:35.2676689","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 106,496, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  712. FileIO-001.txt(815): 23:14:35.2985254","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,927,488, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  713. FileIO-001.txt(816): 23:14:35.3289147","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,205,440, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  714. FileIO-001.txt(817): 23:14:35.3337469","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,411,392, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  715. FileIO-001.txt(818): 23:14:35.3607961","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,166,208, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  716. FileIO-001.txt(819): 23:14:35.3999958","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,133,440, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  717. FileIO-001.txt(820): 23:14:35.4307709","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,191,936, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  718. FileIO-001.txt(821): 23:14:35.4504676","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 421,888, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  719. FileIO-001.txt(822): 23:14:35.4856114","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,175,552, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  720. FileIO-001.txt(823): 23:14:35.5020400","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,355,776, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  721. FileIO-001.txt(824): 23:14:35.5174993","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,047,488, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  722. FileIO-001.txt(825): 23:14:35.5374781","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,935,680, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  723. FileIO-001.txt(826): 23:14:35.5585525","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,794,112, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  724. FileIO-001.txt(827): 23:14:35.5741375","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,238,784, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  725. FileIO-001.txt(828): 23:14:35.6156517","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,742,592, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  726. FileIO-001.txt(829): 23:14:35.6586200","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 7,208,960, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  727. FileIO-001.txt(830): 23:14:35.6971579","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,751,424, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  728. FileIO-001.txt(831): 23:14:35.7740453","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 12,681,216, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  729. FileIO-001.txt(832): 23:14:35.8049975","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,687,040, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  730. FileIO-001.txt(833): 23:14:35.8453418","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,883,072, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  731. FileIO-001.txt(834): 23:14:35.8740527","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 12,771,328, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  732. FileIO-001.txt(835): 23:14:35.9090580","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,984,896, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  733. FileIO-001.txt(836): 23:14:35.9452229","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,968,512, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  734. FileIO-001.txt(837): 23:14:35.9588031","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,591,680, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  735. FileIO-001.txt(838): 23:14:35.9671547","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,705,152, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  736. FileIO-001.txt(839): 23:14:35.9794158","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,952,128, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  737. FileIO-001.txt(840): 23:14:35.9828797","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,780,672, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  738. FileIO-001.txt(841): 23:14:35.9978480","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,478,656, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  739. FileIO-001.txt(842): 23:14:36.0352592","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,575,296, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  740. FileIO-001.txt(843): 23:14:36.0566885","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 12,800,000, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  741. FileIO-001.txt(844): 23:14:36.0823610","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,682,944, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  742. FileIO-001.txt(845): 23:14:36.1164827","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,825,728, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  743. FileIO-001.txt(846): 23:14:36.1287803","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,626,112, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  744. FileIO-001.txt(847): 23:14:36.1498850","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 856,064, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  745. FileIO-001.txt(848): 23:14:36.1643393","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,134,592, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  746. FileIO-001.txt(849): 23:14:36.1825399","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,636,736, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  747. FileIO-001.txt(850): 23:14:36.1984302","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 12,550,144, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  748. FileIO-001.txt(851): 23:14:36.2139361","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,866,688, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  749. FileIO-001.txt(852): 23:14:36.2338009","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 659,456, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  750. FileIO-001.txt(853): 23:14:36.2627060","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,759,552, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  751. FileIO-001.txt(854): 23:14:36.2754654","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,760,704, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  752. FileIO-001.txt(855): 23:14:36.3234903","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 569,344, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  753. FileIO-001.txt(856): 23:14:36.3337145","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 1,097,728, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  754. FileIO-001.txt(857): 23:14:36.3567140","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 626,688, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  755. FileIO-001.txt(858): 23:14:36.3778880","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 90,112, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  756. FileIO-001.txt(859): 23:14:36.4084022","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 610,304, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  757. FileIO-001.txt(860): 23:14:36.4420903","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  758. FileIO-001.txt(861): 23:14:36.4429842","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  759. FileIO-001.txt(862): 23:14:36.4478508","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  760. FileIO-001.txt(863): 23:14:36.4483262","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  761. FileIO-001.txt(864): 23:14:36.4516473","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c","SUCCESS","CreationTime: 2012/10/07 18:19:06, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 18:19:08, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  762. FileIO-001.txt(865): 23:14:36.4517962","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c","SUCCESS",""
  763. FileIO-001.txt(866): 23:14:36.4520488","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  764. FileIO-001.txt(867): 23:14:36.4549938","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  765. FileIO-001.txt(868): 23:14:36.4552377","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  766. FileIO-001.txt(869): 23:14:36.4552626","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","AllocationSize: 1,736,704, EndOfFile: 1,724,416, NumberOfLinks: 1, DeletePending: False, Directory: False"
  767. FileIO-001.txt(870): 23:14:36.4554945","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS","SyncType: SyncTypeOther"
  768. FileIO-001.txt(871): 23:14:36.4557291","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS",""
  769. FileIO-001.txt(872): 23:14:36.4557875","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 0, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  770. FileIO-001.txt(873): 23:14:36.4774663","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  771. FileIO-001.txt(874): 23:14:36.4777076","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  772. FileIO-001.txt(875): 23:14:36.4778166","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","SyncType: SyncTypeOther"
  773. FileIO-001.txt(876): 23:14:36.4780563","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll","SUCCESS",""
