Sample viewer

vx.netlux.org/Virus.DOS.Vbasic.a

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:02:45.543712633Z 26 PC: 12ed2 | Set disk transfer address
2018-12-17T23:02:45.545728115Z 51 PC: 13b02 | Get or set Ctrl-Break
2018-12-17T23:02:45.547163285Z 46 PC: 13b02 | Set verify flag
2018-12-17T23:02:45.548273792Z 44 PC: 13b02 | Get time 0x13b02: mov bp, sp
0x13b04: mov bp, word ptr [bp + 8]
0x13b07: mov word ptr [bp], ax
0x13b0a: mov word ptr [bp + 2], bx
0x13b0d: mov word ptr [bp + 4], cx
0x13b10: mov word ptr [bp + 6], dx
0x13b13: mov word ptr [bp + 8], si
0x13b16: mov word ptr [bp + 0xa], di
0x13b19: pushf
0x13b1a: pop ax
0x13b1b: mov word ptr [bp + 0xe], ax
0x13b1e: and ax, 1
0x13b21: mov word ptr [bp + 0xc], ax
0x13b24: cld
0x13b25: pop di
0x13b26: pop si
0x13b27: pop bp
0x13b28: ret
0x13b29: push bp
0x13b2a: mov bp, sp
2018-12-17T23:02:45.551102104Z 42 PC: 13b02 | Get date 0x13b02: mov bp, sp
0x13b04: mov bp, word ptr [bp + 8]
0x13b07: mov word ptr [bp], ax
0x13b0a: mov word ptr [bp + 2], bx
0x13b0d: mov word ptr [bp + 4], cx
0x13b10: mov word ptr [bp + 6], dx
0x13b13: mov word ptr [bp + 8], si
0x13b16: mov word ptr [bp + 0xa], di
0x13b19: pushf
0x13b1a: pop ax
0x13b1b: mov word ptr [bp + 0xe], ax
0x13b1e: and ax, 1
0x13b21: mov word ptr [bp + 0xc], ax
0x13b24: cld
0x13b25: pop di
0x13b26: pop si
0x13b27: pop bp
0x13b28: ret
0x13b29: push bp
0x13b2a: mov bp, sp
2018-12-17T23:02:45.553308953Z 25 PC: 13b02 | Get default drive
2018-12-17T23:02:45.55438959Z 54 PC: 13b02 | Get free disk space
2018-12-17T23:02:45.563629006Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:45.564864376Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:45.570779763Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:45.572313732Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:45.578416702Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.583973315Z 61 PC: 13b02 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:02:45.590338144Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.598595086Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.600344621Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:45.607504165Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.610452844Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.613819827Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.617136463Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.62115194Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.636067072Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.638877657Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.641967645Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.649848813Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.6526761Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.65560108Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:45.670535071Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.672272932Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.679099336Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.682137226Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:45.685127966Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.687307036Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.693054095Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.694521548Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.697607142Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.699074655Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.701636842Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.703293859Z 62 PC: 13b02 | Close file
2018-12-17T23:02:45.710951898Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.720512468Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:45.722012587Z 79 PC: 13bad | Find next file
2018-12-17T23:02:45.725832807Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.732202602Z 61 PC: 13b02 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:02:45.739082375Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.741325657Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.743002272Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:45.749704054Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.752037442Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.75501403Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.757999373Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.76132969Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.764075984Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.767029629Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:45.776212188Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.777620464Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.784090006Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.785867632Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:45.788704945Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.790354163Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.793946425Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.796301232Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.799127788Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.80107305Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.80390969Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.805813072Z 62 PC: 13b02 | Close file
2018-12-17T23:02:45.815110592Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.825158456Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:45.826550055Z 79 PC: 13bad | Find next file
2018-12-17T23:02:45.830745645Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.836718639Z 61 PC: 13b02 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:02:45.841023015Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.84318903Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.84436324Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:45.848540062Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.850111549Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.852025472Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.853883732Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.856355525Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.858348778Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:45.86399052Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.866008193Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.870426596Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.871484041Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:45.873811033Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.874817755Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.876538227Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.878042711Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.879950771Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.881234875Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.883599074Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.884910615Z 62 PC: 13b02 | Close file
2018-12-17T23:02:45.892944145Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.9033642Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:45.904394021Z 79 PC: 13bad | Find next file
2018-12-17T23:02:45.907240244Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.913830295Z 61 PC: 13b02 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:02:45.920178456Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.921676495Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.923942705Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:45.930962244Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.93266201Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.936289066Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.940370542Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:45.943305137Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:45.953402855Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.955547115Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.962237921Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.964366802Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:45.966869464Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.968260952Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:45.971430684Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.97283027Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.975484543Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:45.977399286Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:45.98002076Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:45.981551255Z 62 PC: 13b02 | Close file
2018-12-17T23:02:45.98986196Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:45.999732428Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.000732475Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.004071008Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.010419022Z 61 PC: 13b02 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:02:46.017253577Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.019505144Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.020973194Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.02739352Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.030337341Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.03324466Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.03599887Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.039941135Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:46.049429663Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.051713766Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.06029713Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.061764944Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.064356773Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.067016405Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.069859837Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.071401549Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.074650589Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.076402103Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.079487108Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.083217425Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.091963881Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.102496381Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.104456814Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.107418999Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.112961578Z 61 PC: 13b02 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:02:46.120075417Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.121718628Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.123434162Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.130415756Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.1317864Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.13460129Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.138028857Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.140905834Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.143642082Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.147049619Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.150525811Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.153266379Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.156428383Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.159031943Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.161612476Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.16485647Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:46.172988711Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.174368324Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.183140226Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.184473386Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.190936266Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.192821082Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.195821823Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.197140916Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.199981627Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.201349235Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.20391822Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.205533186Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.213255274Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.223439361Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.224679431Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.227442524Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.23345419Z 61 PC: 13b02 | Open file (Filename = 'PAH.COM')
2018-12-17T23:02:46.239849307Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.241424997Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.24319193Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.249519184Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.250807643Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.253709203Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.256295706Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.25886284Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:46.267947226Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.269355717Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.27579642Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.277341155Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.280576438Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.281884621Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:46.284807112Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.286126051Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.28865959Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.293693309Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:46.296274903Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.297657381Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.306549524Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.317140977Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.318826054Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.321602919Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.327169391Z 61 PC: 13b02 | Open file (Filename = 'TEST.COM')
2018-12-17T23:02:46.333931497Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.335572388Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.336951495Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.3441741Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.345901833Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.348622186Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.351522124Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.354525975Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.356421419Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.358081246Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.360756789Z 71 PC: 13b02 | Get current directory
