Sample viewer

vx.netlux.org/Virus.DOS.HLLP.4417

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:48.251937377Z 48 PC: 12a4c | Get DOS version
2018-12-17T22:56:48.254519161Z 53 PC: 12ba8 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:48.256340315Z 53 PC: 12bb5 | Get interrupt vector (Interrupt = '4' AKA 'Auxiliary output')
2018-12-17T22:56:48.257956353Z 53 PC: 12bc2 | Get interrupt vector (Interrupt = '5' AKA 'Printer output')
2018-12-17T22:56:48.260640941Z 53 PC: 12bcf | Get interrupt vector (Interrupt = '6' AKA 'Direct console I/O')
2018-12-17T22:56:48.262252801Z 37 PC: 12be3 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:48.26398607Z 74 PC: 12b19 | Reallocate memory
2018-12-17T22:56:48.268136884Z 37 PC: 13b56 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:56:48.269978917Z 61 PC: 13401 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:48.276832774Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:48.279271218Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:48.290030838Z 62 PC: 13486 | Close file
2018-12-17T22:56:48.292053982Z 14 PC: 138fa | Set default drive (Drive = 'C')
2018-12-17T22:56:48.295213502Z 25 PC: 138eb | Get default drive
2018-12-17T22:56:48.297410774Z 71 PC: 13a37 | Get current directory
2018-12-17T22:56:48.300057179Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:48.305203835Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:48.306930071Z 78 PC: 139ff | Find first file
2018-12-17T22:56:48.314065407Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.315383555Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.317993953Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.320560308Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.323733233Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:48.331739336Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:48.333519053Z 78 PC: 139ff | Find first file
2018-12-17T22:56:48.342801434Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.345840198Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.349496903Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.35109053Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.355951408Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.357498667Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.361092925Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.363887379Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.379048134Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.380448968Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.386380931Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.388225959Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.392363909Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.395008491Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.398660388Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.399956364Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.403912523Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.406569849Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.410166951Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.413019825Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.416530606Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.418031018Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.422241544Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.424700587Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.428154631Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.430501053Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.4338557Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.435128994Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.43904137Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.440688657Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.444232009Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.446603648Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.4536574Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.45483803Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.45800265Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.45998682Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.463279741Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.464517839Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.468756519Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.47009755Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.473437891Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.475603843Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.478847782Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.479961005Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.484176901Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.485483428Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.488788763Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.490825542Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.494139182Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.495360278Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.499865358Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.501368374Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.504935541Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.507127432Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.511526482Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.513011845Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.517387362Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.518515533Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.521026955Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.522709368Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.525202686Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.526228986Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.529385139Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.530518661Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.535261678Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.53683682Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.539234358Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.540261719Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.543440275Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.544540213Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.547382607Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.550327023Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.553061855Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.554538702Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.558785166Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:48.560905302Z 78 PC: 139ff | Find first file
2018-12-17T22:56:48.567638662Z 61 PC: 13401 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:48.575256906Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:48.578022706Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:48.587615521Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:48.589737832Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:48.93350757Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:48.935596477Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:48.942320689Z 62 PC: 13486 | Close file
2018-12-17T22:56:48.950936208Z 61 PC: 13401 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:48.958938583Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:48.960948011Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:48.964578327Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:48.975858515Z 62 PC: 13486 | Close file
2018-12-17T22:56:48.98410993Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:48.986578371Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:48.992034048Z 61 PC: 13401 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:49.001022708Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.003907903Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:49.014658916Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.016345157Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.02569781Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.02887275Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:49.035426302Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.044477669Z 61 PC: 13401 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:49.052376089Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.055292853Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.057877904Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.073347839Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.082508132Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.084896933Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.089161231Z 61 PC: 13401 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:56:49.096745821Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.09889935Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:49.108620858Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.110845761Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.119958073Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.122271343Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:49.129520813Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.137699009Z 61 PC: 13401 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:56:49.145968697Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.147837811Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.149840657Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.161500068Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.180992837Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:49.187154292Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.188988681Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.196238161Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.198610962Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.202069815Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:49.208605814Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:49.210811621Z 78 PC: 139ff | Find first file
2018-12-17T22:56:49.220187589Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.221677471Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.226108611Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.227763593Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.232136315Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:49.239974361Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:49.242584849Z 78 PC: 139ff | Find first file