  774. FileIO-001.txt(877): 23:14:36.4815807","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,617,920, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  775. FileIO-001.txt(878): 23:14:36.4984709","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 4,096, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  776. FileIO-001.txt(879): 23:14:36.5153484","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,568,768, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  777. FileIO-001.txt(880): 23:14:36.5186626","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 638,976, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  778. FileIO-001.txt(881): 23:14:36.5427827","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,572,864, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  779. FileIO-001.txt(882): 23:14:36.5477020","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 131,072, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  780. FileIO-001.txt(883): 23:14:36.5598879","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 557,056, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  781. FileIO-001.txt(884): 23:14:36.5609685","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,589,248, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  782. FileIO-001.txt(885): 23:14:36.5800874","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,142,784, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  783. FileIO-001.txt(886): 23:14:36.6041343","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 36,864, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  784. FileIO-001.txt(887): 23:14:36.6671434","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 139,264, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  785. FileIO-001.txt(888): 23:14:36.6743969","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 495,616, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  786. FileIO-001.txt(889): 23:14:36.6781923","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 188,416, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  787. FileIO-001.txt(890): 23:14:36.6811393","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 462,848, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  788. FileIO-001.txt(891): 23:14:36.6853840","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 319,488, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  789. FileIO-001.txt(892): 23:14:36.7280691","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 540,672, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  790. FileIO-001.txt(893): 23:14:36.7300173","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  791. FileIO-001.txt(894): 23:14:36.7303733","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  792. FileIO-001.txt(895): 23:14:36.7307096","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  793. FileIO-001.txt(896): 23:14:36.7403282","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  794. FileIO-001.txt(897): 23:14:36.7406897","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  795. FileIO-001.txt(898): 23:14:36.7407117","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\msctfime.ime","SUCCESS","AllocationSize: 180,224, EndOfFile: 177,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
  796. FileIO-001.txt(899): 23:14:36.7407494","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\msctfime.ime","SUCCESS","SyncType: SyncTypeOther"
  797. FileIO-001.txt(900): 23:14:36.7411093","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  798. FileIO-001.txt(901): 23:14:36.7412780","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 790,528, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  799. FileIO-001.txt(902): 23:14:36.7526334","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  800. FileIO-001.txt(903): 23:14:36.7529856","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  801. FileIO-001.txt(904): 23:14:36.7572038","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  802. FileIO-001.txt(905): 23:14:36.7576619","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  803. FileIO-001.txt(906): 23:14:36.7580606","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  804. FileIO-001.txt(907): 23:14:36.7580824","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\msctfime.ime","SUCCESS","AllocationSize: 180,224, EndOfFile: 177,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
  805. FileIO-001.txt(908): 23:14:36.7581198","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\msctfime.ime","SUCCESS","SyncType: SyncTypeOther"
  806. FileIO-001.txt(909): 23:14:36.7616013","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","Desired Access: Generic Read/Write, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  807. FileIO-001.txt(910): 23:14:36.7620072","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  808. FileIO-001.txt(911): 23:14:36.7629738","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  809. FileIO-001.txt(912): 23:14:36.7667039","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","AllocationSize: 32,768, EndOfFile: 19,680, NumberOfLinks: 1, DeletePending: False, Directory: False"
  810. FileIO-001.txt(913): 23:14:36.7668226","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READWRITE"
  811. FileIO-001.txt(914): 23:14:36.7671575","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  812. FileIO-001.txt(915): 23:14:36.7674950","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  813. FileIO-001.txt(916): 23:14:36.7679493","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  814. FileIO-001.txt(917): 23:14:36.7708999","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","AllocationSize: 32,768, EndOfFile: 19,680, NumberOfLinks: 1, DeletePending: False, Directory: False"
  815. FileIO-001.txt(918): 23:14:36.7710200","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","SyncType: SyncTypeOther"
  816. FileIO-001.txt(919): 23:14:36.7710801","Adobe-Flash_WIN.exe","3952","ReadFile","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS","Offset: 0, Length: 19,680, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  817. FileIO-001.txt(920): 23:14:36.7714539","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  818. FileIO-001.txt(921): 23:14:36.7714751","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\msctfime.ime","SUCCESS","AllocationSize: 180,224, EndOfFile: 177,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
  819. FileIO-001.txt(922): 23:14:36.7715112","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\msctfime.ime","SUCCESS","SyncType: SyncTypeOther"
  820. FileIO-001.txt(923): 23:14:36.7718707","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  821. FileIO-001.txt(924): 23:14:36.7727423","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  822. FileIO-001.txt(925): 23:14:36.7826115","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  823. FileIO-001.txt(926): 23:14:36.7829587","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  824. FileIO-001.txt(927): 23:14:36.7863659","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  825. FileIO-001.txt(928): 23:14:36.7867251","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  826. FileIO-001.txt(929): 23:14:36.7867461","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\msctfime.ime","SUCCESS","AllocationSize: 180,224, EndOfFile: 177,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
  827. FileIO-001.txt(930): 23:14:36.7867829","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\msctfime.ime","SUCCESS","SyncType: SyncTypeOther"
  828. FileIO-001.txt(931): 23:14:36.7871403","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  829. FileIO-001.txt(932): 23:14:36.7886212","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  830. FileIO-001.txt(933): 23:14:36.7889751","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  831. FileIO-001.txt(934): 23:14:36.7893137","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  832. FileIO-001.txt(935): 23:14:36.7897674","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  833. FileIO-001.txt(936): 23:14:36.7901258","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  834. FileIO-001.txt(937): 23:14:36.7901471","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\msctfime.ime","SUCCESS","AllocationSize: 180,224, EndOfFile: 177,152, NumberOfLinks: 1, DeletePending: False, Directory: False"
  835. FileIO-001.txt(938): 23:14:36.7901837","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\msctfime.ime","SUCCESS","SyncType: SyncTypeOther"
  836. FileIO-001.txt(939): 23:14:36.7905412","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  837. FileIO-001.txt(940): 23:14:36.7914014","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  838. FileIO-001.txt(941): 23:14:36.7917509","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  839. FileIO-001.txt(942): 23:14:36.7920878","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  840. FileIO-001.txt(943): 23:14:36.7925367","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  841. FileIO-001.txt(944): 23:14:36.7928941","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  842. FileIO-001.txt(945): 23:14:36.7929745","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\MSCTFIME.IME","SUCCESS","SyncType: SyncTypeOther"
  843. FileIO-001.txt(946): 23:14:36.7933377","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTFIME.IME","SUCCESS",""
  844. FileIO-001.txt(947): 23:14:36.7950513","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\ole32.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  845. FileIO-001.txt(948): 23:14:36.7953145","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\ole32.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  846. FileIO-001.txt(949): 23:14:36.7955614","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\ole32.dll","SUCCESS",""
  847. FileIO-001.txt(950): 23:14:36.7957170","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 172,032, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  848. FileIO-001.txt(951): 23:14:36.7966912","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  849. FileIO-001.txt(952): 23:14:36.7969538","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  850. FileIO-001.txt(953): 23:14:36.7971996","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\ntdll.dll","SUCCESS",""
  851. FileIO-001.txt(954): 23:14:36.7985702","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  852. FileIO-001.txt(955): 23:14:36.7992826","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  853. FileIO-001.txt(956): 23:14:36.7996212","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS",""
  854. FileIO-001.txt(957): 23:14:36.8000751","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  855. FileIO-001.txt(958): 23:14:36.8004324","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imjp81.ime","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  856. FileIO-001.txt(959): 23:14:36.8004545","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","AllocationSize: 344,064, EndOfFile: 340,023, NumberOfLinks: 1, DeletePending: False, Directory: False"
  857. FileIO-001.txt(960): 23:14:36.8004925","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imjp81.ime","SUCCESS","SyncType: SyncTypeOther"
  858. FileIO-001.txt(961): 23:14:36.8008493","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS",""
  859. FileIO-001.txt(962): 23:14:36.8036189","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  860. FileIO-001.txt(963): 23:14:36.8039684","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  861. FileIO-001.txt(964): 23:14:36.8043022","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS",""
  862. FileIO-001.txt(965): 23:14:36.8047509","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  863. FileIO-001.txt(966): 23:14:36.8051062","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imjp81.ime","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  864. FileIO-001.txt(967): 23:14:36.8051878","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\IMJP81.IME","SUCCESS","SyncType: SyncTypeOther"
  865. FileIO-001.txt(968): 23:14:36.8055482","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81.ime","SUCCESS",""
  866. FileIO-001.txt(969): 23:14:36.8064570","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・mjp81k.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  867. FileIO-001.txt(970): 23:14:36.8072869","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81k.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  868. FileIO-001.txt(971): 23:14:36.8076370","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\imjp81k.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  869. FileIO-001.txt(972): 23:14:36.8079708","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81k.dll","SUCCESS",""
