Attachment 135884 Details for Bug 109241 – ProcMon results

ProcMon results

ProcMon_for_bug109241_modified.txt (text/plain), 26.18 KB, created by kiloran.public+bugzilla on 2017-08-30 19:38:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: kiloran.public+bugzilla

Created: 2017-08-30 19:38:56 UTC

Size: 26.18 KB

patch

obsolete

>Process monitor results from first occurrence of _ssl.pyd to last occurrence of LIBEAY32.DLL
>LibreOffice 5.3.4.2 on Windows 7 with _ssl.pyd replaced by _ssl.pyd from LibreOffice Portable 4.0.2.2
>
>
>
>
>16:55:04.6523965	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: None, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6524257	soffice.bin	6796	QueryInformationVolume	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		LibreOffice
>16:55:04.6524380	soffice.bin	6796	QueryAllInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	BUFFER OVERFLOW	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A, AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xc0000000813e1, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	LibreOffice
>16:55:04.6524520	soffice.bin	6796	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			LibreOffice
>16:55:04.6526548	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6526790	soffice.bin	6796	QueryBasicInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A	Read Metadata	LibreOffice
>16:55:04.6526901	soffice.bin	6796	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			LibreOffice
>16:55:04.6527791	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6528214	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	FILE LOCKED WITH ONLY READERS	SyncType: SyncTypeCreateSection, PageProtection: 		LibreOffice
>16:55:04.6528346	soffice.bin	6796	QueryStandardInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False	Read Metadata	LibreOffice
>16:55:04.6528571	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	SyncType: SyncTypeOther		LibreOffice
>16:55:04.6529048	soffice.bin	6796	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			LibreOffice
>16:55:04.6530751	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6530973	soffice.bin	6796	QueryBasicInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A	Read Metadata	LibreOffice
>16:55:04.6531084	soffice.bin	6796	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			LibreOffice
>16:55:04.6531925	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6532295	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	FILE LOCKED WITH ONLY READERS	SyncType: SyncTypeCreateSection, PageProtection: 		LibreOffice
>16:55:04.6533317	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	SyncType: SyncTypeOther		LibreOffice
>16:55:04.6537595	soffice.bin	6796	Load Image	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Image Base: 0x6700000, Image Size: 0xe000		LibreOffice
>16:55:04.6537619	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6537968	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6538120	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	BUFFER OVERFLOW	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A, AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xc0000000813e1, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6538264	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6538375	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	BUFFER OVERFLOW	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A, AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xc0000000813e1, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6538535	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6538633	soffice.bin	6796	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			LibreOffice
>16:55:04.6538818	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			Antimalware Service Executable
>16:55:04.6540197	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6540595	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6540809	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	BUFFER OVERFLOW	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A, AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xc0000000813e1, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6541027	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6541219	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	BUFFER OVERFLOW	CreationTime: 24/08/2017 10:16:39, LastAccessTime: 24/08/2017 10:16:39, LastWriteTime: 26/03/2013 10:52:54, ChangeTime: 30/08/2017 16:54:14, FileAttributes: A, AllocationSize: 49,152, EndOfFile: 47,616, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0xc0000000813e1, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6541310	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6541458	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6541745	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			Antimalware Service Executable