2018-12-17T22:56:49.254540938Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.2574834Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.261597375Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.263050357Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.267576617Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.269131671Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.272721761Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.275182658Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.278653814Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.279886882Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.284457375Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.286108209Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.289799339Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.291743815Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.294861717Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.296057385Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.300005969Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.301089726Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.304204162Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.305971836Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.309483658Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.311014517Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.315816775Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.317274807Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.320804984Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.323840692Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.327758447Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.329519228Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.334271102Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.335953445Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.339702795Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.3414716Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.349365101Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.351499294Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.354983324Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.356346577Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.360102318Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.36211928Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.365589705Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.368122207Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.371704573Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.373109234Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.377723649Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.379217367Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.382664228Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.385209965Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.389006793Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.394679829Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.400140466Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.401395476Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.405495094Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.407936954Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.411724415Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.412862595Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.417754894Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.420196053Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.424000346Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.427085827Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.432140441Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.434636013Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.439484758Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.44101753Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.444768202Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.447268714Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.454103233Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.455461347Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.460549834Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.462136387Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.465793393Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.468177856Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.471601182Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.47279664Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.477143813Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.478512527Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.481915846Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.483866503Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.487212814Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.48879569Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.492467033Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.493698108Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.49786904Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.499124771Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.502370072Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.503675035Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.507233296Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.508392315Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.512278842Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.513901814Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.517207358Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.51936266Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.522211026Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.523318258Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.527461347Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.528969042Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.531790767Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.534077025Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.539880397Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.541070374Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.545329922Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.54808927Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.55243436Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.555509021Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.559025011Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.561993512Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.566703197Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.568230168Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.572174915Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.575397965Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.580410238Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.582067675Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.58677209Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.588528332Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.592541657Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.595853324Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.599590059Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.601785978Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.605639784Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.608435851Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.613530229Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.615016433Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.61850407Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.620730666Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.62420047Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.625395707Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.629829935Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.631108068Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.634391471Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.636936836Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.64407087Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.6453689Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.649886384Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.652121075Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.655941428Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.659113732Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.662856419Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.664359095Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.670692221Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.671930429Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.67814289Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.679923488Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.686366601Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.689794036Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.69414142Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.695808314Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.701429171Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.702761717Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.706116053Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.708251959Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.712059027Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.713748844Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.718350255Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.719579647Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.723008824Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.725490621Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.730177412Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.732778693Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.736645774Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.740024276Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.744684066Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.746031309Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.753013788Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.755086966Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.758715157Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.759883193Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.764077509Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.765363928Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.768698127Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.770990677Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.775256437Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.776491259Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.780785292Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.782063666Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.785755577Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.78771993Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.796636044Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.799292178Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.803566744Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.805252503Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.809949835Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.815053261Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.818849588Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.821346763Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.825452472Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.827067118Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.831905676Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.833516124Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.837367995Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.840063133Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.843841156Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.845473305Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.850404817Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.852782948Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.861000408Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:49.862456726Z 78 PC: 139ff | Find first file