2018-12-17T23:02:46.363535556Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.368080617Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.372638959Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.377190277Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.382311509Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.386385017Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.390434111Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.394972899Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.399169271Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.404361626Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.408754246Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.413145967Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.415409264Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.422195614Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.423612651Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.430648278Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.436478148Z 61 PC: 13b02 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:02:46.442941152Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.444581923Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.446437209Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.449256152Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.451100666Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.454522598Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.456154363Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.459299341Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.461267732Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.462527984Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.466085645Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.471700462Z 61 PC: 13b02 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:02:46.478032182Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.480163351Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.481507228Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.483971875Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.485908709Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.48869194Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.491003265Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.494209175Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.496167399Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.497389864Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.501355616Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.507197002Z 61 PC: 13b02 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:02:46.513931182Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.516641709Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.518510035Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.521332546Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.52403234Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.526852834Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.528548147Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.532270536Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.534347396Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.535631588Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.539800577Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.545538662Z 61 PC: 13b02 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:02:46.552009838Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.555074122Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.556621371Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.559768825Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.561146865Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.563619348Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.566966681Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.569975076Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.572010267Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.573639317Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.576461565Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.582010083Z 61 PC: 13b02 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:02:46.589328155Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.590859854Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.592252225Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.596071884Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.597365958Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.599773905Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.601544829Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.604514122Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.606948244Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.621620905Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.624247944Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.630756951Z 61 PC: 13b02 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:02:46.637650596Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.63905629Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.641016201Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.643868401Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.645176577Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.648578945Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.650162817Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.65309299Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.655568298Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.656550374Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.660343357Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.6664585Z 61 PC: 13b02 | Open file (Filename = 'PAH.COM')
2018-12-17T23:02:46.673040538Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.676004427Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.6782116Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.681410836Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.684113235Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.686905314Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.688636101Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.693289165Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.696376769Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.697567394Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.70166209Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.707921588Z 61 PC: 13b02 | Open file (Filename = 'TEST.COM')
2018-12-17T23:02:46.716142102Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.719880817Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.721807072Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.724937175Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.726418884Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.728862133Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.730880052Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.73342903Z 62 PC: 13b02 | Close file
2018-12-17T23:02:46.735188697Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.736686642Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.739092296Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.74006276Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.74626419Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.747268167Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.749693504Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.751302967Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.753713773Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.755607899Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.758002907Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.758939781Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.765202915Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.766167191Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.768486119Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.769875311Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.772160959Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.773094131Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.777356198Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.778609921Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.781878462Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.78297902Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.785319628Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.789913254Z 14 PC: 13b02 | Set default drive (Drive = 'C')
2018-12-17T23:02:46.791561734Z 25 PC: 13b02 | Get default drive
2018-12-17T23:02:46.793021071Z 54 PC: 13b02 | Get free disk space
2018-12-17T23:02:46.83319504Z 71 PC: 13b02 | Get current directory
2018-12-17T23:02:46.836058843Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.839859957Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.843730668Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.847780382Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.852061272Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.856763855Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.860387079Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.865495714Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.869119526Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.872749867Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.876837723Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.880379971Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.881300933Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.889496926Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.890475853Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.895868257Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.897098095Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.899368962Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.900786085Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.905740651Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.906622689Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.909433652Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:46.91034667Z 79 PC: 13bad | Find next file
2018-12-17T23:02:46.912850641Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:46.921928482Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:46.922836172Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:46.931185881Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:46.936666788Z 61 PC: 13b02 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T23:02:46.942900939Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:46.944939395Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.946401184Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.952360374Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.954165688Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.959497681Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.960757101Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.963486261Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.964737912Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.967508333Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.968969593Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:46.97143727Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.973347855Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:46.975831807Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:46.977189039Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.983548769Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.986954678Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.992163681Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.996128866Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:46.998865595Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.001929972Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.005130965Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.007937326Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:47.350456273Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.351735498Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.353675533Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.355263411Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.359180565Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.360220687Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.36263756Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.363854997Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.366143542Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.367721735Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.370292463Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.372334436Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.374990106Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.37625808Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.379516853Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.380797859Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.383803352Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.389729689Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.392311777Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.393889136Z 62 PC: 13b02 | Close file
2018-12-17T23:02:47.401858093Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.410906621Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:47.412479751Z 79 PC: 13bad | Find next file
2018-12-17T23:02:47.415548115Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.419617802Z 61 PC: 13b02 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T23:02:47.424166314Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.425322532Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.426270322Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.430591858Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.431772464Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.435839807Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.437155034Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.438831468Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.440178331Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.4419757Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.442952739Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.445521037Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.44680123Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.448688952Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.450482652Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.454697474Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.457176156Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.459026491Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.46083804Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.463299238Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.465146139Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.467414758Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.470012651Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.471837167Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.473586241Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.47601004Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.477829597Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.479751652Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.481574809Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.483279748Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:47.494446759Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.496203514Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.498786108Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.501341888Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.507582859Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.509429924Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.512496835Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.52139703Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.524955564Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.526383467Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.52894455Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.531175498Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.533919076Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.536373084Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.539792512Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.541126546Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.54467121Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.546947996Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.549538295Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.551952278Z 62 PC: 13b02 | Close file
2018-12-17T23:02:47.55932543Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.568432155Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:47.569582866Z 79 PC: 13bad | Find next file
2018-12-17T23:02:47.572632455Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.578760164Z 61 PC: 13b02 | Open file (Filename = 'DEBUG.EXE')
2018-12-17T23:02:47.585404727Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.586804177Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.589212138Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.595038423Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.597471439Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.603862253Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.605535743Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.608890165Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.610596812Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.613544276Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.615502312Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.618517395Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.620331481Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.622868497Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.624238263Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.630876444Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.633686555Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.636469362Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.639694642Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.642399224Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.646039367Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.648866672Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.651683567Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.655409351Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.658366073Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:47.667144807Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.669755497Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.672459699Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.673910423Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.681241548Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.682693082Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.685926444Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.687448105Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.690613179Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.693189934Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.695890706Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.697340581Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.70072459Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.70214006Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.705729645Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.707579364Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.710537973Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.712894403Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.715687209Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.717279598Z 62 PC: 13b02 | Close file
2018-12-17T23:02:47.725237308Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.734650492Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:47.7358847Z 79 PC: 13bad | Find next file
