Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Ascent.8080

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:57.766678321Z 53 PC: 13cba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:57.777474712Z 53 PC: 13cba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:57.779946986Z 53 PC: 13cba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:57.783359887Z 53 PC: 13cba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:57.789676975Z 53 PC: 13cba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:57.791462016Z 53 PC: 13cba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:57.79301702Z 53 PC: 13cba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:57.795140302Z 53 PC: 13cba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:57.796369667Z 53 PC: 13cba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:57.797614764Z 53 PC: 13cba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:57.818471193Z 53 PC: 13cba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:57.821993319Z 53 PC: 13cba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:57.82433886Z 53 PC: 13cba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:57.825906014Z 53 PC: 13cba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:57.828144234Z 53 PC: 13cba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:57.829982383Z 53 PC: 13cba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:57.831770953Z 53 PC: 13cba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:57.83466547Z 53 PC: 13cba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:57.836427312Z 53 PC: 13cba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:57.838225976Z 37 PC: 13ccf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:57.841054878Z 37 PC: 13cd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:57.842466483Z 37 PC: 13cdf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:57.843712127Z 37 PC: 13ce7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:57.851422496Z 68 PC: 149b7 | I/O control for devices (Set for = '')
2018-12-17T22:56:57.853222182Z 44 PC: 152c2 | Get time 0x152c2: mov word ptr [0x2d2], cx
0x152c6: mov word ptr [0x2d4], dx
0x152ca: retf
0x152cb: call 0x15312
0x152ce: jb 0x152df
0x152d0: mov cx, word ptr es:[di + 4]
0x152d4: cmp cx, 1
0x152d7: je 0x152df
0x152d9: xor bx, bx
0x152db: push cs
0x152dc: call 0x2467f
0x152df: retf 4
0x152e2: call 0x15312
0x152e5: jb 0x152fa
0x152e7: mov ax, cx
0x152e9: mov dx, bx
0x152eb: mov cx, word ptr es:[di + 4]
0x152ef: cmp cx, 1
0x152f2: je 0x152fa
0x152f4: xor bx, bx
2018-12-17T22:56:57.856053422Z 42 PC: 13897 | Get date 0x13897: xor ah, ah
0x13899: les di, ptr [bp + 6]
0x1389c: stosw word ptr es:[di], ax
0x1389d: mov al, dl
0x1389f: les di, ptr [bp + 0xa]
0x138a2: stosw word ptr es:[di], ax
0x138a3: mov al, dh
0x138a5: les di, ptr [bp + 0xe]
0x138a8: stosw word ptr es:[di], ax
0x138a9: xchg ax, cx
0x138aa: les di, ptr [bp + 0x12]
0x138ad: stosw word ptr es:[di], ax
0x138ae: pop bp
0x138af: retf 0x10
0x138b2: push bp
0x138b3: mov bp, sp
0x138b5: mov cx, word ptr [bp + 0xa]
0x138b8: mov dh, byte ptr [bp + 8]
0x138bb: mov dl, byte ptr [bp + 6]
0x138be: mov ah, 0x2b
2018-12-17T22:56:57.859197802Z 48 PC: 144e7 | Get DOS version
2018-12-17T22:56:57.860906093Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:57.86749505Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:57.883034381Z 61 PC: 14325 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:57.888271578Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:57.894946198Z 62 PC: 14375 | Close file
2018-12-17T22:56:57.898369487Z 48 PC: 144e7 | Get DOS version
2018-12-17T22:56:57.900582019Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:57.907589891Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:57.92068674Z 61 PC: 14325 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:57.928889947Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:57.93086467Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:57.933068012Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:57.937408514Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:57.939083219Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:57.941150134Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:57.942997986Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:57.951546597Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:57.953635294Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:57.963134623Z 62 PC: 14375 | Close file
2018-12-17T22:56:57.971798888Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:57.973490679Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:57.974956123Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:57.976278097Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:57.977968778Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:57.98009395Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:57.981879124Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:57.983948663Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:57.985307484Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:57.986567567Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:57.989007808Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:57.991176647Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:57.992421228Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:57.994426052Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:58.001419483Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:58.00326449Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:58.005281359Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:58.007453933Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:58.009354489Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:58.011252268Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:58.013194695Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:58.014993691Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:58.01695703Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:58.019122057Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:58.020794546Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:58.031095727Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:58.032837414Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:58.034572997Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:58.036542764Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:58.03924563Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:58.041310847Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:58.043368494Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:58.045830651Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:58.048489792Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:58.050456965Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:58.053008479Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:58.054913839Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:58.057831579Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:58.061705734Z 48 PC: 144e7 | Get DOS version
2018-12-17T22:56:58.063875997Z 41 PC: 13b7c | Parse filename
2018-12-17T22:56:58.06596471Z 41 PC: 13b8a | Parse filename
2018-12-17T22:56:58.069527573Z 75 PC: 13b95 | Execute program
2018-12-17T22:56:58.090081281Z 9 PC: 1a71c | Display string (Could not find end pointer)
2018-12-17T22:56:58.093723338Z 76 PC: 1a721 | Terminate with return code (Return code = '0')
2018-12-17T22:56:58.098479048Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:58.100039155Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:56:58.101264416Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:58.103131969Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:56:58.104580012Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:58.106049965Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:56:58.10787558Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:58.109201414Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:58.110489368Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:58.112120134Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:58.113463441Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:58.114867311Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:58.117363884Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:58.118976501Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:56:58.120519044Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:58.122390597Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:56:58.123886528Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:58.125590426Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:56:58.127758553Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:58.129478143Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:56:58.131178598Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:58.133354196Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:56:58.134683855Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:58.136051805Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:56:58.142431871Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:58.145613919Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:56:58.147123347Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:58.14914271Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:56:58.150327538Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:58.152092035Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:56:58.154464612Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:58.156219603Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:56:58.157611688Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:58.159784313Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:56:58.161158021Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:58.1629118Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:56:58.164974984Z 53 PC: 13c2d | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:58.166570221Z 37 PC: 13c36 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:56:58.167936174Z 48 PC: 144e7 | Get DOS version
2018-12-17T22:56:58.170444478Z 61 PC: 14325 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:58.178476322Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:58.188379454Z 62 PC: 14375 | Close file
2018-12-17T22:56:58.198182492Z 61 PC: 14325 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:56:58.203288586Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:58.204981657Z 62 PC: 14375 | Close file
2018-12-17T22:56:58.213165099Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:58.224850306Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:58.22605262Z 78 PC: 139bb | Find first file
2018-12-17T22:56:58.233331367Z 25 PC: 14574 | Get default drive
2018-12-17T22:56:58.234475653Z 71 PC: 14587 | Get current directory
2018-12-17T22:56:58.243733033Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:58.246239231Z 78 PC: 139bb | Find first file