2018-12-17T22:56:49.869510307Z 61 PC: 13401 | Open file (Filename = 'GDI.EXE')
2018-12-17T22:56:49.878138089Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.880405553Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:49.889357072Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.892385015Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.900917447Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.90241322Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:49.908608708Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.916281985Z 61 PC: 13401 | Open file (Filename = 'GDI.EXE')
2018-12-17T22:56:49.922882194Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.925786365Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.927870242Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.936510638Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.945976184Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:49.947083296Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:49.949831242Z 61 PC: 13401 | Open file (Filename = 'USER.EXE')
2018-12-17T22:56:49.957832697Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:49.960015901Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:49.968749321Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.971408601Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:49.979591806Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:49.982355452Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:49.989709689Z 62 PC: 13486 | Close file
2018-12-17T22:56:49.999562434Z 61 PC: 13401 | Open file (Filename = 'USER.EXE')
2018-12-17T22:56:50.00819785Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.010828656Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.01279359Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.023956939Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.033055736Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.034736696Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.039778175Z 61 PC: 13401 | Open file (Filename = 'DOSX.EXE')
2018-12-17T22:56:50.047460299Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.049589041Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.059473846Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.061626563Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.071929715Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.07438981Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.081212908Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.090180147Z 61 PC: 13401 | Open file (Filename = 'DOSX.EXE')
2018-12-17T22:56:50.104691401Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.106892238Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.109680661Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.123238622Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.132584684Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.134770563Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.139034981Z 61 PC: 13401 | Open file (Filename = 'KRNL286.EXE')
2018-12-17T22:56:50.147564838Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.14991143Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.158991783Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.162441819Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.17172902Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.173665321Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.182790037Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.192936083Z 61 PC: 13401 | Open file (Filename = 'KRNL286.EXE')
2018-12-17T22:56:50.202010934Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.205357667Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.207162741Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.217566711Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.228013703Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.229786747Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.234853343Z 61 PC: 13401 | Open file (Filename = 'KRNL386.EXE')
2018-12-17T22:56:50.243747815Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.245817507Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.254056227Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.256769057Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.266606373Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.268253589Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.274754332Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.282537956Z 61 PC: 13401 | Open file (Filename = 'KRNL386.EXE')
2018-12-17T22:56:50.290553998Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.293018481Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.2949166Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.30550628Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.314252273Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.315732777Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.323985102Z 61 PC: 13401 | Open file (Filename = 'WIN386.EXE')
2018-12-17T22:56:50.338786151Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.340692985Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.350802463Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.352541442Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.364423733Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.366987794Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.373600125Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.382469611Z 61 PC: 13401 | Open file (Filename = 'WIN386.EXE')
2018-12-17T22:56:50.391063148Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.393367671Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.396853434Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.408889043Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.418130208Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.421162669Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.425411878Z 61 PC: 13401 | Open file (Filename = 'DSWAP.EXE')
2018-12-17T22:56:50.433647102Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.437040221Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.446779272Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.449793359Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.45864946Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.460869865Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.468978469Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.47888227Z 61 PC: 13401 | Open file (Filename = 'DSWAP.EXE')
2018-12-17T22:56:50.486964306Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.489130539Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.490496657Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.498429942Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.504917289Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.506097147Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.511875712Z 61 PC: 13401 | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T22:56:50.517397364Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.518868921Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.525445485Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.531119543Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.53898991Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.542045676Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.549805034Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.559469134Z 61 PC: 13401 | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T22:56:50.568659163Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.574669193Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.577938539Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.588606526Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.597408696Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.600365225Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.606949744Z 61 PC: 13401 | Open file (Filename = 'WSWAP.EXE')
2018-12-17T22:56:50.616945497Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.619649431Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:50.627908469Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.631062158Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.646162589Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.648079143Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:50.656072772Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.665008392Z 61 PC: 13401 | Open file (Filename = 'WSWAP.EXE')
2018-12-17T22:56:50.672643697Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:50.677150701Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:50.679844426Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:50.690699665Z 62 PC: 13486 | Close file
2018-12-17T22:56:50.701061256Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.702563491Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.711214736Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:50.720794538Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.722252028Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.732352488Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.735572132Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.739220441Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.747722456Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.752005068Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.754348354Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.758368802Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.759838375Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.764301286Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.766038793Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.769646355Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.771897578Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.775497246Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.777193496Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.781193607Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.782664382Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.788381059Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.790124037Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.793729766Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.795906819Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.799219958Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.802119029Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.806037797Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.807315359Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.811585287Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.815447638Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.822170468Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.824818687Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.82946911Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.830752153Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.834784104Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.836301166Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.84072866Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.842167525Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.845464514Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.848027423Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.851692954Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.853200208Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.858083329Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.85957297Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.863429461Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.865973573Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.869707013Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.872011586Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.876024712Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.877460942Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.881941205Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.883783188Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.88738996Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.890068917Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.893649077Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.895322754Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.899845818Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.901273242Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.905678355Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.908104315Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.912972979Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.915336212Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.922873182Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.924404732Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.928926243Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.930987319Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.935995915Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.937438147Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.940911617Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.943846967Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.947682407Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.949612316Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.954303235Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.955762289Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.960965342Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.962585568Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.966213448Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.96876733Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.972473829Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.974833656Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.978728448Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.980182802Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.98482971Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.986321384Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.991946821Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:50.99440381Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:50.998008427Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.000354739Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.004056929Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.005494422Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.009677136Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.011084482Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.016094421Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.017847006Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.024802444Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.027374169Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.031004985Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.033387254Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.036756188Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.037926388Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.042406722Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.047085538Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.051069639Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.052631205Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.056536888Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.058997905Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.06293073Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.064650714Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.075191582Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.076433106Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.080889564Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.082209235Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.085703696Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.087859769Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.091662339Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.094624838Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.098413472Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.100037094Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.105158704Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.106749455Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.111749195Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.113359352Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.117002001Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.119760156Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.123434063Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.125974129Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.137754418Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.139412565Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.144325402Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.147184167Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.1510102Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.15429713Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.158372101Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.160981648Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.165307Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.167029198Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.172381651Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.174096075Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.178933149Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.181024371Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.184871704Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.187630271Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.191894338Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.193594314Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.198904868Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.200396242Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.204991102Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.20687857Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.210517622Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.212921301Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.216924478Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.218380906Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.223208522Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.22462225Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.229117843Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.230964585Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.235325303Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.237927796Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.244868616Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.246524098Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.251037084Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.252496818Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.25715133Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.258589774Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.262175014Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.264836318Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.268455413Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.270798297Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.274743224Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.276154047Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.280948662Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.282372619Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.286126316Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.288586131Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.292177493Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.294595249Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.298621268Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.300043311Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.305070343Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.306559333Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.311287281Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.313522915Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.31715267Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.319931724Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.323564504Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.325917017Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.32987022Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.331291102Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.335859942Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.337707645Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.344595686Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.347254174Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.350878087Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.353244356Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.357085909Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.358522651Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.362877949Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.364281908Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.368780587Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.370389932Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.373962248Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:51.381775559Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:51.383405764Z 78 PC: 139ff | Find first file
2018-12-17T22:56:51.393580083Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.396075815Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.399588269Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.40204088Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.405467984Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:51.406903944Z 78 PC: 139ff | Find first file