2018-12-17T23:02:47.738343668Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.741983052Z 61 PC: 13b02 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:02:47.747256176Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.748566113Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.750193469Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.754681982Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.755873892Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.759837698Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.760971187Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.762822991Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.764557832Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.766363205Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.767450635Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.769594477Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.770519888Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.773781598Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.775239794Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.781451667Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.784262961Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.786409133Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.78869355Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.790653607Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.792587417Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.794964952Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.797174148Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.799487556Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.80155767Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.80327522Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.806108387Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.808092242Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.810353987Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.812251465Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:47.817821046Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.819761079Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.821658077Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.822991192Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.827954577Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.82913232Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.831722204Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.833135581Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.836382537Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.837794143Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.840342539Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.842024971Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.844997172Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.846423981Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.850555543Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.85210461Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.854681693Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.855963963Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.858589076Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.860367204Z 62 PC: 13b02 | Close file
2018-12-17T23:02:47.867483151Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.877424699Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:47.87847359Z 79 PC: 13bad | Find next file
2018-12-17T23:02:47.881535222Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:47.887817359Z 61 PC: 13b02 | Open file (Filename = 'FDISK.EXE')
2018-12-17T23:02:47.895042278Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:47.897072895Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.898616454Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.904879329Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.907767396Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.913545864Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.916136307Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.918917072Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.920981212Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.924263968Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.925611669Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:47.928197682Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.92955005Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.932219207Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.935007667Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.939915558Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.942927029Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.946414362Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.949423879Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.953367731Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.956634402Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.959538488Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:47.963170169Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:47.97180648Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.974363538Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.978034711Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.979766885Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.986847197Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.988816721Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:47.992427564Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:47.99474242Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:47.998251466Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.000308491Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.00224677Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.003420893Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.007049892Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.008805849Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.011308775Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.012478713Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.014437836Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.015872334Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.017714364Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.019459525Z 62 PC: 13b02 | Close file
2018-12-17T23:02:48.312884535Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.322199658Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:48.323632261Z 79 PC: 13bad | Find next file
2018-12-17T23:02:48.327139201Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.335084598Z 61 PC: 13b02 | Open file (Filename = 'MEM.EXE')
2018-12-17T23:02:48.342273856Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.3439535Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.345484574Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.351756896Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.354193632Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.359696967Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.361189419Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.364155493Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.365452606Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.368765747Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.370147438Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.372624466Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.374901268Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.377609005Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.379577288Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.385735171Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.388405972Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.392137408Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.395075429Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.398492439Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.401299004Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.404776049Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.407557797Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.410254983Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.413431311Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:48.421656958Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.422878976Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.42583669Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.427057868Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.434090135Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.435510258Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.438070553Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.440838551Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.443988314Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.44636004Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.44914097Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.450538873Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.454324949Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.455725105Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.459172907Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.460546801Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.463399493Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.466663642Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.469789474Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.47264545Z 62 PC: 13b02 | Close file
2018-12-17T23:02:48.480870572Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.490616179Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:48.492689715Z 79 PC: 13bad | Find next file
2018-12-17T23:02:48.498770529Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.505290672Z 61 PC: 13b02 | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T23:02:48.512364958Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.514225998Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.516951118Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.522766332Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.525201472Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.531993058Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.533994753Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.537845065Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.539644724Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.543388858Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.544846392Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.547906385Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.550528374Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.553764497Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.556486882Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.562994696Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.566065229Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.569528647Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.572193401Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:48.580776072Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.582191881Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.586182289Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.587812314Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.594224273Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.596222772Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.598999801Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.601311793Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.604435056Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.606920201Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.609618143Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.61098513Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.614890883Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.616427387Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.619779634Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.621438933Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.625390094Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.628844Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.631987648Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.635002031Z 62 PC: 13b02 | Close file
2018-12-17T23:02:48.642691895Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.652037755Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:48.654767998Z 79 PC: 13bad | Find next file
2018-12-17T23:02:48.658209442Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.666125779Z 61 PC: 13b02 | Open file (Filename = 'QBASIC.EXE')
2018-12-17T23:02:48.672765373Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.674368066Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.677587194Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.683990788Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.687153405Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.692750421Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.694203002Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.698540138Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.700927625Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.705429012Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.706888625Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.709479078Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.71302632Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.715852671Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.719028935Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.725534739Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.728559299Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.733071262Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.736170336Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.740814284Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.743942095Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.747735602Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.75217727Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.755290281Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.760004706Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.763068028Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:48.773682266Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.775636178Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.779321836Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.782249666Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.788597458Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.792553361Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.796220408Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.797597245Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.804422681Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.806131833Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.81004485Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.811725567Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.814906699Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.816598678Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.819594552Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.822307225Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.825668166Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.828268257Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:48.831504041Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.833788376Z 62 PC: 13b02 | Close file
2018-12-17T23:02:48.841390922Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.851027654Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:48.853333918Z 79 PC: 13bad | Find next file
2018-12-17T23:02:48.85653557Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:48.864850053Z 61 PC: 13b02 | Open file (Filename = 'REPLACE.EXE')