>16:55:04.6543186	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6543592	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6543839	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_ssl.pyd	SUCCESS			Antimalware Service Executable
>16:55:04.6545087	soffice.bin	6796	CreateFile	C:\Windows\SysWOW64\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6550124	soffice.bin	6796	CreateFile	C:\Windows\system\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6552110	soffice.bin	6796	CreateFile	C:\Windows\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6557410	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6563905	soffice.bin	6796	CreateFile	C:\ProgramData\Oracle\Java\javapath\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6570596	soffice.bin	6796	CreateFile	C:\Program Files (x86)\PC Connectivity Solution\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6572681	MsMpEng.exe	1180	CreateFile	C:\Windows\System32\rpcss.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6574939	MsMpEng.exe	1180	QueryInformationVolume	C:\Windows\System32\rpcss.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6575194	MsMpEng.exe	1180	QueryAllInformationFile	C:\Windows\System32\rpcss.dll	BUFFER OVERFLOW	CreationTime: 13/05/2017 09:49:32, LastAccessTime: 13/05/2017 09:49:32, LastWriteTime: 17/04/2017 16:37:31, ChangeTime: 13/05/2017 10:07:20, FileAttributes: A, AllocationSize: 512,000, EndOfFile: 512,000, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x10000000769f2, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6575444	MsMpEng.exe	1180	QueryInformationVolume	C:\Windows\System32\rpcss.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6575645	MsMpEng.exe	1180	QueryAllInformationFile	C:\Windows\System32\rpcss.dll	BUFFER OVERFLOW	CreationTime: 13/05/2017 09:49:32, LastAccessTime: 13/05/2017 09:49:32, LastWriteTime: 17/04/2017 16:37:31, ChangeTime: 13/05/2017 10:07:20, FileAttributes: A, AllocationSize: 512,000, EndOfFile: 512,000, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x10000000769f2, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6575904	MsMpEng.exe	1180	FileSystemControl	C:\Windows\System32\rpcss.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6576298	MsMpEng.exe	1180	CloseFile	C:\Windows\System32\rpcss.dll	SUCCESS			Antimalware Service Executable
>16:55:04.6578716	MsMpEng.exe	1180	CreateFile	C:\Windows\System32\rpcss.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6580120	soffice.bin	6796	CreateFile	C:\Perl64\site\bin\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6581269	MsMpEng.exe	1180	QueryInformationVolume	C:\Windows\System32\rpcss.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6581405	MsMpEng.exe	1180	QueryAllInformationFile	C:\Windows\System32\rpcss.dll	BUFFER OVERFLOW	CreationTime: 13/05/2017 09:49:32, LastAccessTime: 13/05/2017 09:49:32, LastWriteTime: 17/04/2017 16:37:31, ChangeTime: 13/05/2017 10:07:20, FileAttributes: A, AllocationSize: 512,000, EndOfFile: 512,000, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x10000000769f2, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6581549	MsMpEng.exe	1180	QueryInformationVolume	C:\Windows\System32\rpcss.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6581651	MsMpEng.exe	1180	QueryAllInformationFile	C:\Windows\System32\rpcss.dll	BUFFER OVERFLOW	CreationTime: 13/05/2017 09:49:32, LastAccessTime: 13/05/2017 09:49:32, LastWriteTime: 17/04/2017 16:37:31, ChangeTime: 13/05/2017 10:07:20, FileAttributes: A, AllocationSize: 512,000, EndOfFile: 512,000, NumberOfLinks: 2, DeletePending: False, Directory: False, IndexNumber: 0x10000000769f2, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6581795	MsMpEng.exe	1180	FileSystemControl	C:\Windows\System32\rpcss.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6582000	MsMpEng.exe	1180	CloseFile	C:\Windows\System32\rpcss.dll	SUCCESS			Antimalware Service Executable
>16:55:04.6584529	MsMpEng.exe	1180	CreateFile	C:\Windows\System32\rpcss.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6587887	MsMpEng.exe	1180	FileSystemControl	C:\Windows\System32\rpcss.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6587953	soffice.bin	6796	CreateFile	C:\Perl64\bin\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6588154	MsMpEng.exe	1180	CloseFile	C:\Windows\System32\rpcss.dll	SUCCESS			Antimalware Service Executable
