Sample viewer

vx.netlux.org/Trojan.DOS.Shock.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:51:04.071547239Z 53 PC: 1319a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:04.073222797Z 53 PC: 1319a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:04.076220178Z 53 PC: 1319a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:04.077962711Z 53 PC: 1319a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:04.079621467Z 53 PC: 1319a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:04.082700331Z 53 PC: 1319a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:04.084172226Z 53 PC: 1319a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:04.086652746Z 53 PC: 1319a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:04.090266215Z 53 PC: 1319a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:04.094191449Z 53 PC: 1319a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:04.095878929Z 53 PC: 1319a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:04.098177036Z 53 PC: 1319a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:04.10068097Z 53 PC: 1319a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:04.102312104Z 53 PC: 1319a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:04.10489145Z 53 PC: 1319a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:04.10731912Z 53 PC: 1319a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:04.109148036Z 53 PC: 1319a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:04.110913773Z 53 PC: 1319a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:04.117360224Z 53 PC: 1319a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:04.119062321Z 37 PC: 131af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:04.12057352Z 37 PC: 131b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:04.123643828Z 37 PC: 131bf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:04.127401167Z 37 PC: 131c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:04.129520218Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.472968255Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.476510349Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.479945953Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.484006631Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.488117303Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.491202329Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.494518489Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.496854477Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.499311132Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.502175183Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.504800645Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.507197407Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.509904573Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.512512873Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.514823474Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.517249211Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.520055072Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.52236398Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.52463169Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.528055652Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.530795599Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.533729411Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.537695202Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.541676781Z 60 PC: 13860 | Create or truncate file
2018-12-17T22:51:04.553060998Z 62 PC: 138b0 | Close file
2018-12-17T22:51:04.556286387Z 65 PC: 139a9 | Delete file (Filename = 'C:\�')
2018-12-17T22:51:04.567777474Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:04.569454294Z 78 PC: 13083 | Find first file
2018-12-17T22:51:04.577206227Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.588233343Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.610974805Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.616031665Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.628983617Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.639868015Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.641392399Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.646138244Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.659050571Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.671683684Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.675669451Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.679969991Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.688339413Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.691041259Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.694850706Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.70156027Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.713480233Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.716569146Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.720758206Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.729727445Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.731121785Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.734469975Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.735926902Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.740470197Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.751316303Z 65 PC: 139a9 | Delete file (Filename = 'C:\COMMAND.COM')
2018-12-17T22:51:04.763130728Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.765951206Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.769481818Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.77127663Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.776419041Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.78796956Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.806466228Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.810265817Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.818276575Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.827661676Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.829141005Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.835309143Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.846284291Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.859184536Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.862951653Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.867100356Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.875234237Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.877328571Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.880879121Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.891274751Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:04.904379239Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:04.90758408Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:04.911884719Z 62 PC: 135d2 | Close file
2018-12-17T22:51:04.92067373Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.923094658Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.926748763Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:04.928338139Z 78 PC: 13083 | Find first file
2018-12-17T22:51:04.935930131Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.93794174Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.94142804Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.944391957Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.949315677Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:04.951198845Z 78 PC: 13083 | Find first file
2018-12-17T22:51:04.962654075Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.964633083Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.968924324Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:04.970479927Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:04.975538239Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:04.988642758Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\ATTRIB.EXE')
2018-12-17T22:51:05.003411242Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.006238463Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.010550804Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.022190791Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\CHKDSK.EXE')
2018-12-17T22:51:05.034959559Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.036583209Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.040886283Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.053257313Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.066923717Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.06966631Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.075200506Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.08410812Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.08557186Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.090539392Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.103290697Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.116373805Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.119472496Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.124938805Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.13362329Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.135135571Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.14062309Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.152517245Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\DEBUG.EXE')
2018-12-17T22:51:05.165878185Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.168285036Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.173052342Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.184743725Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.198448301Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.201215951Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.206165629Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.21524168Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.217137311Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.221362688Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.234486543Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.248517932Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.251075287Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.256607139Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.264710512Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.266253922Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.271377437Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.28327642Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\EDIT.COM')
2018-12-17T22:51:05.29541824Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.297865508Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.303357906Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.314953088Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\EXPAND.EXE')
2018-12-17T22:51:05.331139867Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.333005963Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.336168304Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.344710592Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\FDISK.EXE')
2018-12-17T22:51:05.353796139Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.354861631Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.358351557Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.366920515Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\FORMAT.COM')
2018-12-17T22:51:05.376045898Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.377622029Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.382995253Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.391673917Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\KEYB.COM')
2018-12-17T22:51:05.402549568Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.404900505Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.408746009Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.420064502Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.434236947Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.437116797Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.441369686Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.450843404Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.452420797Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.456870396Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.469096324Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\MEM.EXE')
2018-12-17T22:51:05.481167451Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.482750795Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.487699211Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.502234508Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\NLSFUNC.EXE')
2018-12-17T22:51:05.517078564Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.519179822Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.523040184Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.534673909Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.549528835Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.552466324Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.556863084Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.566330639Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.568207245Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.57268122Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.584577007Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.598961741Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.602018543Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.606542011Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.615626998Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.617393847Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.62196257Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.634638143Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\QBASIC.EXE')
2018-12-17T22:51:05.650034056Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.651770468Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.657277183Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.669523118Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\REPLACE.EXE')
2018-12-17T22:51:05.68158625Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.684249112Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.689180838Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.700736567Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\RESTORE.EXE')
2018-12-17T22:51:05.713515903Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.715724272Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.720272968Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.733084546Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\SCANDISK.EXE')
2018-12-17T22:51:05.750026072Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.751588377Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.75739746Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.770154486Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.784145329Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.787118855Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.792349432Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.800680572Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.802200788Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.808975986Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.820327732Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\SETUP.EXE')
2018-12-17T22:51:05.832521018Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.835259062Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.839499378Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.851143362Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\SYS.COM')
2018-12-17T22:51:05.863545812Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.866828779Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.871332129Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.884461855Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\XCOPY.EXE')