2018-12-17T23:02:48.871960467Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:48.874185825Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.876292822Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.882551636Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.884960008Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.890825656Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.892666161Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.896355743Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.898065996Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.902517002Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.903942551Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:48.906496701Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.908264737Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:48.910912463Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:48.913484374Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.919936606Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.924122543Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.927125274Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.930050398Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.933503232Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.936982222Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.941174153Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.944279356Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.94727781Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.951364119Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.954340269Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.958651959Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.961859312Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:48.965051312Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:49.022586134Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.024056639Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.027831799Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.029406262Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.035930549Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.037508968Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.040123939Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.042934375Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.046427649Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.049714054Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.052779867Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.055225966Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.05943456Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.061182795Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.064416459Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.066439061Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.069580981Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.071688603Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.074462953Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.076939645Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.148892318Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.180688116Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.181810368Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.186280634Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.197202921Z 61 PC: 13b02 | Open file (Filename = 'RESTORE.EXE')
2018-12-17T23:02:49.20383705Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.206808073Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.20844604Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.215743114Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.217872109Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.223421176Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.225995476Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.228483073Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.230573119Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.233256807Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.234970987Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.237707145Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.2393931Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.243064753Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.244563978Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.252432106Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.255365011Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.258309331Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.262213616Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.264947995Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.268827363Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.271651211Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.274662284Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.278336103Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.281542806Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:49.302918069Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.304255706Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.307586424Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.30898879Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.31501731Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.317135381Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.319891Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.322486067Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.32589355Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.328874352Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.331467315Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.332846036Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.337179076Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.338561895Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.34187677Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.343237172Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.346259571Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.347807655Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.350519684Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.352488207Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.359735916Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.373858884Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.375093464Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.3803687Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.386414319Z 61 PC: 13b02 | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T23:02:49.394293588Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.396352244Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.398042067Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.404918627Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.406316358Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.411971334Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.413308504Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.415948986Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.417794972Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.420207429Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.422411088Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.424816299Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.426665538Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.42953776Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.43094819Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.437333418Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.440367509Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.443526284Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.446189009Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.450012151Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.45266532Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.455619603Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.458432306Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.46121487Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.463913721Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:49.472296597Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.474114565Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.476946366Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.479231793Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.485393349Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.487054908Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.490017808Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.491344012Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.495017717Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.496299852Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.499627995Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.500946797Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.503771069Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.505698901Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.50882863Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.511156106Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.51465486Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.518960069Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.522854754Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.526364138Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.533903373Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.543330769Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.545187912Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.548640014Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.555419224Z 61 PC: 13b02 | Open file (Filename = 'SETUP.EXE')
2018-12-17T23:02:49.562568625Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.565069394Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.566633226Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.573089774Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.57519776Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.580728384Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.582993237Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.585646498Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.588127188Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.590701815Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.593077244Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.597140134Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.598620278Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.602516415Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.604054379Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.611207208Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.614141033Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.618612155Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.62181616Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.624945705Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.629248784Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:49.638232781Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.641254846Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.644438383Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.646660737Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.654692103Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.6565449Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.660707115Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.662470393Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.667325526Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.669129997Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.672174012Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.675319734Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.678011327Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.680093622Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.682899511Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.685298802Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.688374812Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.690127565Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.693501083Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.695538143Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.703347828Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.713645201Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.716169328Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.719465353Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.72712035Z 61 PC: 13b02 | Open file (Filename = 'XCOPY.EXE')
2018-12-17T23:02:49.735009314Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.737006543Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.739995837Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.746320015Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.749772194Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.755993529Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.75765479Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.761008945Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.762436621Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.76620847Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.767620507Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.77112221Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.772920647Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.776873658Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.778476044Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.785340873Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.789264011Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.792246626Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.795931822Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.79884552Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.802783213Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.806284437Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.80940033Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.813354059Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.816292391Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.820111212Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.822930676Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.826675865Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:49.830111421Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:49.838756027Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.841354768Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.844637451Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.847193694Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.853351354Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.855179954Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.857931247Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.859395925Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.862905217Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.86451586Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.867923171Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.869419108Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.873378322Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.874841893Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.877784146Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.880303884Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.883283798Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.885834281Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:49.888499421Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.891356975Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.898696442Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.910484187Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.916403076Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.919491239Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.925869934Z 61 PC: 13b02 | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T23:02:49.930380419Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.93207425Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.933358536Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.939563841Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.941257619Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.946574133Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.948455762Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.951181383Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.95318053Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.955796306Z 62 PC: 13b02 | Close file
2018-12-17T23:02:49.958357632Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:49.959374287Z 79 PC: 13bad | Find next file
2018-12-17T23:02:49.966607922Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:49.972549761Z 61 PC: 13b02 | Open file (Filename = 'EMM386.EXE')
2018-12-17T23:02:49.980116867Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:49.982122168Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.984143597Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:49.991960919Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:49.993656481Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:49.999688375Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.000999816Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.004615573Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.006213031Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.009146132Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.016095216Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.018543664Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.020354177Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.02272824Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.024566591Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.030724523Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.033864368Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:50.042493547Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.043811348Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.046942861Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.048224886Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.055280983Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.056529223Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.059596948Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.060744539Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.064518727Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.066032305Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.070004475Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.071509719Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.074388688Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.075878066Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.078735465Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.080250025Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.083267465Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.084583437Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.087059994Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.088927994Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.095687667Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.105337258Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.106318626Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.109873661Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.115458318Z 61 PC: 13b02 | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T23:02:50.12240055Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.12449088Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.126390424Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.132039411Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.133536042Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.139270445Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.140576768Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.143294625Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.144557742Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.147550042Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.14935203Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.150634286Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.153649025Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:50.154806443Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:50.161364732Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.166954098Z 61 PC: 13b02 | Open file (Filename = 'EDIT.COM')
