Sample viewer

vx.netlux.org/Virus.DOS.Vbasic.j

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:51:15.754847495Z 26 PC: 15018 | Set disk transfer address
2018-12-17T21:51:15.758430865Z 53 PC: 1501d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:15.759584166Z 48 PC: 15029 | Get DOS version
2018-12-17T21:51:15.761194108Z 37 PC: 15035 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:51:15.763687625Z 51 PC: 15143 | Get or set Ctrl-Break
2018-12-17T21:51:15.764595437Z 46 PC: 15143 | Set verify flag
2018-12-17T21:51:15.766110826Z 44 PC: 15143 | Get time 0x15143: mov bp, sp
0x15145: mov bp, word ptr [bp + 8]
0x15148: mov word ptr [bp], ax
0x1514b: mov word ptr [bp + 2], bx
0x1514e: mov word ptr [bp + 4], cx
0x15151: mov word ptr [bp + 6], dx
0x15154: mov word ptr [bp + 8], si
0x15157: mov word ptr [bp + 0xa], di
0x1515a: pushf
0x1515b: pop ax
0x1515c: and ax, 1
0x1515f: mov word ptr [bp + 0xc], ax
0x15162: cld
0x15163: pop di
0x15164: pop si
0x15165: pop bp
0x15166: ret
0x15167: add byte ptr [di - 0x75], dl
0x1516a: in al, dx
0x1516b: mov ax, 0x4200
2018-12-17T21:51:15.769265516Z 42 PC: 15143 | Get date 0x15143: mov bp, sp
0x15145: mov bp, word ptr [bp + 8]
0x15148: mov word ptr [bp], ax
0x1514b: mov word ptr [bp + 2], bx
0x1514e: mov word ptr [bp + 4], cx
0x15151: mov word ptr [bp + 6], dx
0x15154: mov word ptr [bp + 8], si
0x15157: mov word ptr [bp + 0xa], di
0x1515a: pushf
0x1515b: pop ax
0x1515c: and ax, 1
0x1515f: mov word ptr [bp + 0xc], ax
0x15162: cld
0x15163: pop di
0x15164: pop si
0x15165: pop bp
0x15166: ret
0x15167: add byte ptr [di - 0x75], dl
0x1516a: in al, dx
0x1516b: mov ax, 0x4200
2018-12-17T21:51:15.771793099Z 25 PC: 15143 | Get default drive
2018-12-17T21:51:15.772968351Z 54 PC: 15143 | Get free disk space
2018-12-17T21:51:15.789140468Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:15.790808876Z 78 PC: 15219 | Find first file
2018-12-17T21:51:15.796916188Z 61 PC: 151d1 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:51:15.803396825Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.805284848Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.807308565Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:15.813907506Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:15.816864496Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.818118353Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:15.820984022Z 62 PC: 151c1 | Close file
2018-12-17T21:51:15.823309734Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:15.824546263Z 79 PC: 15219 | Find next file
2018-12-17T21:51:15.827131072Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:15.828754032Z 78 PC: 15219 | Find first file
2018-12-17T21:51:15.834565955Z 61 PC: 151d1 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:51:15.841339009Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.843067867Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.844146763Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:15.848237626Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.849815393Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:15.851569406Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.852637671Z 64 PC: 151ad | Write file or device (Write 9 bytes on handle 5)
2018-12-17T21:51:15.85611363Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:15.867997073Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.883319692Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:15.890496435Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.891903599Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:15.894753431Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.896996155Z 62 PC: 151c1 | Close file
2018-12-17T21:51:15.904681513Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:15.905965264Z 79 PC: 15219 | Find next file
2018-12-17T21:51:15.909453718Z 61 PC: 151d1 | Open file (Filename = 'PRINT.COM')
2018-12-17T21:51:15.915860115Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.917307435Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.919359505Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:15.925721056Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.927077158Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:15.929703175Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.931392434Z 64 PC: 151ad | Write file or device (Write 5 bytes on handle 5)
2018-12-17T21:51:15.933997269Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:15.943195336Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.944552191Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:15.951424242Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.953219799Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:15.956773238Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.958456298Z 62 PC: 151c1 | Close file
2018-12-17T21:51:15.966238104Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:15.967709789Z 79 PC: 15219 | Find next file
2018-12-17T21:51:15.97035481Z 61 PC: 151d1 | Open file (Filename = 'HELLO.COM')
2018-12-17T21:51:15.976748951Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:15.979033103Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.980380714Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:15.986806479Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.988985241Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:15.991407802Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:15.992741409Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:15.996359581Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:16.005074541Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.006383674Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.013962318Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.015729751Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.018330992Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.02179177Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.029614522Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.034117907Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.038009599Z 61 PC: 151d1 | Open file (Filename = 'PHANG.COM')
2018-12-17T21:51:16.044755062Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.046532875Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.048713177Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.055231865Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.056866157Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.060386802Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.061892821Z 64 PC: 151ad | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:51:16.064740766Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:16.073974879Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.075044683Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.081749944Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.084257125Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.087119047Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.088889003Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.098181737Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.099595363Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.102771317Z 61 PC: 151d1 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:51:16.110288735Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.111909365Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.113592565Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.12083249Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.122520952Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.125319411Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.127930324Z 64 PC: 151ad | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:51:16.131267929Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:16.140374734Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.142129757Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.149268239Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.150644952Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.153699638Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.155417559Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.163810785Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.165487868Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.169775531Z 61 PC: 151d1 | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:51:16.176424721Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.178556461Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.18011468Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.186765525Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.188667742Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.191353819Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.192986982Z 64 PC: 151ad | Write file or device (Write 11 bytes on handle 5)
2018-12-17T21:51:16.196560561Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:16.206184368Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.207816021Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.213041208Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.214787083Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.21798197Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.219766269Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.234901525Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.236967738Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.242039808Z 61 PC: 151d1 | Open file (Filename = 'PAH.COM')
2018-12-17T21:51:16.250196219Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.252029819Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.253745704Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.260957829Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.262528604Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.265286126Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.267759651Z 64 PC: 151ad | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:51:16.271454881Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:16.280367711Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.282152936Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.288887266Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.290725849Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:16.294974038Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.296777955Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.304991887Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.306657449Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.309030305Z 71 PC: 151f3 | Get current directory
2018-12-17T21:51:16.311915996Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.317022646Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.32135117Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.325614477Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.33008032Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.334323531Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.339581685Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.341436976Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.347602682Z 61 PC: 151d1 | Open file (Filename = 'TEST.EXE')
2018-12-17T21:51:16.354269942Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.356058373Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.357321537Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.360574938Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.36307416Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.364284162Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.367093125Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.368713005Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.369544181Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.372651022Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.373561162Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.379415693Z 61 PC: 151d1 | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:51:16.386971619Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.388430903Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.390607503Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.395173506Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.396819838Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.39943306Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.402767889Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.404342952Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.406836377Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.409150979Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.410410001Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.413168346Z 61 PC: 151d1 | Open file (Filename = 'PRINT.COM')
2018-12-17T21:51:16.419731504Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.42135821Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.423161173Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.42633521Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.427846425Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.430528795Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.433570401Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.435212321Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.438536978Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.440703503Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.442146073Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.446231877Z 61 PC: 151d1 | Open file (Filename = 'HELLO.COM')
2018-12-17T21:51:16.461758331Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.463993475Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.465875133Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.468471589Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.469845042Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.47307787Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.475551255Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.476872287Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.480081556Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.48194151Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.483107352Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.486661945Z 61 PC: 151d1 | Open file (Filename = 'PHANG.COM')
2018-12-17T21:51:16.493970762Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.495739817Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.498169338Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.501331791Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.502952612Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.506401347Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.509422528Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.511053037Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.514532249Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.516856429Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.518150941Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.522339926Z 61 PC: 151d1 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:51:16.529223542Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.530949552Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.533325543Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.537851507Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.539364163Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.542558494Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.545278551Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.546564531Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.54965255Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.551413446Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.552883298Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.556703203Z 61 PC: 151d1 | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:51:16.56312507Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.564601495Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.56643113Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.569489802Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.571607579Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.580248145Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.583349068Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.585246225Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.589305986Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.591615276Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.593165003Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.597431232Z 61 PC: 151d1 | Open file (Filename = 'PAH.COM')