2018-12-17T22:56:51.414857357Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:51.421431748Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.424043448Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.428114372Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.42983646Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.43424569Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.435938773Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.440438613Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.442153697Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.447349506Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.449090449Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.452949495Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.455081754Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.459538703Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.461926372Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.465546729Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.467097174Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.473011644Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.474732529Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.479671696Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.481224846Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.488316449Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.490144226Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.493735348Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.496116785Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.499732052Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:51.501189813Z 78 PC: 139ff | Find first file
2018-12-17T22:56:51.508493705Z 61 PC: 13401 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:56:51.515810271Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.518564369Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:51.527538782Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.529489851Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.588032899Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.590020886Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:51.598762552Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.610578127Z 61 PC: 13401 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:56:51.619032362Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.621225586Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.623025199Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.63517902Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.643619329Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.645891381Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.649820859Z 61 PC: 13401 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:56:51.657362748Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.660902684Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:51.669181018Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.671850417Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.680258335Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.682550524Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:51.689230603Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.697051418Z 61 PC: 13401 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:56:51.705521102Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.707863165Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.710640527Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.720837338Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.729866404Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.732016236Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.735769533Z 61 PC: 13401 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:56:51.748065862Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.749774554Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:51.758291687Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.760465134Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.768666233Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.771708272Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:51.778460418Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.788026804Z 61 PC: 13401 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:56:51.796815808Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.800184582Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.803067311Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.812943099Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.828411051Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.830422252Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.834256982Z 61 PC: 13401 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:56:51.842976165Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.844919058Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:51.854056909Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.856376029Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.865251416Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.868584221Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:51.875145418Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.884969969Z 61 PC: 13401 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:56:51.892828424Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.895333544Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.898311763Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.909634121Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.919542129Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:51.921288091Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:51.924982578Z 61 PC: 13401 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:56:51.934535047Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.936332076Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:51.945818161Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.948192095Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.956681315Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.959954439Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:51.966740498Z 62 PC: 13486 | Close file
2018-12-17T22:56:51.975695615Z 61 PC: 13401 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:56:51.983574959Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:51.985718619Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:51.989081873Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:51.999833277Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.0089886Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.010952572Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.017676394Z 61 PC: 13401 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:56:52.026319444Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.028460349Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.038349512Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.04078979Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.04949111Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.051994135Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.058799751Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.068595949Z 61 PC: 13401 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:56:52.076641085Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.078796707Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.083747055Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.093786069Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.103848788Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.105689349Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.110563102Z 61 PC: 13401 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:56:52.118750355Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.120838091Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.130237473Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.13226773Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.142623901Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.144710734Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.151706958Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.161152126Z 61 PC: 13401 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:56:52.168790106Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.171950628Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.174378252Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.184315846Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.194948367Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.196567641Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.201682999Z 61 PC: 13401 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:56:52.210462515Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.21248062Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.221742263Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.223793269Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.233043891Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.235005499Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.241507684Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.250431612Z 61 PC: 13401 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:56:52.257941752Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.261119998Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.262848838Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.273711532Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.283931987Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.285394136Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.29005581Z 61 PC: 13401 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:56:52.298013272Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.300122457Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.309936759Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.311870845Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.321390944Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.323534294Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.330694115Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.340171574Z 61 PC: 13401 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:56:52.347848738Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.351360361Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.354161247Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.363677619Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.376103371Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.377720721Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.382948259Z 61 PC: 13401 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:56:52.390814249Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.392976945Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.402651645Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.404444195Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.414004349Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.41569639Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.421893832Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.431340282Z 61 PC: 13401 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:56:52.438533327Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.44188622Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.443511055Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.453475569Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.46312403Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.464681899Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.469652845Z 61 PC: 13401 | Open file (Filename = 'CALC.EXE')
2018-12-17T22:56:52.477669337Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.479746041Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.489453603Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.491478309Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.501425782Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.503648972Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.510218844Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.51831171Z 61 PC: 13401 | Open file (Filename = 'CALC.EXE')