2018-12-17T23:02:50.177962229Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.179604846Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.182498211Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.18786261Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.189809302Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.192528139Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.195661756Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.198964381Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:50.207392728Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.20906252Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.216129695Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.217727762Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.220582497Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.222603349Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.225528367Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.227501077Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.230188704Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.2321981Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.234784941Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.236847013Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.241522482Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.248430797Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.249402049Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.253024083Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.258683727Z 61 PC: 13b02 | Open file (Filename = 'FORMAT.COM')
2018-12-17T23:02:50.265384825Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.267802004Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.269262961Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.291163823Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.292909449Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.302832319Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.304392153Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.311243919Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.313120693Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:50.319643669Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.320898436Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.327303543Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.328755063Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.332196068Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.333775971Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.336781648Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.338282296Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.340980582Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.342788987Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.345357766Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.347417174Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.354470517Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.364961273Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.366165809Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.370695449Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.376656077Z 61 PC: 13b02 | Open file (Filename = 'KEYB.COM')
2018-12-17T23:02:50.384583404Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.386382806Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.388009738Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.395459993Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.397097093Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.405013438Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.406679137Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.414262943Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.417235261Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.421514896Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.424581625Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.427638919Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.431855014Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.434870198Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.439095199Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.442119629Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.446127189Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:50.455053764Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.456503858Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.462772655Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.464573165Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.467616364Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.469044567Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.473288184Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.474847564Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.478075249Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.480467332Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.483173219Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.48585236Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.493196325Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.5033269Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.50424377Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.507895812Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.513825331Z 61 PC: 13b02 | Open file (Filename = 'SYS.COM')
2018-12-17T23:02:50.521238313Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.523524629Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.525566532Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.532393241Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.533979752Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.540444916Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.541847436Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.550403743Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.553428999Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.556613977Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.559536109Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.563030314Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.565943004Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.569122804Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:50.573801832Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:50.58245961Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.585275357Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.591898867Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.594138294Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.596890912Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.598449482Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:50.601942497Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.603768125Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.606689282Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.608395229Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:50.611126616Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.612858394Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.620798096Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.631253207Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.632269721Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.635939774Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:50.637347487Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:50.643557073Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.644536854Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.647886564Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.649283229Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.652687541Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.653583394Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.657070888Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.657969927Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.661120647Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.662089629Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.665036476Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.666133952Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.669086463Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.670297759Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.673379991Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.674294114Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.677694717Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.678818555Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.681694503Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.682708088Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.686946683Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.688046092Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.691035009Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.691929525Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.694755085Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.695891101Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.699117599Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.700118888Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.703113091Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.704120635Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.707119555Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.708164331Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.711209149Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.713146447Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.716343126Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.718072081Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.720964426Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.722276699Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.725131274Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.726127087Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.728842532Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.732522843Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.735922715Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.738648875Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.741988736Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.744755134Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.747722963Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.750370838Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.753731229Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.755976862Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.758993058Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.76228885Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.765308012Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.766336043Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.771114247Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.772400863Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.777775673Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.778923223Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.783134647Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.784259512Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.793600328Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.795445601Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.799777337Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.801240441Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.805432754Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.806561732Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.811025893Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.812288016Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.816373441Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.817737419Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.820973684Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.82190304Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.825095129Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.826187144Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.829333874Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:50.83361906Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.834590272Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.840771197Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.842263998Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.845629034Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:50.851832716Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:50.854107324Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:50.863448568Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.870756415Z 61 PC: 13b02 | Open file (Filename = 'SETUP.EXE')
2018-12-17T23:02:50.878319994Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.88095978Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.882472755Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.890339049Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.89181725Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.898835944Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.900212532Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.904400018Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.905832164Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.909042892Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.911262887Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.91269565Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.915819594Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.921684974Z 61 PC: 13b02 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T23:02:50.928052586Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.929657458Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.931998797Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.938419776Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.940329826Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.945692145Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.947495409Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.950133991Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.952332579Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.954854516Z 62 PC: 13b02 | Close file
2018-12-17T23:02:50.957216341Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:50.95813945Z 79 PC: 13bad | Find next file
2018-12-17T23:02:50.961947221Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:50.967568946Z 61 PC: 13b02 | Open file (Filename = 'MSD.EXE')