2018-12-17T21:51:16.604164429Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.606014754Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.608706696Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.612679153Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.614403932Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.618115885Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.621302343Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.623257659Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.627299184Z 62 PC: 151c1 | Close file
2018-12-17T21:51:16.629568207Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.631138669Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.633552089Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.634440563Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.638790953Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.640578302Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.6460886Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.649451367Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.652387277Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.653910723Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.657795625Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.659364011Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.66223515Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.663830571Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.66734793Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.668759083Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.6717634Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.673972116Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.676737975Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.681795272Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.684687502Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.686083925Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.689575935Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.694003005Z 14 PC: 15143 | Set default drive (Drive = 'C')
2018-12-17T21:51:16.695740541Z 25 PC: 15143 | Get default drive
2018-12-17T21:51:16.698477978Z 54 PC: 15143 | Get free disk space
2018-12-17T21:51:16.740501907Z 71 PC: 151f3 | Get current directory
2018-12-17T21:51:16.74343344Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.748265497Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.752476574Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.756355246Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.761824749Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.765917086Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.76978828Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.771905535Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.78020668Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.781458054Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.787896427Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.789312261Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.791918539Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.793773724Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.7992297Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.800530557Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.803644609Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.804688122Z 79 PC: 15219 | Find next file
2018-12-17T21:51:16.807859494Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:16.81683048Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:16.817858342Z 78 PC: 15219 | Find first file
2018-12-17T21:51:16.827540954Z 61 PC: 151d1 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T21:51:16.834789277Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:16.836831105Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.839464213Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.845382452Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.84816181Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.85044684Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.855972936Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.857544426Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.860791463Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.862346683Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.865011696Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.868018641Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.870786937Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.872727373Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:16.875478991Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.876959954Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.880749557Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.882346233Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.885025654Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.887098942Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:16.890081887Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:16.891427421Z 64 PC: 151ad | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:51:16.89850213Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:17.438821899Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.440564081Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.444375225Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.44605475Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.449460599Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.452085656Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.455089707Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:17.457871321Z 62 PC: 151c1 | Close file
2018-12-17T21:51:17.792615342Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:17.799156725Z 79 PC: 15219 | Find next file
2018-12-17T21:51:17.8022315Z 61 PC: 151d1 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T21:51:17.806677788Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:17.807959607Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.809777225Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.813845688Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.816759833Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.819544127Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.825087482Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.826531245Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.828824412Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.829931383Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.832090949Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.833446047Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.835424588Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.837213612Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.838970249Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.840294278Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.843052852Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.844236112Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.846048651Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.847773639Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.849535949Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.851277957Z 64 PC: 151ad | Write file or device (Write 15 bytes on handle 5)
2018-12-17T21:51:17.855399893Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:17.863017521Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.864735498Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.866819333Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.867814419Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.870333801Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.871379578Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.873444329Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:17.876850986Z 62 PC: 151c1 | Close file
2018-12-17T21:51:17.883680228Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:17.887088989Z 79 PC: 15219 | Find next file
2018-12-17T21:51:17.89102728Z 61 PC: 151d1 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T21:51:17.897377874Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:17.899895068Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.901026748Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.90615717Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.908939679Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.910091633Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.913974928Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.915645689Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.917780421Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.919133047Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.921685024Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.923040051Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.92567327Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.926856592Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:17.928774762Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.930662316Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.932651448Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.933924713Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.936547767Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.937656923Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:17.939754905Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.941937476Z 64 PC: 151ad | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:51:17.946833691Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:17.956937998Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.959916185Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.963567524Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.966326959Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.97030776Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:17.972262661Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:17.977153086Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:17.979414467Z 62 PC: 151c1 | Close file
2018-12-17T21:51:17.986892178Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:17.989094827Z 79 PC: 15219 | Find next file
2018-12-17T21:51:17.993184954Z 61 PC: 151d1 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T21:51:18.000071813Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.002717479Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.004564648Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.010503875Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.014310429Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.015931357Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.021575974Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.024268038Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.027013795Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.028624847Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.031760928Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.033150991Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.036171152Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.0387372Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.041608689Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.043978897Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.047117001Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.048792862Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.053117132Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.05512578Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.057896452Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.060432839Z 64 PC: 151ad | Write file or device (Write 15 bytes on handle 5)
2018-12-17T21:51:18.067165175Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:18.075590341Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.078171087Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.081677814Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.083371812Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.087658133Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.08930536Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.092255709Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.095147199Z 62 PC: 151c1 | Close file
2018-12-17T21:51:18.102606982Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:18.104074667Z 79 PC: 15219 | Find next file
2018-12-17T21:51:18.108884735Z 61 PC: 151d1 | Open file (Filename = 'FDISK.EXE')
2018-12-17T21:51:18.116076662Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.118105961Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.120683596Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.12743251Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.130944413Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.13293748Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.138049336Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.139802121Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.141593682Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.142677289Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.145079595Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.146164809Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.148038683Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.149781874Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.151487248Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.152536637Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.154798776Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.155868684Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.157782303Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.159225434Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.160976487Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.162725464Z 64 PC: 151ad | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:51:18.16799597Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:18.177528102Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.180645397Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.183803027Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.185203227Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.188946625Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.190383743Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.193505419Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.196041013Z 62 PC: 151c1 | Close file
2018-12-17T21:51:18.204668513Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:18.206407452Z 79 PC: 15219 | Find next file
2018-12-17T21:51:18.211598953Z 61 PC: 151d1 | Open file (Filename = 'MEM.EXE')
2018-12-17T21:51:18.219125727Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.221963956Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.224628243Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.231286218Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.23516284Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.237047165Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.242840165Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.246063295Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.24920125Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.250950584Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.254701325Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.256389703Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.259271745Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.261424323Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.264234429Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.267321456Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.270308774Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.271997996Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.275632525Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.278197099Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.280961237Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.283227914Z 64 PC: 151ad | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:51:18.289744483Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:18.298615866Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.301237687Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.304770745Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.307384129Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.310779682Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.312467221Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.316344247Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.318008107Z 62 PC: 151c1 | Close file