2018-12-17T22:56:58.25981876Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:58.266005886Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:58.277817691Z 61 PC: 14325 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:56:58.293970855Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:58.295977917Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:58.298442515Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:58.300027223Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:58.301463625Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:58.303507328Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:58.304879495Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:58.306609985Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:58.308638647Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:58.318151027Z 62 PC: 14375 | Close file
2018-12-17T22:56:58.320969701Z 61 PC: 14325 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:56:58.329556182Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:58.331263311Z 62 PC: 14375 | Close file
2018-12-17T22:56:58.535920497Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:58.655465695Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:56:58.657128003Z 79 PC: 139d8 | Find next file
2018-12-17T22:56:58.661054241Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:56:58.663492083Z 25 PC: 145d1 | Get default drive
2018-12-17T22:56:58.664813824Z 59 PC: 1463b | Change current directory
2018-12-17T22:56:58.671521674Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:58.673136162Z 78 PC: 139bb | Find first file
2018-12-17T22:56:58.684094165Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:58.692130655Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.055206983Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.063262032Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.065570873Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.068681026Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.070551175Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.072285773Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.075110393Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.076846398Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.078375728Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.08009892Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.085415297Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.087018239Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.092827266Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.094805564Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.110020089Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.11149175Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.112963731Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.136027494Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.150779352Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.158567085Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.161309036Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.169244277Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.18026858Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:56:59.182633661Z 25 PC: 145d1 | Get default drive
2018-12-17T22:56:59.183810726Z 59 PC: 1463b | Change current directory
2018-12-17T22:56:59.191024883Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:59.19267884Z 78 PC: 139bb | Find first file
2018-12-17T22:56:59.199364982Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.206176924Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.21685105Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.224269938Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.226056736Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.229070274Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.231104535Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.233060005Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.236076465Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.238137057Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.240441226Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.243649553Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.252552941Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.255829809Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.264745568Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.266898149Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.273765938Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.285653892Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:56:59.287069937Z 79 PC: 139d8 | Find next file
2018-12-17T22:56:59.291532209Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.299521182Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.31295013Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:59.322364596Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.324891369Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.327682199Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.329706904Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.332018951Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.333888544Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.336038963Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.338456836Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.340456205Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.349914971Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.352344546Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.3825698Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.38468424Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.387913497Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.389875675Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.393915649Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.409369039Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.424680778Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:59.433661645Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.436222883Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.443656948Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.457030017Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:56:59.459206259Z 25 PC: 145d1 | Get default drive
2018-12-17T22:56:59.460921346Z 59 PC: 1463b | Change current directory
2018-12-17T22:56:59.46867346Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:59.470681867Z 78 PC: 139bb | Find first file
2018-12-17T22:56:59.477877782Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.485513667Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.496711993Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.504639996Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.50708288Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.508745998Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.510401837Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.512809864Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.514452065Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.516121209Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.518860747Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.520731382Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.530505943Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.533845033Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.541650666Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.543802324Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.551684448Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.56287691Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:56:59.564561679Z 79 PC: 139d8 | Find next file
2018-12-17T22:56:59.569633437Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.576892974Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.588067693Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:59.597724696Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.600089971Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.602088738Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.604995277Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.607273417Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.609272774Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.611449097Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.612876344Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.614216126Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.620470998Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.62219609Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:59.627890648Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.629883563Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.637422824Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.651097139Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:56:59.65288959Z 79 PC: 139d8 | Find next file
2018-12-17T22:56:59.656979036Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.666108742Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.677948178Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:56:59.687470988Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.690424981Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.692798542Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.694825302Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.6977139Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.699569451Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.701692646Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.704955863Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.707432966Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.716389451Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.719378106Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.728805406Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.731685528Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.734807676Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.736886759Z 66 PC: 14457 | Move file pointer
2018-12-17T22:56:59.738756311Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:56:59.749371772Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.7589808Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:56:59.766753093Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.770186551Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.777302118Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.788802365Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:56:59.791290269Z 25 PC: 145d1 | Get default drive
2018-12-17T22:56:59.792529156Z 59 PC: 1463b | Change current directory
2018-12-17T22:56:59.798110819Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:56:59.801606326Z 78 PC: 139bb | Find first file
2018-12-17T22:56:59.822958921Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.845310723Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.858705001Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.8676075Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.870294841Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.872315988Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.874364789Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.877200486Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.879190626Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.881239918Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.885272348Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.887401148Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:56:59.896713149Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.900267668Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:56:59.908254623Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:56:59.911453741Z 62 PC: 14375 | Close file