  870. FileIO-001.txt(973): 23:14:36.8084240","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\imjp81k.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  871. FileIO-001.txt(974): 23:14:36.8087779","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\imjp81k.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  872. FileIO-001.txt(975): 23:14:36.8088195","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\IMJP81K.DLL","SUCCESS","SyncType: SyncTypeOther"
  873. FileIO-001.txt(976): 23:14:36.8091766","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\imjp81k.dll","SUCCESS",""
  874. FileIO-001.txt(977): 23:14:36.8125326","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  875. FileIO-001.txt(978): 23:14:36.8128991","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  876. FileIO-001.txt(979): 23:14:36.8129868","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS","SyncType: SyncTypeOther"
  877. FileIO-001.txt(980): 23:14:36.8131056","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe","SUCCESS",""
  878. FileIO-001.txt(981): 23:14:36.8312950","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT","SUCCESS",""
  879. FileIO-001.txt(982): 23:14:36.8317937","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  880. FileIO-001.txt(983): 23:14:36.8320110","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  881. FileIO-001.txt(984): 23:14:36.8381587","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  882. FileIO-001.txt(985): 23:14:36.8383585","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS",""
  883. FileIO-001.txt(986): 23:14:36.8386728","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  884. FileIO-001.txt(987): 23:14:36.8428990","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  885. FileIO-001.txt(988): 23:14:36.8434446","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  886. FileIO-001.txt(989): 23:14:36.8436483","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  887. FileIO-001.txt(990): 23:14:36.8436712","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  888. FileIO-001.txt(991): 23:14:36.8437095","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","SyncType: SyncTypeOther"
  889. FileIO-001.txt(992): 23:14:36.8439427","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS",""
  890. FileIO-001.txt(993): 23:14:36.8440405","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 847,872, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  891. FileIO-001.txt(994): 23:14:36.8505813","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 204,800, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  892. FileIO-001.txt(995): 23:14:36.8606172","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 237,568, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  893. FileIO-001.txt(996): 23:14:36.8634027","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 274,432, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  894. FileIO-001.txt(997): 23:14:36.9129185","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 282,624, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  895. FileIO-001.txt(998): 23:14:36.9147160","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 380,928, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  896. FileIO-001.txt(999): 23:14:36.9381092","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 5,423,104, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  897. FileIO-001.txt(1000): 23:14:36.9710150","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 5,455,872, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  898. FileIO-001.txt(1001): 23:14:36.9915173","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 98,304, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  899. FileIO-001.txt(1002): 23:14:37.0219584","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  900. FileIO-001.txt(1003): 23:14:37.0221816","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  901. FileIO-001.txt(1004): 23:14:37.0223785","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  902. FileIO-001.txt(1005): 23:14:37.0225772","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  903. FileIO-001.txt(1006): 23:14:37.0225998","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  904. FileIO-001.txt(1007): 23:14:37.0226383","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","SyncType: SyncTypeOther"
  905. FileIO-001.txt(1008): 23:14:37.0228708","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS",""
  906. FileIO-001.txt(1009): 23:14:37.0273786","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 221,184, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  907. FileIO-001.txt(1010): 23:14:37.0488894","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 61,440, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  908. FileIO-001.txt(1011): 23:14:37.0688992","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 86,016, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  909. FileIO-001.txt(1012): 23:14:37.0721516","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 110,592, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  910. FileIO-001.txt(1013): 23:14:37.0754761","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 143,360, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  911. FileIO-001.txt(1014): 23:14:37.0790695","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","Offset: 155,648, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  912. FileIO-001.txt(1015): 23:14:37.0847711","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,007,616, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  913. FileIO-001.txt(1016): 23:14:37.1007664","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 892,928, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  914. FileIO-001.txt(1017): 23:14:37.1051544","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  915. FileIO-001.txt(1018): 23:14:37.1053704","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  916. FileIO-001.txt(1019): 23:14:37.1055651","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  917. FileIO-001.txt(1020): 23:14:37.1057618","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  918. FileIO-001.txt(1021): 23:14:37.1057830","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  919. FileIO-001.txt(1022): 23:14:37.1058207","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","SyncType: SyncTypeOther"
  920. FileIO-001.txt(1023): 23:14:37.1060520","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS",""
  921. FileIO-001.txt(1024): 23:14:37.1140245","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","Desired Access: Generic Read, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, AllocationSize: n/a, OpenResult: Opened"
  922. FileIO-001.txt(1025): 23:14:37.1142424","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  923. FileIO-001.txt(1026): 23:14:37.1144374","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  924. FileIO-001.txt(1027): 23:14:37.1146347","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_READONLY"
  925. FileIO-001.txt(1028): 23:14:37.1146562","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","AllocationSize: 8,273,920, EndOfFile: 8,272,028, NumberOfLinks: 1, DeletePending: False, Directory: False"
  926. FileIO-001.txt(1029): 23:14:37.1146942","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\FONTS\MSGOTHIC.TTC","SUCCESS","SyncType: SyncTypeOther"
  927. FileIO-001.txt(1030): 23:14:37.1149244","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\Fonts\msgothic.ttc","SUCCESS",""
  928. FileIO-001.txt(1031): 23:14:37.1278662","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 716,800, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  929. FileIO-001.txt(1032): 23:14:37.1399108","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 368,640, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  930. FileIO-001.txt(1033): 23:14:37.1534480","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 69,632, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  931. FileIO-001.txt(1034): 23:14:37.1797410","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 487,424, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  932. FileIO-001.txt(1035): 23:14:37.1962297","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 569,344, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  933. FileIO-001.txt(1036): 23:14:37.2268492","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,407,872, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  934. FileIO-001.txt(1037): 23:14:37.2749749","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 720,896, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  935. FileIO-001.txt(1038): 23:14:37.2818772","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,845,568, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  936. FileIO-001.txt(1039): 23:14:37.2928892","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,289,088, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  937. FileIO-001.txt(1040): 23:14:37.3130345","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,255,744, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  938. FileIO-001.txt(1041): 23:14:37.3367132","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,419,584, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  939. FileIO-001.txt(1042): 23:14:37.3725638","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 2,662,400, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  940. FileIO-001.txt(1043): 23:14:37.4031649","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,108,288, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  941. FileIO-001.txt(1044): 23:14:37.4144423","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,756,032, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  942. FileIO-001.txt(1045): 23:14:37.4547726","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,043,328, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  943. FileIO-001.txt(1046): 23:14:37.4915166","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,555,328, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  944. FileIO-001.txt(1047): 23:14:37.5311921","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll","SUCCESS","Offset: 2,457,600, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  945. FileIO-001.txt(1048): 23:14:37.5687212","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,391,488, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  946. FileIO-001.txt(1049): 23:14:37.6081376","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 413,696, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  947. FileIO-001.txt(1050): 23:14:37.6511210","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,223,552, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  948. FileIO-001.txt(1051): 