2018-12-17T23:02:50.974773262Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:50.976428172Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.978447856Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:50.984446199Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.986440682Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.99183932Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:50.99406691Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:50.996525875Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.000302713Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.002453287Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.003810844Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.005491187Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.006446756Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.009438928Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.010828286Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.017406318Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.020122806Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.023901886Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.026643478Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.029966383Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.032788715Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.036794339Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.039479665Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.043626288Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.046458711Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.04995552Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.05284432Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.057998559Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.061029795Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:51.069136841Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.071157707Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.073703035Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.075893369Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.083092975Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.085511048Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.088122388Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.090454651Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.093712548Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.097519182Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.1017502Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.104036055Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.106802134Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.1092791Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.112192581Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.114362784Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.117468212Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.120209689Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.122913946Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.125291869Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.1327221Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.143268385Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.144318527Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.148181953Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.153835474Z 61 PC: 13b02 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T23:02:51.16127642Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.163774836Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.165055114Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.187378661Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.189237217Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.19587522Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.19753976Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.201208054Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.202532422Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.205158647Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.20689525Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.208269948Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.211323944Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.217464078Z 61 PC: 13b02 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T23:02:51.224798118Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.226296225Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.228781159Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.23488026Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.236843333Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.242393366Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.244636363Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.247182609Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.248594614Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.251196496Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.253164338Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.255520048Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.261726166Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.268509887Z 61 PC: 13b02 | Open file (Filename = 'SOL.EXE')
2018-12-17T23:02:51.275140633Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.281016035Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.283052571Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.290671593Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.292044812Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.299409066Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.300772529Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.313972609Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.315434974Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.318999547Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.320569789Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.322484408Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.326200777Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.333244393Z 61 PC: 13b02 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T23:02:51.340126867Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.346002459Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.34768121Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.354943273Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.355995664Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.359770641Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.360902778Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.362875399Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.363822408Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.366168492Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.36750232Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.369028746Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.371775243Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.375897428Z 61 PC: 13b02 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T23:02:51.379983846Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.381878962Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.382991097Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.387903828Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.389007737Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.393307529Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.394372809Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.397095418Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.398081977Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.400533037Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.401804991Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.403282634Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.405490341Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.40960039Z 61 PC: 13b02 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T23:02:51.416108084Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.418018983Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.419352158Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.425692365Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.426979198Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.432774568Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.434174424Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.436956848Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.438370407Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.44089997Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.443917819Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.444895358Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.448971465Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.454689208Z 61 PC: 13b02 | Open file (Filename = 'WRITE.EXE')
2018-12-17T23:02:51.461181555Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.464311267Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.465778548Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.473337616Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.474789489Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.481695207Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.483510749Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.486911314Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.488604058Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.492033493Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.493799866Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.495833325Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.498969148Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.505157727Z 61 PC: 13b02 | Open file (Filename = 'CALC.EXE')
2018-12-17T23:02:51.511782603Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.513392267Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.516010091Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.52190645Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.523978964Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.529631941Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.537604092Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.540470237Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.54272293Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.545297697Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.547974888Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.548882343Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.552794598Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.558558097Z 61 PC: 13b02 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T23:02:51.565330171Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.566995226Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.568395465Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.576083264Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.577817792Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.583524191Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.58491321Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.588049165Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.589520665Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.593290783Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.595228134Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.596167361Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.60217571Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.607860332Z 61 PC: 13b02 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T23:02:51.614499625Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.615954009Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.618226153Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.624496056Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.627129216Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.632693351Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.634799388Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.637351526Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.638956175Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.642217162Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.643914539Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.645533926Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.64858555Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.654624223Z 61 PC: 13b02 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T23:02:51.661198821Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.663179003Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.66449964Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.671289682Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.672982617Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.678530191Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.679864653Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.682199701Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.684178015Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.686713142Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.688923242Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.689812789Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.693274616Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.698910889Z 61 PC: 13b02 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T23:02:51.705675817Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.707357846Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.708693437Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.727630525Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.728990942Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.736079873Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.737426142Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.740265011Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.741654335Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.74417398Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.74636853Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.747294086Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.75347614Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.759026827Z 61 PC: 13b02 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T23:02:51.76540952Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.767607877Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.768899929Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.775316426Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.776648043Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.782260733Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.783597033Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.786007509Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.787688109Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.790154183Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.792287607Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.793159972Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.797767157Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.803402336Z 61 PC: 13b02 | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T23:02:51.810113844Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.811668706Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.813507496Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.819837462Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.821152766Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.82737236Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.828724027Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.832185286Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.833749555Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.83631652Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.838757398Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.839673148Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.843119249Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.848740629Z 61 PC: 13b02 | Open file (Filename = 'EMM386.EXE')
2018-12-17T23:02:51.855471577Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.858400267Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.860070338Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.87749682Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.878890185Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.88461304Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.88613748Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.888556247Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.890058688Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.892612292Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.894482267Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:51.897154575Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.898622868Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.900988419Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.902223743Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.908689489Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:51.911025314Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:51.920461877Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.921815556Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.924830171Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.926295733Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.932541706Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.934062933Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:51.936582863Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.938298308Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.941332663Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.94369228Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.946235376Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.947504062Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.950686483Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.951962708Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.956121315Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.95778833Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.961518414Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:51.962872408Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:51.965553494Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:51.967672239Z 62 PC: 13b02 | Close file
2018-12-17T23:02:51.974688195Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.984451915Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:51.985335897Z 79 PC: 13bad | Find next file
2018-12-17T23:02:51.988879935Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:51.994524004Z 61 PC: 13b02 | Open file (Filename = 'EXPAND.EXE')
