procmon: why there are so many WriteFile to directories?

hweiss 0 Reputation points
2023-04-04T20:13:17.7633333+00:00

With procmon I see many WriteFile operations to directories from the system process. What's the reason for this? Background: this occurs while reading many files on the volume (performance test). But I expect only ReadFile operations and no WriteFile. The volume is a Tiered StorageSpace Volume (1 SDD + 1 HDD) on Windows 11 22H2. Could this have an influence? Or this a bug in procmon showing wrong information? In the past I had already had such a suspicion when the system is under heavy load. I have a PML file with all events from procmon. Regards, Hermann

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.