23:14:37.6782538","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,940,928, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  949. FileIO-001.txt(1052): 23:14:37.7438473","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 544,768, Length: 24,576, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  950. FileIO-001.txt(1053): 23:14:37.7605003","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,867,200, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  951. FileIO-001.txt(1054): 23:14:37.7634512","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 421,888, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  952. FileIO-001.txt(1055): 23:14:37.8059108","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,006,464, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  953. FileIO-001.txt(1056): 23:14:37.8264092","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,739,072, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  954. FileIO-001.txt(1057): 23:14:37.8454806","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,815,744, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  955. FileIO-001.txt(1058): 23:14:37.8614014","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,702,208, Length: 24,576, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  956. FileIO-001.txt(1059): 23:14:37.8652348","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,825,088, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  957. FileIO-001.txt(1060): 23:14:37.8691046","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,633,152, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  958. FileIO-001.txt(1061): 23:14:37.9058827","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,163,264, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  959. FileIO-001.txt(1062): 23:14:37.9271603","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,001,216, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  960. FileIO-001.txt(1063): 23:14:37.9705915","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,406,720, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  961. FileIO-001.txt(1064): 23:14:38.0057485","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,678,208, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  962. FileIO-001.txt(1065): 23:14:38.0238678","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,727,360, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  963. FileIO-001.txt(1066): 23:14:38.0272702","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,508,544, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  964. FileIO-001.txt(1067): 23:14:38.0441305","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,898,240, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  965. FileIO-001.txt(1068): 23:14:38.0858017","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,390,336, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  966. FileIO-001.txt(1069): 23:14:38.1256336","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,571,712, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  967. FileIO-001.txt(1070): 23:14:38.1494369","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,346,432, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  968. FileIO-001.txt(1071): 23:14:38.1768672","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 5,386,240, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  969. FileIO-001.txt(1072): 23:14:38.2052951","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,133,440, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  970. FileIO-001.txt(1073): 23:14:38.2236617","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,616,768, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  971. FileIO-001.txt(1074): 23:14:38.2477614","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,119,232, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  972. FileIO-001.txt(1075): 23:14:38.2848571","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,710,976, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  973. FileIO-001.txt(1076): 23:14:38.3116161","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,984,832, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  974. FileIO-001.txt(1077): 23:14:38.3276422","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,353,472, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  975. FileIO-001.txt(1078): 23:14:38.3451757","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,334,144, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  976. FileIO-001.txt(1079): 23:14:38.3643591","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,968,448, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  977. FileIO-001.txt(1080): 23:14:38.3677263","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,070,848, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  978. FileIO-001.txt(1081): 23:14:38.3768264","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,290,240, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  979. FileIO-001.txt(1082): 23:14:38.4027732","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,497,408, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  980. FileIO-001.txt(1083): 23:14:38.4169315","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,952,064, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  981. FileIO-001.txt(1084): 23:14:38.4453010","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 778,240, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  982. FileIO-001.txt(1085): 23:14:38.4990774","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 978,944, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  983. FileIO-001.txt(1086): 23:14:38.5130702","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,087,232, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  984. FileIO-001.txt(1087): 23:14:38.5532343","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,313,088, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  985. FileIO-001.txt(1088): 23:14:38.5666354","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,796,416, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  986. FileIO-001.txt(1089): 23:14:38.5735651","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,932,224, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  987. FileIO-001.txt(1090): 23:14:38.6004252","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,702,848, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  988. FileIO-001.txt(1091): 23:14:38.6329913","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,557,696, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  989. FileIO-001.txt(1092): 23:14:38.6900223","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\System.Windows.Forms.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  990. FileIO-001.txt(1093): 23:14:38.6903025","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  991. FileIO-001.txt(1094): 23:14:38.6905735","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC\System.Windows.Forms.resources\2.0.0.0_ja-JP_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  992. FileIO-001.txt(1095): 23:14:38.6913194","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\System.Windows.Forms.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  993. FileIO-001.txt(1096): 23:14:38.6916016","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\System.Windows.Forms.resources\System.Windows.Forms.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  994. FileIO-001.txt(1097): 23:14:38.6918552","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\System.Windows.Forms.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  995. FileIO-001.txt(1098): 23:14:38.6921285","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a-JP\System.Windows.Forms.resources\System.Windows.Forms.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  996. FileIO-001.txt(1099): 23:14:38.6929526","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_32\System.Windows.Forms.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  997. FileIO-001.txt(1100): 23:14:38.6932319","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  998. FileIO-001.txt(1101): 23:14:38.6934873","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC\System.Windows.Forms.resources\2.0.0.0_ja_b77a5c561934e089","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  999. FileIO-001.txt(1102): 23:14:38.6941513","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\System.Windows.Forms.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1000. FileIO-001.txt(1103): 23:14:38.6944215","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\System.Windows.Forms.resources\System.Windows.Forms.resources.dll","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1001. FileIO-001.txt(1104): 23:14:38.6946785","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\System.Windows.Forms.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1002. FileIO-001.txt(1105): 23:14:38.6949445","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・a\System.Windows.Forms.resources\System.Windows.Forms.resources.exe","PATH NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1003. FileIO-001.txt(1106): 23:14:38.6956644","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,741,824, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1004. FileIO-001.txt(1107): 23:14:38.7433202","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 5,595,136, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1005. FileIO-001.txt(1108): 23:14:38.7885575","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,044,928, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1006. FileIO-001.txt(1109): 23:14:38.8190552","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,716,224, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1007. FileIO-001.txt(1110): 23:14:38.8364714","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 5,562,368, Length: 24,576, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1008. FileIO-001.txt(1111): 23:14:38.8744268","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,067,328, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1009. FileIO-001.txt(1112): 23:14:38.9124880","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 360,448, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1010. FileIO-001.txt(1113): 23:14:38.9127590","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,952,704, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1011. FileIO-001.txt(1114): 23:14:38.9332152","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 700,416, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1012. FileIO-001.txt(1115): 23:14:38.9470854","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,948,608, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1013. FileIO-001.txt(1116): 23:14:38.9653023","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,063,296, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1014. FileIO-001.txt(1117): 