2018-12-17T22:56:59.919000715Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.930770416Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:56:59.933468848Z 79 PC: 139d8 | Find next file
2018-12-17T22:56:59.937987566Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:56:59.956191394Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:56:59.967875251Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:56:59.976094105Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.978143859Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.98106543Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.982930293Z 66 PC: 1532c | Move file pointer
2018-12-17T22:56:59.984581111Z 66 PC: 1533a | Move file pointer
2018-12-17T22:56:59.987370848Z 66 PC: 15348 | Move file pointer
2018-12-17T22:56:59.989146909Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.991485798Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:56:59.993569351Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.003426112Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.006339628Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:00.01462903Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.016808277Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.024628669Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.035395948Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.037100523Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.042497614Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.049182158Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.059866248Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:00.069153301Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.071025097Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.072965414Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.076162168Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.078120301Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.080277015Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.083123037Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.085069118Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.087699315Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.097443452Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.099513277Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:00.10801116Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.109773507Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.120594455Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.13219647Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.133733814Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.137776343Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.14691668Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.165119301Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:00.173100717Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.18124763Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.183469396Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.185876763Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.188598318Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.190864642Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.194161441Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.196922159Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.199233723Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.209049611Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:00.211171948Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:00.221091659Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.223579102Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.225554697Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.227612941Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:00.23011638Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:00.241311204Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.25063618Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:00.258556307Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.260667472Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.26847539Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.28044333Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:00.282170347Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:00.284722893Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:00.292531074Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:00.294098847Z 78 PC: 139bb | Find first file
2018-12-17T22:57:00.301745156Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.308586725Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.320012278Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:00.328022908Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.329898301Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.332681058Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.334404009Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.336216188Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.340450939Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.342418942Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.344653209Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.347382399Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.356707358Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.359337184Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:00.369006818Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.371115847Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.378789654Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.389533001Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.390978559Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.396053081Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.40280023Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.413435295Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:00.422773483Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.424756061Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.426502932Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.43021028Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.431842068Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.433445009Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.435761365Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.437631619Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.439531283Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.449013909Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.451072007Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:00.458939647Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.460935046Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.467585376Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.481233266Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.482819985Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.486612944Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.493887547Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.505475461Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:00.513175972Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.51628473Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.517708384Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.520385042Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.521824923Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.523137208Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.525721739Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.527770226Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.529471345Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.540123325Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.542165791Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:00.550329541Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.552684088Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.559456344Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.571659724Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.572979732Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.577035965Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.584754084Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.595404879Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:00.603619038Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.605545035Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.607429978Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.61035687Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.612350794Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.614312931Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.617451314Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.619755585Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.623146068Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.632763701Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.635161774Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:00.644729382Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:00.646504377Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.754289135Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.843707494Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:00.845706691Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:00.850545168Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:00.8589253Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:00.920037834Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:00.92799327Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.930564136Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.93177412Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.932867423Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.934221284Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.935655547Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.937516881Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.939317209Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:00.941705201Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:00.951811933Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:00.953341593Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:00.962418031Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:00.965297529Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:00.967294243Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:00.970599406Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:00.972574113Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:00.983428466Z 62 PC: 14375 | Close file
2018-12-17T22:57:00.992844299Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:01.000472403Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.001884253Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.006763007Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.014242636Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:01.016016972Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:01.017528222Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:01.021903091Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:01.023509529Z 78 PC: 139bb | Find first file