2018-12-17T21:51:18.640295003Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:18.642418131Z 79 PC: 15219 | Find next file
2018-12-17T21:51:18.647438047Z 61 PC: 151d1 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T21:51:18.654505862Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.657683588Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.66025702Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.667616484Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.6709293Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.672381997Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.679092692Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.681407324Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.684750684Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.687864311Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.691143732Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.693287574Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.697626133Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.699631017Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.704013287Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.706176874Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.709452503Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.712314874Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.716496538Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.719029793Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.723477496Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.725622119Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.733516467Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:18.744788337Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.74677388Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.751518729Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.75348372Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.757166374Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.760852231Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.764039491Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.766006315Z 62 PC: 151c1 | Close file
2018-12-17T21:51:18.773770442Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:18.775225029Z 79 PC: 15219 | Find next file
2018-12-17T21:51:18.779544266Z 61 PC: 151d1 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T21:51:18.787699729Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.789666556Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.792351509Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.7988681Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.801795829Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.803927934Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.810046041Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.813039118Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.81620479Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.818110408Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.822859485Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.824955344Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.827862976Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.830648306Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.833473557Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.835191046Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.839498479Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.841312369Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.847540368Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.850058854Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.85477186Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.858242134Z 64 PC: 151ad | Write file or device (Write 11 bytes on handle 5)
2018-12-17T21:51:18.872549038Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:18.888130607Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.890898163Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.909947684Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.912691657Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.916341467Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.917824204Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:18.922593313Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.924424049Z 62 PC: 151c1 | Close file
2018-12-17T21:51:18.932845332Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:18.934594989Z 79 PC: 15219 | Find next file
2018-12-17T21:51:18.938097276Z 61 PC: 151d1 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T21:51:18.94591501Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:18.947649976Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.953603466Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.961168644Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:18.963798361Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.968346062Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.974630435Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.976327052Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.980250679Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.98190633Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.984913073Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.987504923Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.990348816Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.99289647Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:18.995971921Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:18.997607914Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.001509609Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.003645516Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.007141402Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.008783673Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.011473419Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.013717645Z 64 PC: 151ad | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:51:19.020165299Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.028790468Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.031050132Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.034743447Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.03723852Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.040646109Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.042242569Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.046322509Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.048097533Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.05581438Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.057407468Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.060645466Z 61 PC: 151d1 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T21:51:19.06914813Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.071306225Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.073206633Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.080326346Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.08338126Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.086875822Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.093873789Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.095831274Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.099358978Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.101321806Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.105702836Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.10838937Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.110991754Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.113517537Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.116263881Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.118525489Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.122143584Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.124042248Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.127779729Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.130187747Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.133562853Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.135777188Z 64 PC: 151ad | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:51:19.142112699Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.152114709Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.153889828Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.157192371Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.159814848Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.163025009Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.165681638Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.169320411Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.171648718Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.179915418Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.181344997Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.186319604Z 61 PC: 151d1 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T21:51:19.193944306Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.196124928Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.201161907Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.207575013Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.210550656Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.212896315Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.219256226Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.221954811Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.225035447Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.226856374Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.230769143Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.232937736Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.236533443Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.238240237Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.241063796Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.243305755Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.246038148Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.248155756Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.251007203Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.252740369Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.257090031Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.258894177Z 64 PC: 151ad | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:51:19.266540127Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.27576884Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.277660066Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.281631312Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.283406559Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.287475051Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.289141817Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.292375799Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.294878035Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.306745609Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.308499944Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.312584996Z 61 PC: 151d1 | Open file (Filename = 'SETUP.EXE')
2018-12-17T21:51:19.32004362Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.3228614Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.32448094Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.331498929Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.335139243Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.337429786Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.343810978Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.345626314Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.348704956Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.35099197Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.354372374Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.357039227Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.360282683Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.361970886Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.365672727Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.367199442Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.370801936Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.373295375Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.376031837Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.378451604Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.381199761Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.383318701Z 64 PC: 151ad | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:51:19.389751357Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.398744122Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.401015568Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.403872205Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.405465426Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.408926691Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.410296746Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.415045744Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.41663685Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.423865874Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.426156744Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.429363495Z 61 PC: 151d1 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T21:51:19.437614343Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.439516798Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.441558029Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.447597607Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.450373465Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.452829782Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.458968132Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.461004538Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.464073874Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.465498827Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.46930141Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.471020454Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.474785125Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.476845144Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.479680853Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.482213618Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.485541414Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.487570661Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.491339211Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.493069212Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.496616783Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.498408262Z 64 PC: 151ad | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:51:19.506540131Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.515377933Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.516917419Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.521244727Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.522698024Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.527431886Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.528996879Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:19.532020125Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.534730282Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.541880572Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.544552342Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.547891334Z 61 PC: 151d1 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T21:51:19.554519101Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.557033759Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.55842126Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.565516163Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.569379538Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.570864392Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.579237955Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.581712908Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.586299217Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.587791421Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.590566485Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.592702859Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.595368234Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.598944768Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.600578658Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.607902966Z 61 PC: 151d1 | Open file (Filename = 'EMM386.EXE')