23:14:39.0068872","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,214,848, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1015. FileIO-001.txt(1118): 23:14:39.0750224","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,128,192, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1016. FileIO-001.txt(1119): 23:14:39.0921290","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,257,472, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1017. FileIO-001.txt(1120): 23:14:39.1120790","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,464,640, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1018. FileIO-001.txt(1121): 23:14:39.1287387","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,575,808, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1019. FileIO-001.txt(1122): 23:14:39.1744361","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,006,464, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1020. FileIO-001.txt(1123): 23:14:39.1964845","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 2,920,448, Length: 24,576, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1021. FileIO-001.txt(1124): 23:14:39.2129349","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,170,944, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1022. FileIO-001.txt(1125): 23:14:39.2318890","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,383,360, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1023. FileIO-001.txt(1126): 23:14:39.2545999","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 122,880, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1024. FileIO-001.txt(1127): 23:14:39.3128780","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,662,464, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1025. FileIO-001.txt(1128): 23:14:39.3244097","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,592,832, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1026. FileIO-001.txt(1129): 23:14:39.3484985","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 9,576,448, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1027. FileIO-001.txt(1130): 23:14:39.3636845","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 410,624, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1028. FileIO-001.txt(1131): 23:14:39.4184233","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 122,880, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1029. FileIO-001.txt(1132): 23:14:39.4496373","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 290,816, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1030. FileIO-001.txt(1133): 23:14:39.4549701","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 77,824, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1031. FileIO-001.txt(1134): 23:14:39.4616025","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 69,632, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1032. FileIO-001.txt(1135): 23:14:39.4710677","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 7,741,440, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1033. FileIO-001.txt(1136): 23:14:39.4804591","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,511,488, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1034. FileIO-001.txt(1137): 23:14:39.5514192","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,866,048, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1035. FileIO-001.txt(1138): 23:14:39.5660473","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,399,168, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1036. FileIO-001.txt(1139): 23:14:39.6660698","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,459,200, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1037. FileIO-001.txt(1140): 23:14:39.7129892","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 979,968, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1038. FileIO-001.txt(1141): 23:14:39.7514921","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 955,392, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1039. FileIO-001.txt(1142): 23:14:39.7547711","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 57,344, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1040. FileIO-001.txt(1143): 23:14:39.7781548","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 328,704, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1041. FileIO-001.txt(1144): 23:14:39.8188493","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 282,624, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1042. FileIO-001.txt(1145): 23:14:39.8420738","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,044,480, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1043. FileIO-001.txt(1146): 23:14:39.8798794","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 593,920, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1044. FileIO-001.txt(1147): 23:14:39.9213685","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 253,952, Length: 24,576, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1045. FileIO-001.txt(1148): 23:14:39.9240166","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,046,912, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1046. FileIO-001.txt(1149): 23:14:39.9475257","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,198,464, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1047. FileIO-001.txt(1150): 23:14:39.9863628","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,373,952, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1048. FileIO-001.txt(1151): 23:14:39.9999503","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,861,952, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1049. FileIO-001.txt(1152): 23:14:40.0033728","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,382,784, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1050. FileIO-001.txt(1153): 23:14:40.0115179","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 778,240, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1051. FileIO-001.txt(1154): 23:14:40.0246297","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 811,008, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1052. FileIO-001.txt(1155): 23:14:40.0266053","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 675,840, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1053. FileIO-001.txt(1156): 23:14:40.0631798","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 1,339,392, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1054. FileIO-001.txt(1157): 23:14:40.0821386","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,337,088, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1055. FileIO-001.txt(1158): 23:14:40.0856751","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,641,344, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1056. FileIO-001.txt(1159): 23:14:40.1069890","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,907,008, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1057. FileIO-001.txt(1160): 23:14:40.1211743","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,617,344, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1058. FileIO-001.txt(1161): 23:14:40.1389495","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,552,384, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1059. FileIO-001.txt(1162): 23:14:40.1632811","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,519,616, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1060. FileIO-001.txt(1163): 23:14:40.1708007","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,537,216, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1061. FileIO-001.txt(1164): 23:14:40.1869198","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,488,640, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1062. FileIO-001.txt(1165): 23:14:40.1937123","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,489,792, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1063. FileIO-001.txt(1166): 23:14:40.2091961","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,584,576, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1064. FileIO-001.txt(1167): 23:14:40.2115168","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,383,296, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1065. FileIO-001.txt(1168): 23:14:40.2165300","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,255,168, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1066. FileIO-001.txt(1169): 23:14:40.2223143","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,755,456, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1067. FileIO-001.txt(1170): 23:14:40.2271012","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,650,112, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1068. FileIO-001.txt(1171): 23:14:40.2432845","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,758,976, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1069. FileIO-001.txt(1172): 23:14:40.2660520","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,430,720, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1070. FileIO-001.txt(1173): 23:14:40.2789681","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,211,264, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1071. FileIO-001.txt(1174): 23:14:40.3158181","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,840,896, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1072. FileIO-001.txt(1175): 23:14:40.3298022","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 8,646,656, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1073. FileIO-001.txt(1176): 23:14:40.3462960","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 368,640, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1074. FileIO-001.txt(1177): 23:14:40.3685289","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,588,096, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1075. FileIO-001.txt(1178): 23:14:40.3831696","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 10,571,776, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1076. FileIO-001.txt(1179): 23:14:40.4074973","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,092,480, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1077. FileIO-001.txt(1180): 23:14:40.4134956","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,125,248, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1078. FileIO-001.txt(1181): 23:14:40.4169549","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,543,616, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1079. FileIO-001.txt(1182): 23:14:40.4354916","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,578,752, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1080. FileIO-001.txt(1183): 23:14:40.4564468","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,444,160, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1081. FileIO-001.txt(1184): 23:14:40.4683257","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 6,868,992, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1082. FileIO-001.txt(1185): 23:14:40.4744500","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 10,571,776, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1083. FileIO-001.txt(1186): 