2018-12-17T22:57:01.028493315Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.03279659Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.041086276Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:01.046093854Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.048297797Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.049731981Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.051194524Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.05320158Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.0546131Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.055995498Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.058059596Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.059469396Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.06575197Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.067291106Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:01.072455766Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.075703944Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.085038819Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.105787884Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.107966971Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.112484847Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.119456966Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.12754091Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:01.132120765Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.134622421Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.136440176Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.13836286Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.139804439Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.141367176Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.144390849Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.146476416Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.147901336Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.16301513Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.164657552Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:01.170876891Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.172863897Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.180410049Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.192374998Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.194232462Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.198741628Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.206002782Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.213066496Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:01.217869561Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.220377406Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.222232651Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.225231695Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.228254209Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.230317817Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.233819119Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.235296105Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.237045143Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.243158085Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.245314772Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:01.250943884Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.252365303Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.257916634Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.272538603Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.27902596Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.284251641Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.291599415Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.303844538Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:01.312362135Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.314381071Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.31695009Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.318712339Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.320577822Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.32331306Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.325500586Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.328486469Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.330428756Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.339914505Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.343283219Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:01.351454369Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.35439641Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.361588262Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.374200424Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.376468888Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.381246733Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.389130476Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.400027152Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:01.408020903Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.410589687Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.412581866Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.415698786Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.418080809Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.420086219Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.424753477Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.426526671Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.428622509Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.436817888Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.439408477Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:01.449515421Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.452465322Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.459971991Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.471821872Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.473689284Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.482824496Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.487077393Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.493830968Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:01.499310272Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.500500582Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.502278725Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.503454364Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.505353846Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.506713393Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.508263384Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.510407556Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.511700983Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.518927602Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:01.522863103Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:01.53114496Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.534058899Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.535860361Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.537247023Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:01.539327213Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:01.548089317Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.554730919Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:01.559193187Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.560500161Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.565473218Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.572321958Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:01.573847876Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:01.575073812Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:01.579029741Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:01.580752084Z 78 PC: 139bb | Find first file
2018-12-17T22:57:01.58566662Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.590856189Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.599559963Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:01.607491156Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.610472951Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.612780448Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.614805872Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.618423317Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.620383629Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.623392084Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.626098886Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.628211043Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.638381923Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.640845094Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:01.648932373Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.651987903Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.659761298Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.672156287Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.673720178Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.677596387Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.685558732Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.696523891Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:01.705243791Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.70744674Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.709462536Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.712550972Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.714458357Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.71765118Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.719901888Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.722244451Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.725069267Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.734942779Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.737271874Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:01.745393151Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.747274141Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.7552213Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.7660178Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.768335642Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.772513383Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.779744392Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.791884989Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:01.801233455Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.804323214Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.806149214Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.807981586Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.810948037Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.812810032Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.814681578Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.817612703Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.819534494Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.830196165Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.832269929Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:01.840188442Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.843478447Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.850184662Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.861576212Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.863037694Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.867260363Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.875852101Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.887475417Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:01.89586068Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.897469848Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.899125832Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.902015086Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:01.903894264Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:01.906102172Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:01.908710739Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.910778397Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:01.914013218Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:01.923437396Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.928378839Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:01.936117788Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:01.938074479Z 62 PC: 14375 | Close file
