The template parameter is related to attributes, not contents. AV would still have to scan the data that is written to the file. -- [in, optional] hTemplateFi

The template parameter is related to attributes, not contents. AV would still have to scan the data that is written to the file. -- [in, optional] hTemplateFile A valid handle to a template file with the GENERIC_READ access right. The template file supplies file attributes and extended attributes for the file that is being created.