2018-12-17T21:51:19.615246831Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.616828988Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.619668429Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.625879843Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.630175728Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.632045808Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.639124232Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.642134141Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.644962441Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.648587277Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.649958516Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.653512858Z 61 PC: 151d1 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T21:51:19.660945201Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.662804295Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.665301972Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.671312848Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.674248325Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.677117095Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.6828297Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.685140858Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.688300048Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.689979885Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.693893412Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.69557183Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.699299611Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.70171402Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.703622976Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.707913865Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.709257093Z 78 PC: 15219 | Find first file
2018-12-17T21:51:19.716195605Z 61 PC: 151d1 | Open file (Filename = 'EDIT.COM')
2018-12-17T21:51:19.723340364Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.724698246Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.728641302Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.734743699Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.736637396Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.73915043Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.740977501Z 64 PC: 151ad | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:51:19.743913932Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.753086555Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.755436796Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.761225913Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.763115943Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.766006912Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.768783189Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.77648311Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.777853772Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.781805848Z 61 PC: 151d1 | Open file (Filename = 'FORMAT.COM')
2018-12-17T21:51:19.788740147Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.792269102Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.7943313Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.800001774Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.802565266Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.80872287Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.812582601Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.814403011Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.817286211Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.820043825Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.826470548Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.836092782Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.837611747Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.840438401Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.843181365Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.846188878Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.848778971Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.855975826Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.858491446Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.861957222Z 61 PC: 151d1 | Open file (Filename = 'KEYB.COM')
2018-12-17T21:51:19.869626206Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.872146655Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.873677644Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.879826921Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.881395315Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.88737182Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.891037279Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.892455429Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.896024986Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.897552948Z 64 PC: 151ad | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:51:19.905146656Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:19.920251025Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.922045912Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.925964261Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.927509881Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:19.93040007Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.932545635Z 62 PC: 151c1 | Close file
2018-12-17T21:51:19.940286304Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:19.94348077Z 79 PC: 15219 | Find next file
2018-12-17T21:51:19.947533723Z 61 PC: 151d1 | Open file (Filename = 'SYS.COM')
2018-12-17T21:51:19.95456887Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:19.956293743Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.957996307Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.964161109Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.965671628Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:19.972767431Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.975625271Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.979240871Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:19.982572958Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:19.984011414Z 64 PC: 151ad | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:51:19.991660584Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:20.001284088Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.003457849Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:20.006347234Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.008412331Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:20.012401647Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.014786583Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.023345423Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.024647008Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.028995384Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.030096114Z 78 PC: 15219 | Find first file
2018-12-17T21:51:20.036104243Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.038211824Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.041483563Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.043811529Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.047004078Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.048987039Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.051959377Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.052994605Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.056479553Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.058142273Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.061315874Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.062868529Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.066366345Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.067654717Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.071307758Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.072327079Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.076418944Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.077574872Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.080766735Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.082785988Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.085660404Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.087283211Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.090487713Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.092291945Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.0954094Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.098192293Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.101397391Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.102457983Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.106295312Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.107375833Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.110720019Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.112318637Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.115472106Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.117452784Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.120614678Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.122570655Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.125649943Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.127330433Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.130660996Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.131931973Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.135889126Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.137160873Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.141579387Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.142704096Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.146796162Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.148207242Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.151448843Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.153491059Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.156531342Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.158820171Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.161811871Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.163084318Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.166742796Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.16779248Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.171617377Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.172834085Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.176353714Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.177947636Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.181161253Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.183588419Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.186786802Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.188811069Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.192292419Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.194428989Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.197708777Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.199266047Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.202723416Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.204040352Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.207844233Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.20910117Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.212944228Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.214482711Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.218948033Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.220150169Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.224390233Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:20.231312333Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.233132851Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.240220949Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.241502355Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.245604519Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:20.251498105Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.252940694Z 78 PC: 15219 | Find first file
2018-12-17T21:51:20.262510048Z 61 PC: 151d1 | Open file (Filename = 'SETUP.EXE')
2018-12-17T21:51:20.269245456Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.271221378Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.272836847Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.280234257Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.282992359Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.285212256Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.291005724Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.292624954Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.295717212Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.297753389Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.299769167Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.303301188Z 61 PC: 151d1 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T21:51:20.310449073Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.31236898Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.314171189Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.321326517Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.324078371Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.326376927Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.332555161Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.335131141Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.337733196Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.34074431Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.341830723Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.345025676Z 61 PC: 151d1 | Open file (Filename = 'MSD.EXE')