>16:55:04.6594463	soffice.bin	6796	CreateFile	C:\Program Files\Common Files\Microsoft Shared\Windows Live\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6600334	soffice.bin	6796	CreateFile	C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\LIBEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6607756	soffice.bin	6796	CreateFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6608992	soffice.bin	6796	QueryBasicInformationFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	CreationTime: 06/03/2012 17:33:14, LastAccessTime: 28/05/2012 07:13:13, LastWriteTime: 06/03/2012 17:33:14, ChangeTime: 28/05/2012 07:13:13, FileAttributes: A	Read Metadata	LibreOffice
>16:55:04.6609143	soffice.bin	6796	CloseFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS			LibreOffice
>16:55:04.6612350	soffice.bin	6796	CreateFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Desired Access: Read Data/List Directory, Execute/Traverse, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a, OpenResult: Opened		LibreOffice
>16:55:04.6612834	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	FILE LOCKED WITH ONLY READERS	SyncType: SyncTypeCreateSection, PageProtection: 		LibreOffice
>16:55:04.6613983	soffice.bin	6796	CreateFileMapping	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	SyncType: SyncTypeOther		LibreOffice
>16:55:04.6619246	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6619985	soffice.bin	6796	Load Image	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Image Base: 0x6b00000, Image Size: 0x12b000		LibreOffice
>16:55:04.6620063	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6620301	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	BUFFER OVERFLOW	CreationTime: 06/03/2012 17:33:14, LastAccessTime: 28/05/2012 07:13:13, LastWriteTime: 06/03/2012 17:33:14, ChangeTime: 28/05/2012 07:13:13, FileAttributes: A, AllocationSize: 1,200,128, EndOfFile: 1,197,056, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x5000000010e8d, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6620548	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6620749	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	BUFFER OVERFLOW	CreationTime: 06/03/2012 17:33:14, LastAccessTime: 28/05/2012 07:13:13, LastWriteTime: 06/03/2012 17:33:14, ChangeTime: 28/05/2012 07:13:13, FileAttributes: A, AllocationSize: 1,200,128, EndOfFile: 1,197,056, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x5000000010e8d, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6621012	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6621418	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS			Antimalware Service Executable
>16:55:04.6626139	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6626607	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6626841	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	BUFFER OVERFLOW	CreationTime: 06/03/2012 17:33:14, LastAccessTime: 28/05/2012 07:13:13, LastWriteTime: 06/03/2012 17:33:14, ChangeTime: 28/05/2012 07:13:13, FileAttributes: A, AllocationSize: 1,200,128, EndOfFile: 1,197,056, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x5000000010e8d, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6627063	MsMpEng.exe	1180	QueryInformationVolume	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	VolumeCreationTime: 28/05/2012 21:45:08, VolumeSerialNumber: 54C5-727D, SupportsObjects: True, VolumeLabel: 		Antimalware Service Executable
>16:55:04.6627260	MsMpEng.exe	1180	QueryAllInformationFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	BUFFER OVERFLOW	CreationTime: 06/03/2012 17:33:14, LastAccessTime: 28/05/2012 07:13:13, LastWriteTime: 06/03/2012 17:33:14, ChangeTime: 28/05/2012 07:13:13, FileAttributes: A, AllocationSize: 1,200,128, EndOfFile: 1,197,056, NumberOfLinks: 1, DeletePending: False, Directory: False, IndexNumber: 0x5000000010e8d, EaSize: 0, Access: Read Attributes, Synchronize, Position: 0, Mode: Synchronous IO Non-Alert, AlignmentRequirement: Long	Read Metadata	Antimalware Service Executable
>16:55:04.6627473	soffice.bin	6796	CloseFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS			LibreOffice
>16:55:04.6627526	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6627863	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS			Antimalware Service Executable
>16:55:04.6632448	soffice.bin	6796	CreateFile	C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\SSLEAY32.dll	NAME NOT FOUND	Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a		LibreOffice
>16:55:04.6632502	MsMpEng.exe	1180	CreateFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Open For Backup, Open No Recall, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened		Antimalware Service Executable
>16:55:04.6632949	MsMpEng.exe	1180	FileSystemControl	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS	Control: FSCTL_READ_FILE_USN_DATA	Read Metadata	Antimalware Service Executable
>16:55:04.6633228	MsMpEng.exe	1180	CloseFile	C:\Program Files (x86)\Intel\iCLS Client\libeay32.dll	SUCCESS			Antimalware Service Executable

Actions: View

Attachments on bug 109241: 135759 | 135882 | 135883 | 135884