2018-12-17T22:57:01.946739456Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.95765113Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:01.960418167Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:01.96495171Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:01.971792675Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:01.983709548Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:01.995921097Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.000767098Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.003052259Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.005140803Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.00835737Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.010334749Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.014425803Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.017120105Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.019301455Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.029750793Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.032603348Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:02.041392912Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.043635701Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.050354528Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.062085408Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.064454564Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.070614491Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.077925573Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.090767402Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:02.098693741Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.100683836Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.10496165Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.107170247Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.110364556Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.112122476Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.114203839Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.117800554Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.120059547Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.13103267Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.133497511Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:02.141059615Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.144003557Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.151599434Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.164429696Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.16634749Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.174737931Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.182283792Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.19369661Z 61 PC: 14325 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:57:02.202764598Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.205266141Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.207030571Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.211289628Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.213840851Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.226453418Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.22817583Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.233173033Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.241058755Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.252683549Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:02.261813194Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.264188096Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.266391367Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.269326796Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.27097916Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.273632727Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.275353395Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.279431749Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.282459698Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.292133896Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:02.296760551Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:02.308062185Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.310824538Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.314309868Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.31623195Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:02.319508779Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:02.331422363Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.3422476Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:02.351580185Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.353883368Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.362629983Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.374889655Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:02.376894403Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:02.380009089Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:02.387410744Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:02.390071595Z 78 PC: 139bb | Find first file
2018-12-17T22:57:02.398066456Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.405251863Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.416949326Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:02.424884974Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.427887964Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.430210018Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.432453657Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.440328539Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.442341138Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.445441126Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.448117594Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.45046803Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.460651669Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.463106778Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:02.472493505Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.47541038Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.483426689Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.494971867Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.496405755Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.500658943Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.508188157Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.520103312Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:02.528441731Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.530542162Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.533747992Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.535862179Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.538817754Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.541119082Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.543172278Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.547255252Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.54929379Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.559096467Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.562208425Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:02.570108077Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.573515053Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.581345726Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.593212227Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.595180227Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.599340255Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.60757679Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.618356367Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:02.627176532Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.629972809Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.631952148Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.635231348Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.637178186Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.64011432Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.642874401Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.64518213Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.647700477Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.657745006Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.661019717Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:02.668764045Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.670555215Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.677885462Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.688617852Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.691171661Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.695531052Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.702364468Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.715597198Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:02.723390445Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.726436542Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.728340693Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.731141139Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.733316394Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.735183705Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.738249114Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.740415495Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.743587424Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.78279279Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.785166509Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:02.793477954Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.795305297Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.802578213Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