2018-12-17T21:51:20.352929694Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.354449319Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.357550089Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.363781246Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.366995348Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.368366773Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.373728588Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.375454947Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.377868133Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.381236158Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.383873466Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.386022512Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.388605414Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.390378581Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.393248617Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.394834304Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.39853964Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.400133922Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.403254958Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.404866817Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.408879699Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.410531646Z 64 PC: 151ad | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:51:20.417536944Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:20.42586707Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.427396975Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:20.431435621Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.43297259Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:20.437658135Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.439259146Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:20.442056121Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.444086459Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.451077477Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.453779701Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.457115189Z 61 PC: 151d1 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T21:51:20.464874921Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.466302867Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.467579162Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.474359527Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.476867169Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.479359532Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.485322154Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.487634596Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.49115146Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.492911649Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.494730757Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.49818602Z 61 PC: 151d1 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T21:51:20.505811536Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.507442257Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.509706472Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.516025632Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.518768841Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.521419702Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.527223141Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.529666409Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.532091556Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.533949602Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.535709921Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.541949509Z 61 PC: 151d1 | Open file (Filename = 'SOL.EXE')
2018-12-17T21:51:20.548950883Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.55056471Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.552804313Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.558559342Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.562864986Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.564303828Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.56985794Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.571735835Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.574254647Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.577234481Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.57861459Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.583194802Z 61 PC: 151d1 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T21:51:20.590421067Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.592193719Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.594314088Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.600401255Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.603822147Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.605268725Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.612091504Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.613600181Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.616245264Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.618144483Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.619007981Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.621734522Z 61 PC: 151d1 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T21:51:20.625894049Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.627965743Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.629064186Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.634297931Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.636803759Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.638137157Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.642912315Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.644046941Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.646436661Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.647785136Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.649532896Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.652181669Z 61 PC: 151d1 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T21:51:20.657597247Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.658736133Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.660352534Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.664108129Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.666182504Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.6679448Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.671463331Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.672876672Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.674610915Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.676393255Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.67732831Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.680161158Z 61 PC: 151d1 | Open file (Filename = 'WRITE.EXE')
2018-12-17T21:51:20.684719575Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.686642375Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.68768213Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.692102378Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.69378793Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.695480447Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.699090727Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.700519438Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.703445845Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.70531991Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.707210113Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.71079892Z 61 PC: 151d1 | Open file (Filename = 'CALC.EXE')
2018-12-17T21:51:20.719440875Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.721468144Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.724720859Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.731080812Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.734216492Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.736522246Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.742092895Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.749709967Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.752271578Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.755617633Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.756976301Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.761414409Z 61 PC: 151d1 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T21:51:20.768562587Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.770816052Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.773184236Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.779129811Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.781701353Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.783248455Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.788838684Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.791102833Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.793650766Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.795016524Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.796559149Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.799501422Z 61 PC: 151d1 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T21:51:20.805074552Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.807692492Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.811328458Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.817568903Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.820845703Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.822381697Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.829773182Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.831572657Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.834434028Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.837844385Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.839070876Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.842593853Z 61 PC: 151d1 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T21:51:20.848540956Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.850330608Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.851506211Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.856395529Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.859292188Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.861294724Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.865815Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.867630327Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.869989282Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.871445548Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.873326883Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.875592606Z 61 PC: 151d1 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T21:51:20.881421905Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.88251202Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.884292472Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.889214516Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.895523478Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.896669322Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.901391128Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.90256009Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.904500095Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.906451822Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.907482106Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.912579068Z 61 PC: 151d1 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T21:51:20.917125213Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.918851013Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.920011499Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.924466085Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.926694534Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.927883173Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.93456282Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.935630012Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.93805274Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.939527656Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.941188562Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.943973788Z 61 PC: 151d1 | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T21:51:20.949525902Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.951160073Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.952981689Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.956901723Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.959415457Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.960565843Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.964592345Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.966201136Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.968045196Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.970351472Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:20.971281203Z 79 PC: 15219 | Find next file
2018-12-17T21:51:20.974871795Z 61 PC: 151d1 | Open file (Filename = 'EMM386.EXE')
2018-12-17T21:51:20.979314955Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:20.981065718Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.982445647Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.986880784Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:20.989035419Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.990958353Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.994546406Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:20.996219032Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:20.998102986Z 62 PC: 151c1 | Close file
2018-12-17T21:51:20.999569427Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.000955895Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.003267737Z 61 PC: 151d1 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T21:51:21.008173599Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.009394075Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.011232076Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.015288246Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.017954447Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.019118934Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.02342182Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.024488379Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.026962884Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.028066354Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.030037613Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.032416073Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.034462085Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.036099274Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.038148998Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.039725355Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.041620729Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.043239238Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.045278858Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.047003247Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.048842976Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.050989029Z 64 PC: 151ad | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:51:21.055206779Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:21.28111946Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.282224969Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:21.287888206Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.289577132Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:21.293561685Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.296393441Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:21.299376671Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.302453894Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.309193088Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.311595482Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.314924388Z 61 PC: 151d1 | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T21:51:21.323245341Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.32508167Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.327184078Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.33129455Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.334479388Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.33570019Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.341508499Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.342893121Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.345024165Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.346716576Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.347714352Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.350696534Z 61 PC: 151d1 | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T21:51:21.355228966Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.35721721Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.35837323Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.362823087Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.364987951Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.368284823Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.374477793Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.376644596Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.379187461Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.381268357Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.382191618Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.385080774Z 61 PC: 151d1 | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T21:51:21.389377832Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.39122162Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.392336758Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.397314448Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.399134159Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.40094592Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.40497101Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.406162905Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.408109885Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.409581671Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.410424218Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.413098383Z 61 PC: 151d1 | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T21:51:21.418212016Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.419503128Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.420812409Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.424724894Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.426714883Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.428095366Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.432711616Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.434181911Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.436498091Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.438843359Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.440300591Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.444749795Z 61 PC: 151d1 | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T21:51:21.44974554Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.450980319Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.45274676Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.456529633Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.458519366Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.4596477Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.463541091Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.464846499Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.466759686Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.468249613Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.469217914Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.471396159Z 61 PC: 151d1 | Open file (Filename = 'RECORDER.EXE')