2018-12-17T22:51:05.896508195Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.898060461Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.903248508Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.915546591Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\DEFRAG.EXE')
2018-12-17T22:51:05.927527589Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.929519661Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.933410881Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.944586045Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:05.958446053Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:05.960999159Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:05.965312903Z 62 PC: 135d2 | Close file
2018-12-17T22:51:05.97403627Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:05.975289244Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:05.979321229Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:05.991435377Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.005102562Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.007900288Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.013156943Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.021479759Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.022878366Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.027654608Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.039849939Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.053465197Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.056366537Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.061415913Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.069788031Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.071572133Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.076387719Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.088113508Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.101266487Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.10504253Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.109266105Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.118058182Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.120226936Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.127087815Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.138809475Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\EMM386.EXE')
2018-12-17T22:51:06.150947618Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.152208187Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.1561864Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.168486717Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.181338591Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.183787832Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.188793376Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.196858297Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.199001453Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.203270873Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.215164787Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.22801618Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.231282576Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.23554835Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.244708388Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.246305719Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.250535716Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.262126511Z 65 PC: 139a9 | Delete file (Filename = 'C:\DOS\MSCDEX.EXE')
2018-12-17T22:51:06.274531444Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.275972642Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.28040605Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.292715455Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.3064783Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.309526636Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.329676501Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.337853882Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.3400989Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.345107109Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:06.346532496Z 78 PC: 13083 | Find first file
2018-12-17T22:51:06.354188158Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.355941883Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.359868019Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.362516804Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.366250859Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.367723817Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.372467709Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.374069357Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.377900444Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.380718047Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.384519158Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.385783935Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.391051901Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.392633171Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.396508331Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.398794787Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.402364032Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.403727032Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.408309501Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.409701456Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.413123545Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.415574599Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.419570366Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.421286119Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.426076709Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.4276476Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.431435806Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.434128465Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.438231764Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.439716122Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.444074449Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.445684183Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.449342496Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.452060963Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.45540768Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.45665328Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.46150258Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:06.462779779Z 78 PC: 13083 | Find first file
2018-12-17T22:51:06.472764457Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.475265616Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.478688566Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.480012754Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.484329663Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.485821826Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.49010337Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.502361578Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.516196679Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.519267909Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.524548459Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.532788208Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.534575746Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.539750938Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.552592352Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SETUP.EXE')
2018-12-17T22:51:06.568213138Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.569611484Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.575078846Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.587289625Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.601073079Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.603624352Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.608521141Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.617048461Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.61832592Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.623299163Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.635018178Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.648630911Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.652205186Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.656629408Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.664931874Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.666584659Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.669575569Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.679579482Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.694201151Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.697076332Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.701379646Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.709997987Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.711411412Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.715303834Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.727140851Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.740352491Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.743045159Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.747253275Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.755316612Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.75690717Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.761072456Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.772709777Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WINHELP.EXE')
2018-12-17T22:51:06.785924703Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.787200851Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.791651923Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.801421506Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WIN.COM')
2018-12-17T22:51:06.811074109Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.812095768Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.816492669Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.82521795Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.834680506Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.837723763Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.844028027Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.854824429Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.85740651Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.861506592Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.872753401Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:06.885643166Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:06.888090092Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:06.892074928Z 62 PC: 135d2 | Close file
2018-12-17T22:51:06.900394167Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.901506957Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.9056179Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.917175182Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\MSD.EXE')
2018-12-17T22:51:06.929325267Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.931683467Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.935979398Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.948025448Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PACKAGER.EXE')
2018-12-17T22:51:06.960318792Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.961564642Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.965780312Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:06.978017652Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PBRUSH.EXE')
2018-12-17T22:51:06.991048521Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:06.992471184Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:06.997401335Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.009025593Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SOL.EXE')
2018-12-17T22:51:07.02097441Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.023492841Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.027511711Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.03909921Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\TERMINAL.EXE')
2018-12-17T22:51:07.052304758Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.053903381Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.058050231Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.069553992Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WINFILE.EXE')
2018-12-17T22:51:07.082895886Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.085084327Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.089486378Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.1009803Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.11451715Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.116977232Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.120783232Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.13326455Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.135204233Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.13981767Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.152927188Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WINTUTOR.EXE')
2018-12-17T22:51:07.165121426Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.166828052Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.17183024Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.184245473Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WRITE.EXE')
2018-12-17T22:51:07.196865862Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.198108416Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.203361033Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.218030231Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CALC.EXE')
2018-12-17T22:51:07.231875731Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.235613152Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.240557411Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.252982102Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.265625554Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.268624338Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.273285053Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.282911117Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.284671364Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.28881637Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.300426562Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CALENDAR.EXE')
2018-12-17T22:51:07.312161788Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.313428557Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.31785364Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.329993466Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.34289875Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.345893817Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.350292671Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.359734107Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.362015373Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.366603593Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.382769261Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.395736422Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.398266364Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.405197977Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.416161141Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.417396602Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.422892818Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.435266413Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CARDFILE.EXE')