2018-12-17T22:56:52.525711282Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.528499604Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.530619269Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.541408485Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.550008143Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.551234278Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.555661081Z 61 PC: 13401 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:56:52.562094727Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.564942982Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.572667786Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.574266081Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.582416314Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.583993279Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.591111281Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.598111483Z 61 PC: 13401 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:56:52.605986809Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.607644346Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.609052513Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.618872546Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.626265105Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.629031446Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.6320119Z 61 PC: 13401 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:56:52.6404531Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.642147536Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.649504698Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.652047158Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.659250822Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.662234642Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.668136208Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.676305988Z 61 PC: 13401 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:56:52.684493742Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.686297864Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.689632313Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.697554087Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.706070489Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.707216183Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.710228256Z 61 PC: 13401 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:56:52.718229379Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.71979369Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.727673445Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.729244979Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.73699982Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.73919144Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.744714915Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.753247667Z 61 PC: 13401 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:56:52.759630518Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.763515392Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.764973634Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.773962534Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.78169389Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.78310341Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.788469018Z 61 PC: 13401 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:56:52.795962236Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.798923243Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.806960464Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.808609335Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.817438043Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.819170892Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.826211889Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.834464676Z 61 PC: 13401 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:56:52.844204117Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.853455421Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.855020784Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.867605755Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.876150209Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.878463839Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.885369352Z 61 PC: 13401 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T22:56:52.894623211Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.896545805Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.905218281Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.907219744Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.915634885Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.918803793Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:52.925962974Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.936358418Z 61 PC: 13401 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T22:56:52.944202466Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.947776175Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.9497943Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.957913865Z 62 PC: 13486 | Close file
2018-12-17T22:56:52.966273221Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:52.96779891Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:52.97230394Z 61 PC: 13401 | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T22:56:52.978679517Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:52.980265339Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:52.988925941Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:52.990663218Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:52.998710988Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.000390837Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.00694505Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.014612465Z 61 PC: 13401 | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T22:56:53.021579574Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.02468896Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.026161509Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.035963317Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.043380673Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.045324307Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.04844237Z 61 PC: 13401 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:56:53.054783431Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.057368962Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.064525057Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.067314431Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.074800576Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.077198905Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.083546309Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.090802321Z 61 PC: 13401 | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:56:53.098887111Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.101361163Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.104783928Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.112356415Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.119441846Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.120439733Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.122982003Z 61 PC: 13401 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:56:53.128944252Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.130231622Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.136608652Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.137871888Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.144637257Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.146042589Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.150691279Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.157266051Z 61 PC: 13401 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:56:53.162546749Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.164460306Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.165705087Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.174641779Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.183210389Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.185330254Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.188670945Z 61 PC: 13401 | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T22:56:53.195895739Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.19781637Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.206435054Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.209914446Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.218473958Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.221515848Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.229255318Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.23730875Z 61 PC: 13401 | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T22:56:53.244290507Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.246174218Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.248226106Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.255321977Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.262176184Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.26321678Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.266324152Z 61 PC: 13401 | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T22:56:53.271684119Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.273124658Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.280017117Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.281482221Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.28834292Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.289912912Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.295499445Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.301074627Z 61 PC: 13401 | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T22:56:53.306691718Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.309168335Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.310722737Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.320391435Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.328380936Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.330630395Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.334889252Z 61 PC: 13401 | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T22:56:53.343168749Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.344991406Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.353298294Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.357182035Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.366747761Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.369091146Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.375353159Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.384087922Z 61 PC: 13401 | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T22:56:53.391419646Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.393297647Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.395094215Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.404357691Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.412899441Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.414115287Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.418464734Z 