23:14:40.4930797","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 12,873,728, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1084. FileIO-001.txt(1187): 23:14:40.5145740","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,388,544, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1085. FileIO-001.txt(1188): 23:14:40.5207128","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,320,704, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1086. FileIO-001.txt(1189): 23:14:40.5288479","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,857,280, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1087. FileIO-001.txt(1190): 23:14:40.5379899","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 2,514,944, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1088. FileIO-001.txt(1191): 23:14:40.5410291","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 724,992, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1089. FileIO-001.txt(1192): 23:14:40.5618057","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\SYSTEM32\GDI32.DLL","SUCCESS","Offset: 78,848, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1090. FileIO-001.txt(1193): 23:14:40.5791878","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,072,000, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1091. FileIO-001.txt(1194): 23:14:40.6018449","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,017,600, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1092. FileIO-001.txt(1195): 23:14:40.6381470","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,813,376, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1093. FileIO-001.txt(1196): 23:14:40.6676306","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,435,392, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1094. FileIO-001.txt(1197): 23:14:40.7181038","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,279,744, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1095. FileIO-001.txt(1198): 23:14:40.7228927","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 413,696, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1096. FileIO-001.txt(1199): 23:14:40.7621524","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\SYSTEM32\GDI32.DLL","SUCCESS","Offset: 123,904, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1097. FileIO-001.txt(1200): 23:14:40.7945837","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 4,775,936, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1098. FileIO-001.txt(1201): 23:14:40.8128692","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,072,000, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1099. FileIO-001.txt(1202): 23:14:40.8305393","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,236,992, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1100. FileIO-001.txt(1203): 23:14:40.8766919","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,323,008, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1101. FileIO-001.txt(1204): 23:14:40.9090527","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,468,160, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1102. FileIO-001.txt(1205): 23:14:40.9555700","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 434,176, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1103. FileIO-001.txt(1206): 23:14:40.9746392","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,244,032, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1104. FileIO-001.txt(1207): 23:14:41.0246338","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 479,232, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1105. FileIO-001.txt(1208): 23:14:41.0616640","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 360,448, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1106. FileIO-001.txt(1209): 23:14:41.0959759","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 11,358,208, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1107. FileIO-001.txt(1210): 23:14:41.1552387","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1108. FileIO-001.txt(1211): 23:14:41.1605439","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1109. FileIO-001.txt(1212): 23:14:41.1610763","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・dobe-Flash_WIN.exe.Local","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1110. FileIO-001.txt(1213): 23:14:41.1659593","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1111. FileIO-001.txt(1214): 23:14:41.1661284","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","CreationTime: 2012/10/07 18:19:17, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2012/10/07 18:19:18, ChangeTime: 1601/01/01 9:00:00, FileAttributes: D"
  1112. FileIO-001.txt(1215): 23:14:41.1662787","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
  1113. FileIO-001.txt(1216): 23:14:41.1699976","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1114. FileIO-001.txt(1217): 23:14:41.1706340","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,486,848, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1115. FileIO-001.txt(1218): 23:14:41.1807288","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,860,032, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1116. FileIO-001.txt(1219): 23:14:41.2235108","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,204,672, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1117. FileIO-001.txt(1220): 23:14:41.2630357","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 647,168, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1118. FileIO-001.txt(1221): 23:14:41.3179049","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 671,744, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1119. FileIO-001.txt(1222): 23:14:41.3474447","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll","SUCCESS","Offset: 749,568, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1120. FileIO-001.txt(1223): 23:14:41.3521489","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 356,352, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1121. FileIO-001.txt(1224): 23:14:41.3768049","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 872,448, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1122. FileIO-001.txt(1225): 23:14:41.3854875","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,313,664, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1123. FileIO-001.txt(1226): 23:14:41.4128284","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 765,952, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1124. FileIO-001.txt(1227): 23:14:41.4608840","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,235,840, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1125. FileIO-001.txt(1228): 23:14:41.4928590","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,881,856, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1126. FileIO-001.txt(1229): 23:14:41.5151138","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,808,128, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1127. FileIO-001.txt(1230): 23:14:41.5425804","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 688,128, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1128. FileIO-001.txt(1231): 23:14:41.5457177","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 249,856, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1129. FileIO-001.txt(1232): 23:14:41.5796164","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 5,644,288, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1130. FileIO-001.txt(1233): 23:14:41.5900733","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,318,400, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1131. FileIO-001.txt(1234): 23:14:41.6265349","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,530,752, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1132. FileIO-001.txt(1235): 23:14:41.6704036","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,256,320, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1133. FileIO-001.txt(1236): 23:14:41.7202192","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 282,624, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1134. FileIO-001.txt(1237): 23:14:41.7543548","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 1,568,768, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1135. FileIO-001.txt(1238): 23:14:41.7697425","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 1,413,120, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1136. FileIO-001.txt(1239): 23:14:41.7890394","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 10,739,712, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1137. FileIO-001.txt(1240): 23:14:41.8113760","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 11,030,528, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1138. FileIO-001.txt(1241): 23:14:41.8239726","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 10,612,736, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1139. FileIO-001.txt(1242): 23:14:41.8599210","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,744,896, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1140. FileIO-001.txt(1243): 23:14:41.9031726","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,981,312, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1141. FileIO-001.txt(1244): 23:14:41.9500551","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 8,179,712, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1142. FileIO-001.txt(1245): 23:14:41.9705432","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,338,880, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1143. FileIO-001.txt(1246): 23:14:41.9972491","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 10,719,232, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1144. FileIO-001.txt(1247): 23:14:42.0179615","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 4,736,000, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1145. FileIO-001.txt(1248): 23:14:42.0422721","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 828,416, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1146. FileIO-001.txt(1249): 23:14:42.0800861","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 5,484,544, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1147. FileIO-001.txt(1250): 23:14:42.1179546","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 3,036,160, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1148. FileIO-001.txt(1251): 23:14:42.1299919","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 2,985,984, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1149. FileIO-001.txt(1252): 23:14:42.1591574","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 3,146,752, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1150. FileIO-001.txt(1253): 23:14:42.1934170","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Offset: 208,896, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1151. FileIO-001.txt(1254): 23:14:42.2310349","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,424,128, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1152. FileIO-001.txt(1255): 