2018-12-17T21:51:21.475871681Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.47699516Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.478302954Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.482085103Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.484000047Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.484907697Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.48920516Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.490277071Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.492302921Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.494509462Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.495762405Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.497845924Z 61 PC: 151d1 | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T21:51:21.502163524Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.503128554Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.504482709Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.507953734Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.509915861Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.511141799Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.523011168Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.524152041Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.526361241Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.527828833Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.529566634Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.532355278Z 61 PC: 151d1 | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T21:51:21.538487059Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.539989294Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.541718458Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.547902093Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.551452751Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.55296099Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.581969352Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.584725351Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.587671249Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.590255311Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.591640456Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.595681952Z 61 PC: 151d1 | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T21:51:21.602566384Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.604853295Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.606512923Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.614144702Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.616535117Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.61852221Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.624284046Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.627299572Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.630847412Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.634317039Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.635793988Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.640718754Z 61 PC: 151d1 | Open file (Filename = 'WINMINE.EXE')
2018-12-17T21:51:21.646482231Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.649123304Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.650430109Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.656818153Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.659359392Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.661560563Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.669974319Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.672626075Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.675228897Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.677994116Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.68043751Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.68733025Z 61 PC: 151d1 | Open file (Filename = 'CLOCK.EXE')
2018-12-17T21:51:21.694406398Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.695421323Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.697630349Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.701609657Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.704457719Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.705557396Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.709533109Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.710912339Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.713770368Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.715069952Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.717357055Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.721425032Z 61 PC: 151d1 | Open file (Filename = 'TASKMAN.EXE')
2018-12-17T21:51:21.726294654Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.727536915Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.729204815Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.73319883Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.734949447Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.736811232Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.741411931Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.742324665Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.747313039Z 61 PC: 151d1 | Open file (Filename = 'WINVER.EXE')
2018-12-17T21:51:21.752151528Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.754171059Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.75518963Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.759689772Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.760774903Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.763406539Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.764726055Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.766288561Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.770294745Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.771333081Z 78 PC: 15219 | Find first file
2018-12-17T21:51:21.776655722Z 61 PC: 151d1 | Open file (Filename = 'WIN.COM')
2018-12-17T21:51:21.781272405Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.783577851Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.785382479Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.792131405Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.793767007Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.801385737Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.804177621Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.807052495Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.808882486Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.810645181Z 64 PC: 151ad | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:51:21.815211993Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:21.822778184Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.823841863Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:21.826704365Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.827669554Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:21.830193906Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.831367394Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.837052117Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.840874145Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.85856508Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.860868349Z 78 PC: 15219 | Find first file
2018-12-17T21:51:21.867796542Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.868961216Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.882419972Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.884071455Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.886832176Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:21.89072778Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.891648204Z 78 PC: 15219 | Find first file
2018-12-17T21:51:21.89964214Z 61 PC: 151d1 | Open file (Filename = 'GDI.EXE')
2018-12-17T21:51:21.926072415Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.930294003Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.932028856Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.939730771Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.942655113Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.945756534Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.9515485Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.954648088Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.957453395Z 62 PC: 151c1 | Close file
2018-12-17T21:51:21.960928141Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:21.962320492Z 79 PC: 15219 | Find next file
2018-12-17T21:51:21.967183157Z 61 PC: 151d1 | Open file (Filename = 'USER.EXE')
2018-12-17T21:51:21.974026415Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:21.977193446Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.978878826Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.98663556Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:21.989435919Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:21.992409638Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:21.998887661Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.001911212Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.004696681Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.008073299Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.009436433Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.014304312Z 61 PC: 151d1 | Open file (Filename = 'DOSX.EXE')
2018-12-17T21:51:22.021194949Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.024532707Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.026256612Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.033758496Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.036248121Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.037989157Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.043761664Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.046399398Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.04919751Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.05212395Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.054887502Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.057754454Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.060543829Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.062813343Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.065478591Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.068438549Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.072011199Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.074655228Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.07761592Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.079303236Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.082521179Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.084448272Z 64 PC: 151ad | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:51:22.091619812Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:22.100334047Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.102308318Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.105476565Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.108457101Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.111711524Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.11464556Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.117646469Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.120081472Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.127190461Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.129299141Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.132810018Z 61 PC: 151d1 | Open file (Filename = 'KRNL286.EXE')
2018-12-17T21:51:22.140198426Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.142040774Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.144718915Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.151565571Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.155473359Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.157143107Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.163670938Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.165346476Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.168995863Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.171009716Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.173404172Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.176929022Z 61 PC: 151d1 | Open file (Filename = 'KRNL386.EXE')
2018-12-17T21:51:22.184648912Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.186434896Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.188649673Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.194809996Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.198789907Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.200448226Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.206873458Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.208530459Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.21243911Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.214501728Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.216965597Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.224373374Z 61 PC: 151d1 | Open file (Filename = 'WIN386.EXE')
2018-12-17T21:51:22.249855746Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.251801769Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.254664302Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.263009027Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.267141046Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.268933007Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.27706143Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.278659736Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.282306202Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.284390106Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.285558588Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.290338887Z 61 PC: 151d1 | Open file (Filename = 'DSWAP.EXE')