.813238014Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.814828564Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.823448732Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.830004043Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.8413498Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:02.850109491Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.852471709Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.854363952Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.856398175Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.85939244Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.861266345Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.864550139Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.866699965Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.868996487Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.878174781Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.880566187Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:02.889499256Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.891642175Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.899329564Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.909999959Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:02.911596667Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:02.917672477Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:02.92439524Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:02.935742449Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:02.943649802Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.946640116Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.948923331Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.950658405Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:02.953665608Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:02.95581397Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:02.959055994Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.961348898Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:02.96379937Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:02.97409762Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.976841358Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:02.985500052Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:02.987683842Z 62 PC: 14375 | Close file
2018-12-17T22:57:02.996694412Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.008096101Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.011185628Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.015581195Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.02283485Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.035206441Z 61 PC: 14325 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:57:03.043424312Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.046110779Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.048652437Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.051080876Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.054272246Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.066297099Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.069335549Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.073629265Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.081816376Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.092943276Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:03.100948395Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.104146021Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.106125824Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.108988499Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.110656877Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.113236192Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.114947965Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.116898832Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.119535877Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.128210562Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.131569872Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:03.14020114Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.142205337Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.149967894Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.161198262Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.164426274Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.168292722Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.176139182Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.187459998Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:03.195939492Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.199460123Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.201724248Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.206000144Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.208278684Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.211210056Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.213782624Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.215816071Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.218596765Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.227233147Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:03.229982708Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:03.240545373Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.243131643Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.244755611Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.246488714Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:03.250737693Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:03.261821162Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.273018005Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:03.282025662Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.285594459Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.294245197Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.30559902Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:03.307893545Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:03.309724871Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:03.318173333Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:03.319840777Z 78 PC: 139bb | Find first file
2018-12-17T22:57:03.327814922Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.334684683Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.34639125Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:03.354402904Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.356100645Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.358458869Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.360197598Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.363690252Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.366112686Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.368049893Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.371068868Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.372845767Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.382475974Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.384739577Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:03.393441151Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.395338061Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.402965937Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.414337666Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.415732523Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.421640567Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.428306673Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.439926066Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:03.44806477Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.449954939Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.453116946Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.455097739Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.457997706Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.460226523Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.462404439Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.465704185Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.46773342Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.478195626Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.480397522Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:03.489361513Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.493024258Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.500414761Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.511962496Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.513217852Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.519613849Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.526418396Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.539183901Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:03.547067313Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.549087553Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.552714991Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.554321173Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.557453916Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.559801348Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.563059992Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.565110936Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.568301565Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.580664231Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.582838139Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:03.591615148Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.59423308Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.602183861Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.613603056Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.616092201Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.620816075Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.628029106Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.640606712Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:03.648584962Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.65154584Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.653565968Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.656075841Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.658239106Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.660421491Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.662574645Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.664793756Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.667720548Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.676669007Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.67982297Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:03.687686176Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.690173125Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.69700679Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.708681466Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.711611565Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.715640833Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.72385538Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.734496179Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:03.743005063Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.74472338Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.746331608Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.74855806Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.750418977Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.755026576Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.756883937Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.760251975Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.762178572Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.772318829Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.774576447Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:03.78290171Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.785929173Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.792850904Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.804468862Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.805965983Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.811753892Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.818786334Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.829957625Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:03.838255423Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.840501021Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.843925315Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.846155771Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.849517918Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.851409781Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.854540394Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.85686109Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:03.860486529Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:03.871329074Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.873586754Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:03.883428096Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:03.88558959Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.894357732Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.905100841Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.906795407Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.911514437Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.918273373Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.930466642Z 61 PC: 14325 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:57:03.93806254Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:03.941004821Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:03.942913371Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:03.945693501Z 62 PC: 14375 | Close file
2018-12-17T22:57:03.947899287Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.958345762Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:03.960021357Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:03.963754335Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:03.971208675Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:03.983123491Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:04.000890201Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.002711514Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.005387075Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.008312535Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.010883236Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.012834615Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.015164717Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.017638287Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.019642056Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.02965089Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.03209529Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:04.041041957Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.043122078Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.050844659Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.060622966Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.062426357Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.064896796Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.069500556Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.076477258Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:04.081574337Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.083497133Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.084805521Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.086977128Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.088311931Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.090389564Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.091715172Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.093820768Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.095223454Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.101066995Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.102917798Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:04.108403749Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.110010173Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.114893699Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.121300519Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.123204026Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.125718061Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.12976159Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.136705388Z 61 PC: 14325 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:57:04.141412414Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.143483979Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.144971992Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.147090855Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.148571369Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.150691619Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.152293932Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.154832375Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.156521656Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.166296906Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:04.167934142Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:04.177366427Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.178967859Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.180533394Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.183088909Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:04.18481759Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:04.1992805Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.208287379Z 61 PC: 14325 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:57:04.217794703Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.219997883Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.228765426Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.240058804Z 14 PC: 145cd | Set default drive (Drive = 'C')
2018-12-17T22:57:04.242311784Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:04.243585023Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:04.250363347Z 26 PC: 139af | Set disk transfer address
2018-12-17T22:57:04.252440254Z 78 PC: 139bb | Find first file
2018-12-17T22:57:04.259696142Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.268015144Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.278659914Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:04.287748592Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.289475857Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.292280382Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.294141351Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.297608103Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.29951198Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.301498788Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.304622782Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.30668894Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.317011405Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.319167316Z 61 PC: 14325 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:57:04.327689446Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.329537566Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.33734598Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.34823554Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.349790324Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.354322356Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.36084145Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.374283156Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:04.382246907Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.385276535Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.387265185Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.389795517Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.392080701Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.393311633Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.395648666Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.397272618Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.39970578Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.405347111Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.407154709Z 61 PC: 14325 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:57:04.412816141Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.41417486Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.418360702Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.425392335Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.427374459Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.430085583Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.434212522Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.441345738Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:04.449153233Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.451032328Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.452620003Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.454746509Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.456201333Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.458179518Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.459956952Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.462372558Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.464014039Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.474217245Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.476620002Z 61 PC: 14325 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:57:04.485488126Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.487811667Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.494968581Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.506246099Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.508425722Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.513671644Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.520333894Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.532587065Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:04.540053622Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.542787356Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.545528157Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.547809964Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.551254202Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.553243944Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.557350472Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.559763661Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.563429956Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.572376808Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.575629736Z 