2018-12-17T22:51:07.44726844Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.449585473Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.453979337Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.465825231Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.483836888Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.48667513Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.491463085Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.500563782Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.502039955Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.507988179Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.520468715Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CHARMAP.EXE')
2018-12-17T22:51:07.533192117Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.535609198Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.539741982Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.551446169Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.566211608Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.568684032Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.572507395Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.580339619Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.581342994Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.585609269Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.596390552Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CLIPBRD.EXE')
2018-12-17T22:51:07.608032192Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.609480553Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.61401919Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.625277821Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CONTROL.EXE')
2018-12-17T22:51:07.637789605Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.6391229Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.643518017Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.657961791Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.6719024Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.674839147Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.680180291Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.688846561Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.690883878Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.696288231Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.709103286Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\DRWATSON.EXE')
2018-12-17T22:51:07.722201151Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.724922293Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.729140969Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.741792656Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\EMM386.EXE')
2018-12-17T22:51:07.754470774Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.755781285Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.76109625Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.771983533Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\EXPAND.EXE')
2018-12-17T22:51:07.781418297Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.783050333Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.78597083Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.794981127Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.810603876Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.813808967Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.817833687Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.828256598Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.829474105Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.834241662Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.847547228Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\MORICONS.DLL')
2018-12-17T22:51:07.861985322Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.865015283Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.870139039Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.882841572Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\MPLAYER.EXE')
2018-12-17T22:51:07.897333136Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.898807335Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.90295659Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.914445363Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:07.927445335Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:07.930175443Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:07.934665319Z 62 PC: 135d2 | Close file
2018-12-17T22:51:07.942726482Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.944948817Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.948969651Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.960246476Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\NOTEPAD.EXE')
2018-12-17T22:51:07.972464348Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:07.973749332Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:07.978736431Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:07.991520337Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.007611646Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.012350078Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.016621673Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.024719705Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.026772392Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.031169232Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.042541877Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.055523484Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.058230109Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.064081521Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.072546764Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.073643815Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.079072623Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.090117152Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PIFEDIT.EXE')
2018-12-17T22:51:08.101677279Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.10386043Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.107770535Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.120320311Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.133067048Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.135503374Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.14114337Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.146986136Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.147966368Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.151187288Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.159547975Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.170472608Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.172736161Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.175872582Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.182771863Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.183819031Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.187096598Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.195560078Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PRINTMAN.EXE')
2018-12-17T22:51:08.204413179Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.206088807Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.209084074Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.438806983Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.551529785Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.55466203Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.559186609Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.567283891Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.568418963Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.573238417Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.585007346Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PROGMAN.EXE')
2018-12-17T22:51:08.596680165Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.598240045Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.602111218Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.614876759Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.62776423Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.630642326Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.635821336Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.643713692Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.645880343Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.651339528Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.663834231Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.677911446Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.680561886Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.684636921Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.694204115Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.695842172Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.700107234Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.712955411Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\RECORDER.EXE')
2018-12-17T22:51:08.725362399Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.727600833Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.731850156Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.747655418Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.76101763Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.763796792Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.768222726Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.776953207Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.778628765Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.783553747Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.793208525Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\REGEDIT.EXE')
2018-12-17T22:51:08.802433625Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.804423202Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.807602585Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.816620116Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.827732952Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.830538312Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.835139116Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.843330935Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.844746073Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.849680985Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.860996932Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.873742817Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.877173121Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.881642027Z 62 PC: 135d2 | Close file
2018-12-17T22:51:08.890482494Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.892095204Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.898324777Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.910804121Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SMARTDRV.EXE')
2018-12-17T22:51:08.925040776Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.92815691Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.933544742Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.945321014Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SOUNDREC.EXE')
2018-12-17T22:51:08.958698024Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:08.96030324Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:08.964170725Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:08.97580917Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:08.991020375Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:08.994187425Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:08.998803226Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.007415215Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.011281478Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.015457974Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.028062283Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.042379369Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.044916455Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.049946144Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.058621321Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.060812227Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.065091596Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.076924466Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.091354103Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.093852807Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.09810192Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.107722613Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.108938337Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.113409486Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.126090599Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.139578157Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.143518319Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.148406322Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.156820519Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.159203094Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.163307555Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.176399419Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WINMINE.EXE')
2018-12-17T22:51:09.188721217Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.191420959Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.199414997Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.214426488Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.235109152Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.23873263Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.243494535Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.25277537Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.254137469Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.258139948Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.270466825Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.283506612Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.287269391Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.291967386Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.29987937Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.302196172Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.306764294Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.318626148Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.329104042Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.331155866Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.334944032Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.340924598Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.342062476Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.34617997Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.354745171Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.364873428Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.366931234Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.369958231Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.376112362Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.377242234Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.380933198Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.389657768Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.401672088Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.405252254Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.409501677Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.419157226Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.420415219Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.42446121Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.437909714Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.450818966Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.45338709Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.457860184Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.465923551Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.468750913Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.473138285Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.485474731Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.499582604Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.502379238Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.507793498Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.516483674Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.517710359Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.522716132Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.534712379Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.547512966Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.550410279Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.554699336Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.563400572Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.56485271Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.569307349Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.582012847Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.595033528Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.599007374Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.603095584Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.611183307Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.613437432Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.619033565Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.631809747Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\CLOCK.EXE')