61 PC: 13401 | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T22:56:53.425867933Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.429203565Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.436996626Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.440121061Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.44669492Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.447814315Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.452559997Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.459329214Z 61 PC: 13401 | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T22:56:53.465310389Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.466856596Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.469335327Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.477524193Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.486689194Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.488419597Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.496474321Z 61 PC: 13401 | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T22:56:53.504998207Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.507161965Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.517056297Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.51871726Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.527953285Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.530064915Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.537803215Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.545860744Z 61 PC: 13401 | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T22:56:53.553652583Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.555753934Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.557250568Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.567751811Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.577058869Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.580012864Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.583829108Z 61 PC: 13401 | Open file (Filename = 'RECORDER.EXE')
2018-12-17T22:56:53.592791989Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.595002265Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.604699296Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.606694057Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.615103899Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.617771564Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.624801581Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.633569516Z 61 PC: 13401 | Open file (Filename = 'RECORDER.EXE')
2018-12-17T22:56:53.640862027Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.644356747Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.645914286Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.656637567Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.664927443Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.666366989Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.6706281Z 61 PC: 13401 | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T22:56:53.67800472Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.681007635Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.688865439Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.691443336Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.699624918Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.701124136Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.707251647Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.71541765Z 61 PC: 13401 | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T22:56:53.723502541Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.725476752Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.728354312Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.737742052Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.746749157Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.747989118Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.751556095Z 61 PC: 13401 | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T22:56:53.760112291Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.762008697Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.770945539Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.772774067Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.782581185Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.784367844Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.791559465Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.799824945Z 61 PC: 13401 | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T22:56:53.807945984Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.809824585Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.812120653Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.822036686Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.83031476Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.832749457Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.836198061Z 61 PC: 13401 | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T22:56:53.845067376Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.847133271Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.857304904Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.858979443Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.868029337Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.869749832Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.876854109Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.884998631Z 61 PC: 13401 | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T22:56:53.892596337Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.896240598Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.898219088Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.90892196Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.918672101Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:53.921098123Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:53.926434867Z 61 PC: 13401 | Open file (Filename = 'WINMINE.EXE')
2018-12-17T22:56:53.934418547Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.936848786Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:53.945216669Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.94850423Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:53.961305677Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:53.964586997Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:53.971807432Z 62 PC: 13486 | Close file
2018-12-17T22:56:53.980886643Z 61 PC: 13401 | Open file (Filename = 'WINMINE.EXE')
2018-12-17T22:56:53.995946046Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:53.997991612Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.000803729Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:54.010783091Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.021017172Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.034984803Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.043367443Z 61 PC: 13401 | Open file (Filename = 'CLOCK.EXE')
2018-12-17T22:56:54.050944629Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:54.053687116Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:54.063017147Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.064723715Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:54.073673903Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.075661369Z 64 PC: 136b5 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T22:56:54.083801123Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.092041957Z 61 PC: 13401 | Open file (Filename = 'CLOCK.EXE')
2018-12-17T22:56:54.100774174Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:54.103239559Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.105310322Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:54.116367561Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.125375106Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.128191031Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.135279298Z 61 PC: 13401 | Open file (Filename = 'TASKMAN.EXE')
2018-12-17T22:56:54.143544056Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:54.145373295Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:54.154953908Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.157448628Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.15997082Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.167913563Z 61 PC: 13401 | Open file (Filename = 'WINVER.EXE')
2018-12-17T22:56:54.17592209Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:54.179135081Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:54.187120765Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.190576112Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.192031989Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.200701118Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:54.205258516Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.213122732Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.220007917Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.222652619Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.226164131Z 26 PC: 13a17 | Set disk transfer address
2018-12-17T22:56:54.227685361Z 79 PC: 13a1b | Find next file
2018-12-17T22:56:54.232075164Z 26 PC: 139f5 | Set disk transfer address
2018-12-17T22:56:54.233620119Z 78 PC: 139ff | Find first file
2018-12-17T22:56:54.241208396Z 59 PC: 138d9 | Change current directory
2018-12-17T22:56:54.245409455Z 14 PC: 138fa | Set default drive (Drive = 'A')
2018-12-17T22:56:54.248632193Z 61 PC: 13401 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:54.262061091Z 68 PC: 13436 | I/O control for devices (Set for = '��')
2018-12-17T22:56:54.265110946Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.267004395Z 63 PC: 13569 | Read file or device (Read 4417 bytes on handle 5)
2018-12-17T22:56:54.276879391Z 66 PC: 136ec | Move file pointer
2018-12-17T22:56:54.279211135Z 64 PC: 136b5 | Write file or device (Write 4417 bytes on handle 5)
2018-12-17T22:56:54.295233489Z 62 PC: 13486 | Close file
2018-12-17T22:56:54.305977359Z 55 PC: 13b22 | Get or set switch character
2018-12-17T22:56:54.308573079Z 41 PC: 13bcb | Parse filename
2018-12-17T22:56:54.311672286Z 41 PC: 13bd9 | Parse filename
2018-12-17T22:56:54.313802361Z 75 PC: 13c19 | Execute program
2018-12-17T22:56:54.339416598Z 80 PC: 25439 | Set current PSP
2018-12-17T22:56:54.346136342Z 48 PC: 2543e | Get DOS version
2018-12-17T22:56:54.348892524Z 99 PC: 2bc20 | Get DBCS lead byte table pointer
2018-12-17T22:56:54.352174715Z 101 PC: 254c4 | Get extended country info
2018-12-17T22:56:54.355083884Z 99 PC: 254ca | Get DBCS lead byte table pointer
2018-12-17T22:56:54.357889188Z 74 PC: 2552c | Reallocate memory
2018-12-17T22:56:54.364992313Z 25 PC: 25563 | Get default drive
2018-12-17T22:56:54.367161151Z 37 PC: 25023 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:56:54.369864643Z 37 PC: 2502a | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:54.371921431Z 37 PC: 25031 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:54.377466746Z 74 PC: 241cc | Reallocate memory
2018-12-17T22:56:54.380090409Z 72 PC: 2420d | Allocate memory
2018-12-17T22:56:54.382115777Z 72 PC: 24245 | Allocate memory
2018-12-17T22:56:54.38531395Z 72 PC: 2424d | Allocate memory