61 PC: 14325 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:57:04.585118941Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.58854347Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.595563571Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.608473658Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.610267224Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.615673628Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.622471475Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.634966861Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:04.643891101Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.646097351Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.649255791Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.651301163Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.654680284Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.657635146Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.661069Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.663410911Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.666783471Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.675076661Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.678319135Z 61 PC: 14325 | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:57:04.6859064Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.68771094Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.695584489Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.706513474Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.708802327Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.712755436Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.725799106Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.737552061Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:04.74619175Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.748665787Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.751806162Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.753759832Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.756882295Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.759037338Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.760823467Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.762996973Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.764785773Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.774008638Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.776411903Z 61 PC: 14325 | Open file (Filename = 'MEM.EXE')
2018-12-17T22:57:04.784938016Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.786741413Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.794584084Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.806402077Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.809547516Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.813372894Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.821184322Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.832467563Z 61 PC: 14325 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:57:04.841035093Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.844846915Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.847259479Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.851044373Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.853746321Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.865978152Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.867928143Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.872943371Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.882274419Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.894209299Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:04.899302674Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.900513955Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.9033146Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.904524111Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.906363968Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.907650886Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.909966516Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.911441694Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.91391635Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.919373195Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.921665277Z 61 PC: 14325 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:57:04.926254851Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:04.928232783Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.932728912Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.939917856Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:04.940946014Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:04.944170089Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:04.948655314Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:04.955862468Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:04.960836755Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.963708344Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.965333282Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.968994145Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:04.970687347Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:04.97263623Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:04.974585671Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.976414628Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:04.978404057Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:04.988165362Z 62 PC: 14375 | Close file
2018-12-17T22:57:04.99084942Z 61 PC: 14325 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:57:04.998759575Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:05.001593506Z 62 PC: 14375 | Close file
2018-12-17T22:57:05.008187403Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.020041545Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:05.021547782Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:05.026199742Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:05.033827949Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.045382907Z 61 PC: 14325 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:57:05.053400082Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:05.057088509Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:05.059352035Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:05.06305987Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:05.064943293Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:05.068276984Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:05.070738152Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:05.074084519Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:05.075784037Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:05.085279138Z 62 PC: 14375 | Close file
2018-12-17T22:57:05.087489155Z 61 PC: 14325 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:57:05.096276881Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:05.098610827Z 62 PC: 14375 | Close file
2018-12-17T22:57:05.105535628Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.116333151Z 26 PC: 139d3 | Set disk transfer address
2018-12-17T22:57:05.117628063Z 79 PC: 139d8 | Find next file
2018-12-17T22:57:05.122503191Z 67 PC: 13911 | Get or set file attributes
2018-12-17T22:57:05.129374867Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.141085268Z 61 PC: 14325 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:57:05.148903061Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:05.151724436Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:05.153159542Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:05.155809489Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:05.157273382Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:05.160451544Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:05.162495262Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:05.165262279Z 87 PC: 13952 | Get or set file date and time
2018-12-17T22:57:05.167396713Z 63 PC: 143f8 | Read file or device (Read 8080 bytes on handle 5)
2018-12-17T22:57:05.178029913Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:05.180075266Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:05.190759697Z 66 PC: 1532c | Move file pointer
2018-12-17T22:57:05.19285888Z 66 PC: 1533a | Move file pointer
2018-12-17T22:57:05.202724748Z 66 PC: 15348 | Move file pointer
2018-12-17T22:57:05.204739922Z 66 PC: 14457 | Move file pointer
2018-12-17T22:57:05.210869966Z 64 PC: 143f8 | Write file or device (Write 8080 bytes on handle 5)
2018-12-17T22:57:05.222205977Z 62 PC: 14375 | Close file
2018-12-17T22:57:05.232267605Z 61 PC: 14325 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:57:05.240545136Z 87 PC: 1397f | Get or set file date and time
2018-12-17T22:57:05.243723651Z 62 PC: 14375 | Close file
2018-12-17T22:57:05.252435733Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.263356187Z 48 PC: 144e7 | Get DOS version
2018-12-17T22:57:05.266187101Z 67 PC: 13938 | Get or set file attributes
2018-12-17T22:57:05.281421743Z 14 PC: 145cd | Set default drive (Drive = 'A')
2018-12-17T22:57:05.28494991Z 25 PC: 145d1 | Get default drive
2018-12-17T22:57:05.286855347Z 59 PC: 1463b | Change current directory
2018-12-17T22:57:05.293631899Z 64 PC: 1407d | Write file or device (Write 0 bytes on handle 1)
2018-12-17T22:57:05.296226786Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:57:05.299357754Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:57:05.301703041Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:57:05.303657368Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:57:05.306661198Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:57:05.308212512Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:57:05.312266882Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:57:05.313848426Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:57:05.316507494Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:57:05.318144903Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:57:05.320547715Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:57:05.322248394Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:57:05.325264318Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:57:05.326954393Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:57:05.330657349Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:57:05.332708611Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:57:05.334452987Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:57:05.337324975Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:57:05.338859101Z 37 PC: 13e11 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:57:05.341575754Z 76 PC: 13e50 | Terminate with return code (Return code = '0')