2018-12-17T22:51:09.644180566Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.645942356Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.651167843Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.662902738Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.676744682Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.679926709Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.684097775Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.693317495Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.694731682Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.698867852Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.711362524Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.724749333Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.728553099Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.732803183Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.740779798Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.743170549Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.74743972Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.758985529Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.771987445Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.774592158Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.779437771Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.787548057Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.78896018Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.794085699Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.806528394Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.820337436Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.823642595Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.82820719Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.837315501Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.838913403Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.844392435Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.858130955Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.874392954Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.878487437Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.882714588Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.89115305Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.893029526Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.897500775Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.910207877Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.923020677Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.925460521Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.930136384Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.938547676Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.941194739Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.945744285Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:09.958237355Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:09.972765067Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:09.975751397Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:09.981376274Z 62 PC: 135d2 | Close file
2018-12-17T22:51:09.990070597Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:09.992759058Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:09.998132963Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.010185215Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\PBRUSH.DLL')
2018-12-17T22:51:10.022008917Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.024241341Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.028621249Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.041752457Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.055159915Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.058182613Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.063549254Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.071752345Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.073603893Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.078885776Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.091462783Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\RECORDER.DLL')
2018-12-17T22:51:10.10442293Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.105952734Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.111067573Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.1231707Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.136802418Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.140630089Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.144721716Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.154381873Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.155711952Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.160987222Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.174580348Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.188795934Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.191904413Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.197197537Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.205722292Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.208204835Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.21336573Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.225393165Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.239437078Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.24229676Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.247936666Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.256268428Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.257707591Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.263153252Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.2755073Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.290057975Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.293319512Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.297671418Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.307159232Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.308670581Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.313828791Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.329317127Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.342023077Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.345776047Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.349667268Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.358067117Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.359360397Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.363390207Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.376876643Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.390277247Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.39298807Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.398771996Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.407066898Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.409618272Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.414299816Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.426020165Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.440948128Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.44371191Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.448908572Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.457421726Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.458898009Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.464367093Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.47614033Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.489839275Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.492752858Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.49723554Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.506766575Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.508296399Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.51511582Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.529857033Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.54281751Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.546100839Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.549173891Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.555889127Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.557106815Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.560157205Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.56965684Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\TASKMAN.EXE')
2018-12-17T22:51:10.57975441Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.582251361Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.586451Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.598441716Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.611636013Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.614107977Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.619276988Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.627265755Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.629693405Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.634281465Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.645820081Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.660461758Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.663378587Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.668841379Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.677493343Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.679050348Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.685376492Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.69976371Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.714543205Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.718479159Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.722774669Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.731471436Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.734322172Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.740385262Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.751773536Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\WINVER.EXE')
2018-12-17T22:51:10.76345967Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.765918379Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.770809798Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.784001911Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.797121427Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.799628447Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.804723989Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.812642835Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.815029489Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.818719561Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.827205974Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.837215638Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.839198142Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.842960501Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.851646397Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.853322466Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.858192746Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.8700765Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.883561373Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.885756187Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.891190055Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.89752211Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.898886052Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.902891377Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.904023263Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.907916827Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.917340671Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.928678641Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.931534506Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.934999515Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.94398757Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.945343147Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.948479529Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:10.957511015Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:10.966887921Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:10.970403655Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:10.974761803Z 62 PC: 135d2 | Close file
2018-12-17T22:51:10.983312165Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:10.984812534Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:10.989038273Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.002091464Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.014814916Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.017983319Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.022040842Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.029992359Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.031626819Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.035412752Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.048118671Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.062199533Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.065006567Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.070120093Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.078572522Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.081134736Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.085218868Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.098253084Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.111930669Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.114530573Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.119343244Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.127221223Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.129371814Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.13542758Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.148496612Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.162556805Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.16513063Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.170068035Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.177979087Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.180104049Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.184349294Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.196113695Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.209700199Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.212136145Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.216920263Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.226542479Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.227793459Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.232334029Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.244378726Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.258512257Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.261305454Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.265894456Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.275200858Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.27647952Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.281148001Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.292864842Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.306454021Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.309126822Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.313273041Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.322903783Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.324383654Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.328488074Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.340392778Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.354167906Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.35769879Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.361787731Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.3707302Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.372201915Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.376456047Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.389241335Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.401952084Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.40546883Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.409621972Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.417198286Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.419213131Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.422883145Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:11.425004199Z 78 PC: 13083 | Find first file