2018-12-17T23:02:52.001220322Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.00273247Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.004024248Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.011146274Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.012416971Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.018051952Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.019390883Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.02181694Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.023922136Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.026367817Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.028169318Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.030594176Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.032125665Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.034746519Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.036070993Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.042801562Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.045588513Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.04909439Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.051784316Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.055178041Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.057208759Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:52.065206247Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.066553174Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.069349969Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.070747327Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.077534975Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.080095926Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.082648832Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.084741346Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.087960349Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.089722818Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.095023384Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.095973267Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.098573549Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.099725273Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.102019751Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.103712251Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.105700941Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.107594991Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.10941734Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.111217634Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.115916688Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.122247815Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.123212871Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.126771695Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.13246897Z 61 PC: 13b02 | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T23:02:52.139108592Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.140746156Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.142193071Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.148850288Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.150322211Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.156863056Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.158300111Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.160720545Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.163372517Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.165854187Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.168127349Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.16900508Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.172272235Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.177819811Z 61 PC: 13b02 | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T23:02:52.18410112Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.186217468Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.187502913Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.193123918Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.194892599Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.200156598Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.202290775Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.205220826Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.206509718Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.209813921Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.223802594Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.225322308Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.228573901Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.234650679Z 61 PC: 13b02 | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T23:02:52.24203967Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.244033655Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.246004341Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.252050508Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.253392414Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.259530421Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.261281147Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.264269819Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.266496013Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.271447095Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.274036252Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.274992702Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.27856004Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.284271832Z 61 PC: 13b02 | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T23:02:52.29223323Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.294095276Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.297128004Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.303601493Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.305632081Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.311435018Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.314208463Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.317129106Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.319460577Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.322786604Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.325325316Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.326758986Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.333468864Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.341364999Z 61 PC: 13b02 | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T23:02:52.348451951Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.351523437Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.353756311Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.360127481Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.363404336Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.37020758Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.371682344Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.375438304Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.377345586Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.385557775Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.387703448Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.389729275Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.393025138Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.399862209Z 61 PC: 13b02 | Open file (Filename = 'RECORDER.EXE')
2018-12-17T23:02:52.407851785Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.409956432Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.413290368Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.421912265Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.424399052Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.430368089Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.432281058Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.435125197Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.437224207Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.440665337Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.442543628Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.443394508Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.44749966Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.453641953Z 61 PC: 13b02 | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T23:02:52.460966461Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.463928858Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.465281356Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.472335993Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.474135198Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.479887309Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.482041885Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.484507669Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.485723145Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.48878691Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.490494757Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.492824586Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.496119556Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.502373836Z 61 PC: 13b02 | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T23:02:52.509957781Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.511617249Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.51374074Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.520146427Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.522490012Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.527921098Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.529405933Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.535715017Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.538872229Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.545949632Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.547517484Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.550234056Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.551952771Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.554375465Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.556442149Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.562491059Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.56512704Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.568523941Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.571128962Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.575314615Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.578047232Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.58276197Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:52.591410144Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.59330965Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.598329061Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.600182762Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.60818392Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.610013849Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.612196371Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.614313813Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.616882013Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.618029995Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.620677033Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.621980857Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.62457897Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.626134509Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.62914093Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.631745412Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.634637853Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.635841542Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:52.639046493Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.640464914Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.648859636Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.65878019Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.660353065Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.666982589Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.673085171Z 61 PC: 13b02 | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T23:02:52.681520296Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.683489603Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.686419243Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.692750536Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.694715774Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.701538126Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.70584272Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.709214357Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.711011491Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.714042473Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.717700941Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.718987791Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.722872306Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.730802906Z 61 PC: 13b02 | Open file (Filename = 'WINMINE.EXE')
2018-12-17T23:02:52.737526104Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.739888302Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.741455107Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.747978862Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.750770072Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.756415367Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.758596575Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.761692527Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.763355322Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.76746777Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.769246636Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.771344182Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.77802464Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.783998988Z 61 PC: 13b02 | Open file (Filename = 'CLOCK.EXE')
2018-12-17T23:02:52.792188043Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.793755073Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.796156695Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.803008704Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.804464537Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.810253345Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.811838748Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.81551984Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.817072355Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.821032001Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.822978743Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.823990835Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.832270681Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.838560714Z 61 PC: 13b02 | Open file (Filename = 'TASKMAN.EXE')
2018-12-17T23:02:52.846833992Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.848567889Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.850412915Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.857214881Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.859741891Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.863564174Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.865559582Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.869881654Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.872411939Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.873771171Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.882426112Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.888545358Z 61 PC: 13b02 | Open file (Filename = 'WINVER.EXE')
2018-12-17T23:02:52.89659811Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.898293065Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.90015813Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.907414281Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.909942149Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.913017997Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.916062638Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.919319202Z 62 PC: 13b02 | Close file
2018-12-17T23:02:52.921484744Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:52.923944768Z 79 PC: 13bad | Find next file
2018-12-17T23:02:52.929572113Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:52.930927299Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:52.93825401Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:52.944069068Z 61 PC: 13b02 | Open file (Filename = 'WIN.COM')