23:14:42.2894720","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,373,184, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1153. FileIO-001.txt(1256): 23:14:42.3048074","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,116,928, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1154. FileIO-001.txt(1257): 23:14:42.3451059","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,391,360, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1155. FileIO-001.txt(1258): 23:14:42.3659627","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 787,456, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1156. FileIO-001.txt(1259): 23:14:42.3902798","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 544,768, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1157. FileIO-001.txt(1260): 23:14:42.4195991","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,311,168, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1158. FileIO-001.txt(1261): 23:14:42.4804859","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 4,895,744, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1159. FileIO-001.txt(1262): 23:14:42.5200731","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,235,712, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1160. FileIO-001.txt(1263): 23:14:42.5507552","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,456,896, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1161. FileIO-001.txt(1264): 23:14:42.6038097","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,276,672, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1162. FileIO-001.txt(1265): 23:14:42.6524664","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 795,648, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1163. FileIO-001.txt(1266): 23:14:42.7233277","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,635,328, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1164. FileIO-001.txt(1267): 23:14:42.7889852","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,257,472, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1165. FileIO-001.txt(1268): 23:14:42.8168175","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 7,966,720, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1166. FileIO-001.txt(1269): 23:14:42.8340498","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll","SUCCESS","Offset: 159,744, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1167. FileIO-001.txt(1270): 23:14:42.8565354","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,029,120, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1168. FileIO-001.txt(1271): 23:14:42.9021795","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,876,992, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1169. FileIO-001.txt(1272): 23:14:42.9436585","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,588,736, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1170. FileIO-001.txt(1273): 23:14:42.9799432","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,237,440, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1171. FileIO-001.txt(1274): 23:14:43.0335621","Adobe-Flash_WIN.exe","3952","CreateFile","C:\MyTest.txt","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1172. FileIO-001.txt(1275): 23:14:43.0336962","Adobe-Flash_WIN.exe","3952","QueryNetworkOpenInformationFile","C:\MyTest.txt","SUCCESS","CreationTime: 2013/01/30 23:00:18, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2013/01/30 23:00:20, ChangeTime: 1980/01/01 0:00:00, AllocationSize: 1601/01/01 9:00:00, EndOfFile: 1601/01/01 9:00:00, FileAttributes: A"
  1173. FileIO-001.txt(1276): 23:14:43.0337914","Adobe-Flash_WIN.exe","3952","CloseFile","C:\MyTest.txt","SUCCESS",""
  1174. FileIO-001.txt(1277): 23:14:43.0339093","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,662,976, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1175. FileIO-001.txt(1278): 23:14:43.0790176","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,990,656, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1176. FileIO-001.txt(1279): 23:14:43.1581709","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・eclient.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1177. FileIO-001.txt(1280): 23:14:43.2153620","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1178. FileIO-001.txt(1281): 23:14:43.2156687","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  1179. FileIO-001.txt(1282): 23:14:43.2159570","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\feclient.dll","SUCCESS",""
  1180. FileIO-001.txt(1283): 23:14:43.2236734","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  1181. FileIO-001.txt(1284): 23:14:43.2239852","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\feclient.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  1182. FileIO-001.txt(1285): 23:14:43.2240712","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\feclient.dll","SUCCESS","SyncType: SyncTypeOther"
  1183. FileIO-001.txt(1286): 23:14:43.2243844","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\feclient.dll","SUCCESS",""
  1184. FileIO-001.txt(1287): 23:14:43.2248450","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Offset: 18,944, Length: 1,536, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1185. FileIO-001.txt(1288): 23:14:43.2435446","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Offset: 18,432, Length: 512, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1186. FileIO-001.txt(1289): 23:14:43.2583239","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Offset: 17,408, Length: 1,024, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1187. FileIO-001.txt(1290): 23:14:43.2754065","Adobe-Flash_WIN.exe","3952","CreateFile","C:\MyTest.txt","SUCCESS","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1188. FileIO-001.txt(1291): 23:14:43.2755336","Adobe-Flash_WIN.exe","3952","CloseFile","C:\MyTest.txt","SUCCESS",""
  1189. FileIO-001.txt(1292): 23:14:43.2866942","Adobe-Flash_WIN.exe","3952","CreateFile","C:\MyTest.txt","SUCCESS","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1190. FileIO-001.txt(1293): 23:14:43.2868130","Adobe-Flash_WIN.exe","3952","CloseFile","C:\MyTest.txt","SUCCESS",""
  1191. FileIO-001.txt(1294): 23:14:43.2870094","Adobe-Flash_WIN.exe","3952","CreateFile","C:\MyTest.txt","SUCCESS","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1192. FileIO-001.txt(1295): 23:14:43.2875932","Adobe-Flash_WIN.exe","3952","DeviceIoControl","C:\MyTest.txt","INVALID PARAMETER","Control: IOCTL_MOUNTDEV_QUERY_DEVICE_NAME"
  1193. FileIO-001.txt(1296): 23:14:43.2876997","Adobe-Flash_WIN.exe","3952","CloseFile","C:\MyTest.txt","SUCCESS",""
  1194. FileIO-001.txt(1297): 23:14:43.2879036","Adobe-Flash_WIN.exe","3952","CreateFile","C:\MyTest.txt","NAME INVALID","Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: n/a"
  1195. FileIO-001.txt(1298): 23:14:43.2881939","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\system32\feclient.dll","SUCCESS","Offset: 9,216, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1196. FileIO-001.txt(1299): 23:14:43.3043901","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 851,968, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1197. FileIO-001.txt(1300): 23:14:43.3257000","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 4,014,080, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1198. FileIO-001.txt(1301): 23:14:43.3519042","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,880,064, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1199. FileIO-001.txt(1302): 23:14:43.3896895","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 5,718,016, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1200. FileIO-001.txt(1303): 23:14:43.4202115","Adobe-Flash_WIN.exe","3952","CreateFile","C:\","SUCCESS","Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened"
  1201. FileIO-001.txt(1304): 23:14:43.4202601","Adobe-Flash_WIN.exe","3952","QueryNameInformationFile","C:\","SUCCESS","Name: \"
  1202. FileIO-001.txt(1305): 23:14:43.4203054","Adobe-Flash_WIN.exe","3952","QueryInformationVolume","C:\","SUCCESS","VolumeCreationTime: 1601/01/01 9:00:00, VolumeSerialNumber: 9455-E50D, SupportsObjects: False, VolumeLabel: "
  1203. FileIO-001.txt(1306): 23:14:43.4203425","Adobe-Flash_WIN.exe","3952","QueryAttributeInformationVolume","C:\","SUCCESS","FileSystemAttributes: Case Preserved, Unicode, MaximumComponentNameLength: 255, FileSystemName: FAT32"
  1204. FileIO-001.txt(1307): 23:14:43.4203808","Adobe-Flash_WIN.exe","3952","CloseFile","C:\","SUCCESS",""
  1205. FileIO-001.txt(1308): 23:14:43.4204629","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 163,840, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1206. FileIO-001.txt(1309): 23:14:43.4586013","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 6,037,504, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1207. FileIO-001.txt(1310): 23:14:43.4799406","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,203,712, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1208. FileIO-001.txt(1311): 23:14:43.4920692","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,449,472, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1209. FileIO-001.txt(1312): 23:14:43.5292360","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,555,968, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1210. FileIO-001.txt(1313): 23:14:43.5486957","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 9,678,848, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1211. FileIO-001.txt(1314): 23:14:43.5560581","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 6,221,824, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1212. FileIO-001.txt(1315): 23:14:43.5621793","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 577,536, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1213. FileIO-001.txt(1316): 23:14:43.5798061","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 192,512, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1214. FileIO-001.txt(1317): 23:14:43.6152449","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,852,416, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1215. FileIO-001.txt(1318): 23:14:43.6564063","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 561,152, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1216. FileIO-001.txt(1319): 23:14:43.6741840","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll","SUCCESS","Offset: 741,376, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1217. FileIO-001.txt(1320): 23:14:43.7435115","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 3,321,856, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1218. FileIO-001.txt(1321): 23:14:43.8032216","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 2,728,960, Length: 20,480, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1219. FileIO-001.txt(1322): 23:14:43.8401637","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,897,472, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1220. FileIO-001.txt(1323): 23:14:43.8775953","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,491,968, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1221. FileIO-001.txt(1324): 23:14:43.8824644","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\SYSTEM32\OLE32.DLL","SUCCESS","Offset: 693,248, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1222. FileIO-001.txt(1325): 23:14:43.8964125","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,500,160, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1223. FileIO-001.txt(1326): 23:14:43.8966849","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 1,044,480, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1224. FileIO-001.txt(1327): 23:14:43.9413397","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 1,011,712, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1225. FileIO-001.txt(1328): 23:14:43.9550703","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 978,944, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1226. FileIO-001.txt(1329): 23:14:43.9580536","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1227. FileIO-001.txt(1330): 23:14:43.9582190","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  1228. FileIO-001.txt(1331): 23:14:43.9583723","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS",""