2018-12-17T22:51:11.432138442Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.433603234Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.437804035Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.438937455Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.444243081Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:11.445503649Z 78 PC: 13083 | Find first file
2018-12-17T22:51:11.455897606Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.456987433Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.460179109Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.461762924Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.465644577Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.478350977Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.491881756Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.494719688Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.500074417Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.508297264Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.510678678Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.515541193Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.528430867Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\GDI.EXE')
2018-12-17T22:51:11.542954792Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.544309707Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.549512832Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.561980524Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.57617543Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.579564427Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.58396842Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.592835458Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.594476721Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.599833985Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.611407317Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\USER.EXE')
2018-12-17T22:51:11.625616019Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.627286908Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.631478372Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.644557543Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.657176098Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.660549516Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.665267449Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.673744383Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.675904121Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.679851937Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.691957138Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.704553231Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.70767735Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.712468922Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.720773343Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.723511266Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.728202198Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.740406105Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.753591615Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.757010708Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.762518605Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.771050714Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.773138125Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.777760338Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.790299164Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.803738281Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.806960343Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.811577497Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.820540585Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.822091799Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.826116179Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.837858248Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\DOSX.EXE')
2018-12-17T22:51:11.85069289Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.852906518Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.857311483Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.869823228Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.884942591Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.887566119Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.892504357Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.901727102Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.904742187Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.908647113Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.921300714Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:11.934666502Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:11.940128393Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:11.945962162Z 62 PC: 135d2 | Close file
2018-12-17T22:51:11.954536581Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.956857561Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.960906727Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:11.973026446Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\KRNL286.EXE')
2018-12-17T22:51:11.985465895Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:11.987420446Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:11.992556024Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.003942986Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\KRNL386.EXE')
2018-12-17T22:51:12.022625352Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.02421071Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.034836572Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.046377944Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\LZEXPAND.DLL')
2018-12-17T22:51:12.058467425Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.060988742Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.065321201Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.078997864Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.092041778Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.09505041Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.100693491Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.108803186Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.111223383Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.115708007Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.127460496Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\VER.DLL')
2018-12-17T22:51:12.140494782Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.142329018Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.147697322Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.15993351Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.174298456Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.176971156Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.182847285Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.193941848Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.196495805Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.201223477Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.21330855Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.227338647Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.230012139Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.235451328Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.243657724Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.24605127Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.251228968Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.263739139Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.27786752Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.280799308Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.286424476Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.295693739Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.298343858Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.303821668Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.315940996Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.331224026Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.334088137Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.33963117Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.348373393Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.350053659Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.35659571Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.368246907Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.382353418Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.38558055Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.390833759Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.399519977Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.400983416Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.40653204Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.418128665Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.436862719Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.440105491Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.445406089Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.455260852Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.456740712Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.462789595Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.474554367Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.48825248Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.491530117Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.496648703Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.505114407Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.506602793Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.512147038Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.52420996Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\WIN87EM.DLL')
2018-12-17T22:51:12.541270129Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.543242404Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.547780189Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.566010046Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.578406053Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.582101325Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.585202871Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.593166652Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.594268903Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.59817459Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.606890063Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.619863795Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.623107509Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.627522523Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.636968708Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.638478164Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.645512148Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.661723854Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.676929038Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.679856848Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.684684547Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.694133779Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.695758651Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.701115975Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.71305287Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.726603947Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.729725581Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.734715376Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.742919397Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.744782047Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.749262143Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.761396709Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.774321319Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.777274266Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.782728483Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.790927035Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.793115736Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.797128064Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.809443299Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.822108813Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.825811068Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.831150369Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.841567558Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.844459641Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.84889865Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.862010873Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.876484433Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.880852008Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.887367177Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.899880324Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.90108614Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.9055155Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.917408553Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:12.930649317Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:12.93431868Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:12.938349443Z 62 PC: 135d2 | Close file
2018-12-17T22:51:12.947115641Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.94821694Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.953185554Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.965615915Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\WIN386.EXE')
