通过拦截IRP_MJ_CREATE,获得在该irp上下文中的进程，并md5该进程后输出。 可以控制进程是否可以访问某个文件夹，或者打开某个文件。-By intercepting IRP_MJ_CREATE, get the process in the context of the IRP, and MD5 the process after the output. Can control the process of access to a folder, or open a file