  1229. FileIO-001.txt(1332): 23:14:43.9597535","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  1230. FileIO-001.txt(1333): 23:14:43.9599195","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\winlogon.exe","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  1231. FileIO-001.txt(1334): 23:14:43.9599340","Adobe-Flash_WIN.exe","3952","QueryStandardInformationFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS","AllocationSize: 507,904, EndOfFile: 498,176, NumberOfLinks: 1, DeletePending: False, Directory: False"
  1232. FileIO-001.txt(1335): 23:14:43.9599591","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\winlogon.exe","SUCCESS","SyncType: SyncTypeOther"
  1233. FileIO-001.txt(1336): 23:14:43.9601265","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\winlogon.exe","SUCCESS",""
  1234. FileIO-001.txt(1337): 23:14:43.9634389","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昜ｺ・psp2res.dll","NAME NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1235. FileIO-001.txt(1338): 23:14:43.9639421","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1236. FileIO-001.txt(1339): 23:14:43.9653799","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  1237. FileIO-001.txt(1340): 23:14:43.9655830","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS",""
  1238. FileIO-001.txt(1341): 23:14:43.9658560","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  1239. FileIO-001.txt(1342): 23:14:43.9672969","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS","SyncType: SyncTypeCreateSection, PageProtection: PAGE_EXECUTE"
  1240. FileIO-001.txt(1343): 23:14:43.9673713","Adobe-Flash_WIN.exe","3952","CreateFileMapping","C:\WINDOWS\SYSTEM32\XPSP2RES.DLL","SUCCESS","SyncType: SyncTypeOther"
  1241. FileIO-001.txt(1344): 23:14:43.9675931","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 4,227,072, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1242. FileIO-001.txt(1345): 23:14:43.9676978","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\xpsp2res.dll","SUCCESS",""
  1243. FileIO-001.txt(1346): 23:14:43.9768026","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\SYSTEM32\OLE32.DLL","SUCCESS","Offset: 537,600, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1244. FileIO-001.txt(1347): 23:14:43.9961883","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll","SUCCESS","Offset: 3,121,152, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1245. FileIO-001.txt(1348): 23:14:44.0420048","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll","SUCCESS","Offset: 245,760, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1246. FileIO-001.txt(1349): 23:14:44.0771578","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,873,664, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1247. FileIO-001.txt(1350): 23:14:44.1173940","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,366,912, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1248. FileIO-001.txt(1351): 23:14:44.1526901","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,543,040, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1249. FileIO-001.txt(1352): 23:14:44.1897291","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 5,554,176, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1250. FileIO-001.txt(1353): 23:14:44.2305882","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll","SUCCESS","Offset: 3,289,088, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1251. FileIO-001.txt(1354): 23:14:44.2473758","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 6,352,896, Length: 28,672, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1252. FileIO-001.txt(1355): 23:14:44.2637327","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,732,608, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1253. FileIO-001.txt(1356): 23:14:44.2978789","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,426,432, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1254. FileIO-001.txt(1357): 23:14:44.3183899","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,393,664, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1255. FileIO-001.txt(1358): 23:14:44.3186151","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,286,144, Length: 16,384, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1256. FileIO-001.txt(1359): 23:14:44.3306694","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,676,288, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1257. FileIO-001.txt(1360): 23:14:44.3307135","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,483,776, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1258. FileIO-001.txt(1361): 23:14:44.3651768","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.3952.1260250","NAME NOT FOUND","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1259. FileIO-001.txt(1362): 23:14:44.3654596","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.3952.1260250","NAME NOT FOUND","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1260. FileIO-001.txt(1363): 23:14:44.3656141","Adobe-Flash_WIN.exe","3952","CreateFile","C:\Documents and Settings\%USER%\Application Data\Microsoft\CLR Security Config\v2.0.50727.42\security.config.cch.3952.1260359","PATH NOT FOUND","Desired Access: Read Attributes, Delete, Disposition: Open, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a"
  1261. FileIO-001.txt(1364): 23:14:44.3656750","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 5,554,688, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1262. FileIO-001.txt(1365): 23:14:44.3784880","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1263. FileIO-001.txt(1366): 23:14:44.3788465","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  1264. FileIO-001.txt(1367): 23:14:44.3791820","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  1265. FileIO-001.txt(1368): 23:14:44.3800458","Adobe-Flash_WIN.exe","3952","CreateFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened"
  1266. FileIO-001.txt(1369): 23:14:44.3803911","Adobe-Flash_WIN.exe","3952","QueryBasicInformationFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS","CreationTime: 2008/08/20 12:00:00, LastAccessTime: 2013/01/30 0:00:00, LastWriteTime: 2008/08/20 12:00:00, ChangeTime: 1601/01/01 9:00:00, FileAttributes: A"
  1267. FileIO-001.txt(1370): 23:14:44.3807244","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\system32\MSCTF.dll","SUCCESS",""
  1268. FileIO-001.txt(1371): 23:14:44.3831026","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,291,264, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1269. FileIO-001.txt(1372): 23:14:44.4056314","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,102,848, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1270. FileIO-001.txt(1373): 23:14:44.4316012","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,934,336, Length: 8,192, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1271. FileIO-001.txt(1374): 23:14:44.4481388","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 3,322,880, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1272. FileIO-001.txt(1375): 23:14:44.4830678","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 3,290,112, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1273. FileIO-001.txt(1376): 23:14:44.5096838","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 3,372,032, Length: 32,768, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1274. FileIO-001.txt(1377): 23:14:44.5296248","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\pubpol1.dat","SUCCESS",""
  1275. FileIO-001.txt(1378): 23:14:44.5298467","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll","SUCCESS","Offset: 1,278,976, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1276. FileIO-001.txt(1379): 23:14:44.5541277","Adobe-Flash_WIN.exe","3952","ReadFile","C:\WINDOWS\WINSXS\X86_MICROSOFT.VC80.CRT_1FC8B3B9A1E18E3B_8.0.50727.1433_X-WW_5CF844D2\MSVCR80.DLL","SUCCESS","Offset: 598,016, Length: 4,096, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
  1277. FileIO-001.txt(1380): 23:14:44.6061904","Adobe-Flash_WIN.exe","3952","CloseFile","C:\Documents and Settings\%USER%\郢昴・縺帷ｹｧ・ｯ郢晏現繝｣郢昴・,"SUCCESS",""
  1278. FileIO-001.txt(1381): 23:14:44.6064279","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  1279. FileIO-001.txt(1382): 23:14:44.6066553","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
  1280. FileIO-001.txt(1383): 23:14:44.6069931","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index1d.dat","SUCCESS",""
  1281. FileIO-001.txt(1384): 23:14:44.6071788","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2","SUCCESS",""
  1282. FileIO-001.txt(1385): 23:14:44.6074632","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll","SUCCESS",""
  1283. FileIO-001.txt(1386): 23:14:44.6078521","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp","SUCCESS",""
  1284. FileIO-001.txt(1387): 23:14:44.6082385","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp","SUCCESS",""
  1285. FileIO-001.txt(1388): 23:14:44.6086293","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp","SUCCESS",""
  1286. FileIO-001.txt(1389): 23:14:44.6088151","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c","SUCCESS",""
  1287. FileIO-001.txt(1390): 23:14:44.6090056","Adobe-Flash_WIN.exe","3952","CloseFile","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83","SUCCESS",""
  1288. FileIO-001.txt(1623): 23:15:44.2395240","Adobe-Flash_WIN.exe","2224","CreateFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened"
  1289. FileIO-001.txt(5639): 23:18:02.3952315","Adobe-Flash_WIN3.exe","4068","ReadFile","C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll","SUCCESS","Offset: 1,716,224, Length: 12,288, I/O Flags: Non-cached, Paging I/O, Synchronous Paging I/O"
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!