2018-12-17T22:51:12.979396744Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:12.982415455Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:12.986771849Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:12.998601943Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.014629492Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.018597317Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.02286849Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.032387473Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.03365277Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.037879751Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.049942422Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\COMMDLG.DLL')
2018-12-17T22:51:13.061417478Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.063738509Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.067858519Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.080445204Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.093152435Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.096834573Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.105292963Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.114466737Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.115862619Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.121834588Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.13355728Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\DDEML.DLL')
2018-12-17T22:51:13.146710931Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.149756713Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.154107185Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.166411771Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.179058419Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.181151371Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.185125847Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.191061788Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.193458872Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.196853268Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.205439638Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\DSWAP.EXE')
2018-12-17T22:51:13.215994076Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.218233333Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.222710313Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.234523105Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.247426946Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.2498621Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.254985615Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.263080733Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.265431549Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.269547261Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.282088321Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.295027969Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.302315689Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.306413548Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.316729267Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.319389885Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.32343815Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.33576631Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.348980654Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.354503369Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.360994554Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.373430697Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.375081127Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.380944041Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.393188323Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\MMSYSTEM.DLL')
2018-12-17T22:51:13.407139973Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.409169766Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.413503878Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.428599807Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\OLECLI.DLL')
2018-12-17T22:51:13.441766181Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.444696697Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.450456326Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.465770616Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\OLESVR.DLL')
2018-12-17T22:51:13.478069751Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.480390972Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.484406836Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.496218906Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\SHELL.DLL')
2018-12-17T22:51:13.510095384Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.512052561Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.518115261Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.530324657Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\SYSEDIT.EXE')
2018-12-17T22:51:13.545392073Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.547576457Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.553341547Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.56830618Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\TOOLHELP.DLL')
2018-12-17T22:51:13.581504133Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.584515921Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.58951363Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.607310563Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.621278784Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.626068411Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.634503598Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.644444984Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.646400237Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.650685377Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.664345689Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.677973701Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.682060568Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.686462488Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.695793437Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.697702123Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.702335186Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.715753143Z 65 PC: 139a9 | Delete file (Filename = 'C:\WINDOWS\SYSTEM\WSWAP.EXE')
2018-12-17T22:51:13.727754209Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.730190826Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.734114867Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.745979166Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.759782968Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.764016821Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.768433258Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.777606191Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.779571633Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.784159962Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.796873336Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.810186265Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.814025347Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.818449268Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.827422716Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.828911733Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.834236706Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.846299718Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.859342019Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.863461418Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.86804598Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.878322816Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.880079346Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.885895372Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.899503456Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.916362047Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.921706447Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.926815455Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.937915197Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.939700481Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:13.94599748Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:13.960079815Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:13.976788404Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:13.979852149Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:13.985928094Z 62 PC: 135d2 | Close file
2018-12-17T22:51:13.994431628Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:13.997144765Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.001746771Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.015327293Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.029502292Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.035641385Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.042201328Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.052909986Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.055411806Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.061970887Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.077131568Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.089814144Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.093972465Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.099327425Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.111578029Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.113783352Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.119543854Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.132206963Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.145492821Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.149883701Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.154207674Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.162872852Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.164129493Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.169083509Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.180863229Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.202750346Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.205979121Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.211792973Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.220039275Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.222344145Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.226500653Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.239055008Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.252887764Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.257018433Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.261982529Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.27428493Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.277358524Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.281969667Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.294877946Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.30809186Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.311377903Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.315607199Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.324139797Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.325569473Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.330646661Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.342440407Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.35615939Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.359185204Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.364568106Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.373109071Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.375759019Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.380696866Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.395649426Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.409649947Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.413735212Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.418257838Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.42792586Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.429446337Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.434935218Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.447921233Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.463791116Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.467062001Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.47166589Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.481903122Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.483093678Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.488682177Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.500764745Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.514952799Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.517427588Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.522993894Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.531489114Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.534011532Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.538039359Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.551051924Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.563786628Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.567558193Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.571653166Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.580697907Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.581847307Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.587097279Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.599092824Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.613187823Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.615701365Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.6208679Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.630564126Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.632810506Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.636878157Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.650036146Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.662800716Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.66608758Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.669482127Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.67889494Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.680291103Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.685843213Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.698029797Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.713689836Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.716254033Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.721593103Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.730282437Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.73291936Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.737809336Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.749733507Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.76406487Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.766782035Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.772396331Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.780505215Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.783027884Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.790316937Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.804942402Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.817911085Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.820526559Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.824782744Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.833661885Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.835386294Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.841195167Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.854968682Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.869616208Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.873363137Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.878403857Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.887312653Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.888744603Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.892794772Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.906569839Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.925533104Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.928791095Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.933889092Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.944327161Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.94609409Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:14.952094101Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:14.967396869Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:14.981106925Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:14.983854126Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:14.989151998Z 62 PC: 135d2 | Close file