2018-12-17T21:51:22.297777424Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.300747696Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.302152261Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.309451355Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.312229125Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.314559721Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.320317364Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.323375186Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.326157322Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.327854128Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.331405376Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.333072652Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.337124334Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.338960362Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.342979714Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.344905505Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.348733552Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.350720672Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.353976643Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.355906727Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.360090826Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.361794643Z 64 PC: 151ad | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:51:22.369034783Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:22.378535834Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.381120066Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.384371884Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.387227407Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.390481596Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.392713361Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.39577143Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.39879969Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.406092628Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.40815Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.41483424Z 61 PC: 151d1 | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T21:51:22.423292564Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.425273104Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.42812038Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.434923888Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.439305873Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.441259482Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.447842947Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.449620136Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.454340652Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.456328123Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.45895672Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.462665165Z 61 PC: 151d1 | Open file (Filename = 'WSWAP.EXE')
2018-12-17T21:51:22.472124572Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.473770306Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.476137428Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.482533108Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.486569983Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.488586846Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.495840394Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.498059052Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.501237559Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.504390339Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.507537728Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.510286478Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.513016034Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.515752405Z 63 PC: 1518e | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:51:22.518589743Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.521244083Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.524337985Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.527499572Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.531032198Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.53369003Z 63 PC: 1518e | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:51:22.536244478Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.538430948Z 64 PC: 151ad | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:51:22.544814143Z 64 PC: 151ad | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:51:22.554079412Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.555533277Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.559687606Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.561633824Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.564825129Z 66 PC: 15179 | Move file pointer
2018-12-17T21:51:22.567361731Z 64 PC: 151ad | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:51:22.570184155Z 87 PC: 15143 | Get or set file date and time
2018-12-17T21:51:22.573248244Z 62 PC: 151c1 | Close file
2018-12-17T21:51:22.580532554Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.582618322Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.589067858Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.591076337Z 78 PC: 15219 | Find first file
2018-12-17T21:51:22.597263597Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.599661719Z 78 PC: 15219 | Find first file
2018-12-17T21:51:22.606711314Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.608039927Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.612465226Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.614179041Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.617395102Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.619908793Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.622893057Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.624761538Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.627973384Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.63081919Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.633970976Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.636856557Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.639934177Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.642114696Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.645414737Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.646537375Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.650676458Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.651962458Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.65639889Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.657562791Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.661773876Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.663089442Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.66724219Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.668536748Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.672706306Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.674066368Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.677302806Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.679838671Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.682882611Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.684564124Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.68778818Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.690194744Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.694197321Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.696744436Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.69991536Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.702272911Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.705631017Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.706901993Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.71095804Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.712018226Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.715827814Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.717155815Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.720187085Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.722262104Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.725487974Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.727605015Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.7307546Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.733303043Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.736523291Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.738945887Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.742181534Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.74462808Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.748063631Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.749382708Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.753853212Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.755209605Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.759771789Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.761089678Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.765526941Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.76684307Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.770995312Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.772251888Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.776585994Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.778970111Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.78261723Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.785270409Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.788435301Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.791003857Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.79423899Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.796709589Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.7999506Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.802607718Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.805854827Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.807704903Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.811563732Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.812908637Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.817660188Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.81907781Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.823823993Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.825156401Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.829695136Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.830725137Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.834468084Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.835418349Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.839741699Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.841293325Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.844441412Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.846709416Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.849642073Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.851443953Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.854577663Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.858498145Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.861537193Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.862566168Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.867592498Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.868631665Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.873464965Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.874525766Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.879470917Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.880899643Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.884417104Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.887393623Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.890734548Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.893405796Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.89670155Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.899429299Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.902725906Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.905414174Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.90869961Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.910377974Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.913386481Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.914775888Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.917590755Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.919247927Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.922204538Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.924485082Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.927581125Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.928683661Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.932714758Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.934049859Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.937637918Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.938907749Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.942669604Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.943933372Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.947759799Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.948968094Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.952166885Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.954528099Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.958530569Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.960953935Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.964182874Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.966503004Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.969688023Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.97205036Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.975276349Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.977501261Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.980709402Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.98294554Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.986165737Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.987669763Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.991448577Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.992747718Z 79 PC: 15219 | Find next file
2018-12-17T21:51:22.997180467Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:22.998489886Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.002259267Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.003562406Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.007685354Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.008920057Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.013432726Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.014698888Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.017970839Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.020166116Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.023458842Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.025437269Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.028681738Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.031109188Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.03451294Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.035816744Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.040878525Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.042206484Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.045836737Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.047555057Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.050866175Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.053006127Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.056320976Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.058610854Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.061927191Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.063904224Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.067118111Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.068400573Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.072645506Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.073974421Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.077929115Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.079376993Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.082668119Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.084850224Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.088103255Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.09036378Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.093647851Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.096047944Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.099250396Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.100722897Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.114274164Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.115500622Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.120294049Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.121908357Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.125920885Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.12706763Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.131842886Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.133075033Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.138619559Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.139937895Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.14502497Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:23.153086915Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.154162841Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.160446039Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.161817197Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.166339638Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.167688403Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.172194173Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.173485595Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.176893423Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.179154426Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.18254133Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.185189628Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.188405663Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.191498472Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.19457239Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.196175704Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.199522584Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.200848094Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.205091343Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.206590498Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.209742254Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.212126345Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.215306624Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.218238109Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.221292806Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.224012454Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.227990785Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.229395562Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.237044038Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.238412995Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.243245888Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.24467466Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.249190429Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.250787702Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.254092177Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.256436705Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.259792346Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.261200397Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.265995331Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.267339399Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.271102997Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.272697396Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.276207311Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.277609765Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.280619717Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.282735381Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.285871459Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.287643856Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.290653454Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.292257568Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.295418053Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.296455215Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.300069966Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.30103716Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.30699023Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.308021095Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.310944303Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.312406856Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.315613559Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.317817361Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.323923783Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.32514253Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.3295016Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.330667492Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.334314221Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.336497397Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.340043271Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.341334679Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.345952682Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.347499789Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.350721005Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.353198378Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.356489378Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.358210713Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.361361047Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.363291057Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.366176731Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.367467613Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.371084907Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.372090631Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.375578987Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.376478074Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.379814096Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.381950609Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.385019044Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.387368613Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.390417727Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.393068338Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.39611574Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.397316475Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.400691557Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.401860967Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.408329911Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.409293516Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.412867148Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.41407427Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.417348631Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.4211797Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.424356743Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.426285682Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.429535527Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.430860679Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.435287793Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.43630769Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.439803401Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.440861055Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.444643414Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.445871208Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.448731807Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.450432186Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.453512525Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.455488066Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.458608178Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.461025864Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.464448034Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.465797655Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.470213114Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.47189133Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.475151155Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.478122263Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.481352126Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.483850474Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.487782296Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.48901262Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.495285581Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.496618471Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.501415259Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.502790365Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.507304393Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.509032885Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.512358854Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.514874387Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.518585665Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.51995062Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.524463064Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.52621687Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.530119145Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.548229452Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.551640951Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.553069314Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.557762981Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.559674183Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.563039224Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.565659281Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.57402699Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.577741Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.583208382Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.584525572Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.587930123Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.590952665Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.594390039Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.596995111Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.60060283Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.602033688Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.606614958Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.608501039Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.61486572Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.617482244Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.621287357Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.626448665Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.631880098Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.633856852Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.637310461Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.639918724Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.643791254Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.645211366Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.650104765Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.651592305Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.656126756Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.657916756Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.661268788Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.663774411Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.667447884Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.668784146Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.67325979Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.674954138Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.678255681Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.680773557Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.684453936Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.685892783Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.690018501Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.691191377Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.694383482Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.696904615Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.700197601Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.702551738Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.705828234Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.707352137Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.714592628Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.715926913Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.720282271Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.721603983Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.725215824Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.727042288Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.730333055Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.732690547Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.735936956Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.738281425Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.74158631Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:23.747858454Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.750185319Z 78 PC: 15219 | Find first file
2018-12-17T21:51:23.758741505Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.761393039Z 78 PC: 15219 | Find first file
2018-12-17T21:51:23.767668337Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.769013433Z 78 PC: 15219 | Find first file
2018-12-17T21:51:23.7761524Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.777540828Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.780848483Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.783058702Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.786086611Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:23.793685054Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.794798012Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.798991803Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.800306213Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.803604282Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.805425937Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.812367236Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.813761137Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.818225029Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.820060764Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.823419906Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.82608203Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.82956288Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.832182732Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.835234755Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.836304457Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.839996693Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.841026463Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.845037303Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.846908239Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.853669056Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.855710417Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.859549904Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.861270451Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.86527266Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:23.871119803Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.872581462Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.877111201Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.878524111Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.882317008Z 26 PC: 1520f | Set disk transfer address
2018-12-17T21:51:23.883749076Z 79 PC: 15219 | Find next file
2018-12-17T21:51:23.886559312Z 59 PC: 151dd | Change current directory
2018-12-17T21:51:23.891157187Z 14 PC: 15143 | Set default drive (Drive = 'F')
2018-12-17T21:51:23.892632975Z 25 PC: 15143 | Get default drive
2018-12-17T21:51:23.894128077Z 14 PC: 15143 | Set default drive (Drive = 'A')
2018-12-17T21:51:23.896746164Z 64 PC: 151ad | Write file or device (Write 17 bytes on handle 2)
2018-12-17T21:51:23.901454761Z 76 PC: 15143 | Terminate with return code (Return code = '0')