2018-12-17T22:51:14.997416194Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:14.999723708Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.004237017Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.017430913Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.031185573Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.03541604Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.039779817Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.049882507Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.05175841Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.058143004Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.071318987Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.085828284Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.088581035Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.09507228Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.105357832Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.107585888Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.113800733Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.12995474Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.147677725Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.151024321Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.155478388Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.165589323Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.166945631Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.175143321Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.187217614Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.201488764Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.205237065Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.20995603Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.218187033Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.221054409Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.225263707Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.237866072Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.251237101Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.255005099Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.260070354Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.268762324Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.270291586Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.27535044Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.288143563Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.301150518Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.303966788Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.308651819Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.317151247Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.319755118Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.32392417Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.338172477Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.350785231Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.354729561Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.358816108Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.369134913Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.370613851Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.375907586Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.387264822Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.398073677Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.400453999Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.404628251Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.413090848Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.415091637Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.41958042Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.434827342Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.448728968Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.452454357Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.456721874Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.477300392Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.478830076Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.483678083Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.496060385Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.50938152Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.512031738Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.516760071Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.532229462Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.534164447Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.538080253Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.550072291Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.563350365Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.566532683Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.570421148Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.579523618Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.580623384Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.585440844Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.595623093Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.605422562Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.607547635Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.61100548Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.616916625Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.61861781Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.621669213Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.630905043Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.64036258Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.642863799Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.646085481Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.653764046Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.655234268Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.660670551Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.67234918Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.685987491Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.688885775Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.693768489Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.702482959Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.704845507Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.708849069Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.72232816Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.74126242Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.743977841Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.748196106Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.758231789Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.759604277Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.764538507Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.776551795Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.789988026Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.79276883Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.797988636Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.806666328Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.808426424Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.812329356Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.824399701Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.83752553Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.8410496Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.84522261Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.854675237Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.855912662Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.860838866Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.873847925Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.886608898Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.888999899Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.893385949Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.901464205Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.903300114Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.908022275Z 67 PC: 13046 | Get or set file attributes
2018-12-17T22:51:15.920463647Z 60 PC: 13c58 | Create or truncate file
2018-12-17T22:51:15.933290333Z 68 PC: 13c74 | I/O control for devices (Set for = '')
2018-12-17T22:51:15.936273287Z 64 PC: 13593 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:51:15.940625783Z 62 PC: 135d2 | Close file
2018-12-17T22:51:15.950355021Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.951992828Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.959445378Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:15.961121196Z 78 PC: 13083 | Find first file
2018-12-17T22:51:15.968906221Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.971122244Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.974518544Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.976181658Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.979751315Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.98106879Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.984837089Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.986179671Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.98977779Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.991027819Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.994569141Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:15.996023844Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:15.999788377Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.001215728Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.00479918Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.006125621Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.009885374Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.011183292Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.014681053Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.016237748Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.021140128Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.025281027Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.02872682Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.031419859Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.035033267Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.036451111Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.040830919Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.042265353Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.050781381Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.057799646Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.061868039Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.064060647Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.068160219Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.070229367Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.074100689Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.07566084Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.079981176Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.081772271Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.0862056Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.087956158Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.092522556Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.09398837Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.098717945Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.099990265Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.103938833Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.105171078Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.110178705Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.112066431Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.117433764Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.118830618Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.123407727Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.124852561Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.129522584Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.130928636Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.135670133Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.137409421Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.141031124Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.143666886Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.147351828Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.150201702Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.153919295Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.156445492Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.160111959Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.164660504Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.168092421Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.170247219Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.173895473Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.176188371Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.179818811Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.183364722Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.18722293Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.189473287Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.193566237Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.195231966Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.199211642Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.200860008Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.206205691Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.207514479Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.212266196Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.213617545Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.217742133Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.21915636Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.222459124Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.225595046Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.228981047Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.231521369Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.234906869Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.237804933Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.241564175Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.244323519Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.247828984Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.250610069Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.254373438Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.255894906Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.259831943Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.261243615Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.265747195Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.267248946Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.272624505Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.274223729Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.279215496Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.280552689Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.285401888Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.286600009Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.291714036Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.292886989Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.297594714Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.299257257Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.30313968Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.306716941Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.310226033Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.312794288Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.31670802Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.318407062Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.32291515Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.324562084Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.32903692Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.330501612Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.334732861Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.335885557Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.341351294Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.343102474Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.348509713Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.349770391Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.35466734Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.358166554Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.363552963Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.365993588Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.370408471Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.371756293Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.375227634Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.377694589Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.381236562Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.383845694Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.387552308Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.389943239Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.39411169Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.395798769Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.401032602Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.403971703Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.407981947Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.410439393Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.414393251Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.417222836Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.420990184Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.423590689Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.427769439Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.431929915Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.43555755Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.436806336Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.44182809Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.443310845Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.447188319Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.449052842Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.452715072Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.45586533Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.4596607Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.463061809Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.466719611Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.47034952Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.47392117Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.476766525Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.480518583Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.483604801Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.487662484Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.489039672Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.493698974Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.495183493Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.500388852Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.502158867Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.510739697Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.512278007Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.517116326Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.518773068Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.522934235Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.525324135Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.5287762Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.532114932Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.535586243Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.538261188Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.541892591Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.543507374Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.551991983Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.553311141Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.558126657Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.559515376Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.564414721Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.565826162Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.569983732Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.571607633Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.575510445Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.578566085Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.582225941Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.584809484Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.588652934Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.590089893Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.598057131Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.599449056Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.60347022Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.605979173Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.609822613Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.612032886Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.616078466Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.618890548Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.622567957Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.625390529Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.629593155Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.632477092Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.636219553Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.637716154Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.642775508Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.644283301Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.648847706Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.650173026Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.653459439Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.654887071Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.661725458Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.664121329Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.667880521Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.670720165Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.674314868Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.675740546Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.679467147Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.680896693Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.685736064Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.687214842Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.693132499Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.694617859Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.699220716Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.700535536Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.703561932Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.706218152Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.709782087Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.711739554Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.715169467Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.716721984Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.721108575Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.723485901Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.728490793Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.730849223Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.734436101Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.73614407Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.740719826Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.742183536Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.748221368Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.749637609Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.758479039Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.759707917Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.766562113Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.768411518Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.772067095Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.774625662Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.778483809Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.779670398Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.784134394Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.785745831Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.789178441Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.791710157Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.795521096Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.798332697Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.801823445Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.804741016Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.808111158Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.809632215Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.813072808Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.814270448Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.818017718Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.819434299Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.822880794Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.825100023Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.828422214Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.829930066Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.836813016Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.838230068Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.843046717Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.844899327Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.848367913Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.850976784Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.854449107Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.856015701Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.860335466Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:16.861562862Z 78 PC: 13083 | Find first file
2018-12-17T22:51:16.872612178Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.874175365Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.87748328Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.88006501Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.883901126Z 26 PC: 13077 | Set disk transfer address
2018-12-17T22:51:16.886172312Z 78 PC: 13083 | Find first file
2018-12-17T22:51:16.893072425Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.894137677Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.898884774Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.900461506Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.904654182Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.906049824Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.909611947Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.912179029Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.916442799Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.918843118Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.92263447Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.924698457Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.929086461Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.930479969Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.936145392Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.937496249Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.942364324Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.944077523Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.948064153Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.949965364Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.95423799Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.956275408Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.959992981Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.961124176Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.968837938Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.970115518Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.974861283Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.976102044Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.979415449Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.981555229Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.98448389Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.986526938Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.989336737Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.991099248Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:16.993908495Z 26 PC: 1309b | Set disk transfer address
2018-12-17T22:51:16.995178381Z 79 PC: 130a0 | Find next file
2018-12-17T22:51:17.000083716Z 64 PC: 135b8 | Write file or device (Write 54 bytes on handle 1)
2018-12-17T22:51:17.005825262Z 64 PC: 135b8 | Write file or device (Write 47 bytes on handle 1)
2018-12-17T22:51:17.01332997Z 64 PC: 135b8 | Write file or device (Write 56 bytes on handle 1)
2018-12-17T22:51:17.020429367Z 64 PC: 135b8 | Write file or device (Write 52 bytes on handle 1)
2018-12-17T22:51:17.026868884Z 64 PC: 135b8 | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:51:17.030511638Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:51:17.031935172Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:51:17.034598946Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:51:17.03628846Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:51:17.039225047Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:51:17.040518767Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:51:17.041726796Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:51:17.044336349Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:51:17.045694139Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:51:17.051605204Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:51:17.052978624Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:51:17.056001012Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:51:17.057866336Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:51:17.061458013Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:51:17.06298411Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:51:17.064999155Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:51:17.06666212Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:51:17.068196953Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:51:17.071428654Z 37 PC: 132f1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:51:17.072897524Z 76 PC: 13330 | Terminate with return code (Return code = '0')