2018-12-17T23:02:52.952863981Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:52.954860428Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.957751044Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:52.964508127Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.966250953Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:52.973955371Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:52.976150911Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.982665197Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.986848162Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.990339569Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.993401473Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:52.997708869Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.000475568Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:53.010275131Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.011798715Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.017878489Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.020242814Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.024083118Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.025799673Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.029946281Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.031413154Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:53.035474804Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.036895512Z 64 PC: 13b02 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T23:02:53.04036467Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.041979787Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.049383591Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.05974009Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.060814583Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.06528076Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:53.066725057Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:53.072687429Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.074851582Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.078113758Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.080213243Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.083326402Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:53.089435531Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:53.091452684Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:53.100928137Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.10748176Z 61 PC: 13b02 | Open file (Filename = 'GDI.EXE')
2018-12-17T23:02:53.11426964Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.115839298Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.118506235Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.124911653Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.127524789Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.133113155Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.134601879Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.13827273Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.139720612Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.144023603Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.14581528Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.147892957Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.151038963Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.156727794Z 61 PC: 13b02 | Open file (Filename = 'USER.EXE')
2018-12-17T23:02:53.164570419Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.166291481Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.169624158Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.177559002Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.179481905Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.185992599Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.187738917Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.191039126Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.193102575Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.195909651Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.199586824Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.200917893Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.204576074Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.211858315Z 61 PC: 13b02 | Open file (Filename = 'DOSX.EXE')
2018-12-17T23:02:53.218888548Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.222317219Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.224015341Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.23157438Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.23323744Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.240353478Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.242163879Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.245191504Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.248102321Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.251488245Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.254446657Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.257065375Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.260230015Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.262802627Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.265559088Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.272243304Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.275350098Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.279670086Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.282756704Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.287193415Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.290028146Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:53.298536585Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.301269274Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.304141971Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.306489773Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.313031929Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.314675111Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.319226794Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.320973906Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.325936452Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.327845483Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.33112136Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.333705902Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.337997594Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.341052291Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.344080881Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.345847016Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.350224525Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.352075504Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.355831706Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.358144234Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.365594449Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.375930164Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.376855494Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.381000835Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.386611454Z 61 PC: 13b02 | Open file (Filename = 'KRNL286.EXE')
2018-12-17T23:02:53.393196608Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.396041006Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.397884454Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.403896867Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.406131178Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.412581253Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.414046802Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.417918882Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.419543749Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.424025882Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.425545563Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.427949763Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.430182833Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.432866608Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.435900678Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.442256702Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.445268164Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.449356709Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.452133749Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.455901964Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.458549729Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.461045842Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.464068554Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.466716308Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.470276728Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.473084693Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.476343779Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.480200268Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.483122867Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:53.492539204Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.496118135Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.498617175Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.500708825Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.506991332Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.508328181Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.512314211Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.513742467Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.516809612Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.519816066Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.522870391Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.525751635Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.528607545Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.530128206Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.533502688Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.534879242Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.539587515Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.540893673Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.543649882Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.545116902Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.552331229Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.562768969Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.563969296Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.56720865Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.573098552Z 61 PC: 13b02 | Open file (Filename = 'KRNL386.EXE')
2018-12-17T23:02:53.579842308Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.581291612Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.582900266Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.589643643Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.591136837Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.5977726Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.599425382Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.602373925Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.606128213Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.609200459Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.611348674Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.615891712Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.617794011Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.622547345Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.624530768Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:53.638986646Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.641181338Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.644223991Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.647204055Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.653859766Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.655030238Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.657645546Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.65883685Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.66104499Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.662855003Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.664778598Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.666599805Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.668567758Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.669698984Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.672390818Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.673551884Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.676428749Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.677567863Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.679545461Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.681517853Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.686198879Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.692935558Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.693824515Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.698292214Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.702164182Z 61 PC: 13b02 | Open file (Filename = 'WIN386.EXE')
2018-12-17T23:02:53.706358397Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.708493999Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.709918742Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.714087578Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.716036029Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.719807488Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.720914291Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.723533239Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.724675934Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.726566447Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.72871658Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.729602139Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.731736933Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.73646024Z 61 PC: 13b02 | Open file (Filename = 'DSWAP.EXE')
2018-12-17T23:02:53.740946483Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.742195224Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.744125477Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.749895911Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.752672411Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.7588276Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.76055844Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.764462327Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.766505453Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.769397115Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.772125259Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.775274005Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.776909797Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.781640339Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.783827101Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.790021405Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.792903147Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.795923673Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.800167078Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.802972903Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.805748017Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.809540265Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.812265689Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.815775447Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.818590231Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.821375713Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.825453254Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.828430272Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:53.831228875Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:53.840651093Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.842023439Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.845050753Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.846774186Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.853110435Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.867918033Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.870924058Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.872599253Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.877464333Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.879209066Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.883872981Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.886026973Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.889126077Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.891957714Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.895584283Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.897340559Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.901815739Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.903925638Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:53.906608112Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.90927234Z 62 PC: 13b02 | Close file
2018-12-17T23:02:53.916520523Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.926569252Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:53.929884772Z 79 PC: 13bad | Find next file
2018-12-17T23:02:53.941741403Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:53.959953929Z 61 PC: 13b02 | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T23:02:53.968536745Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:53.970296258Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.972031795Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:53.979192972Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.980969393Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.991639652Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:53.993495306Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:53.99723825Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.001083192Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:54.003987658Z 62 PC: 13b02 | Close file
2018-12-17T23:02:54.005933408Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.00831856Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.011826378Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:54.017996841Z 61 PC: 13b02 | Open file (Filename = 'WSWAP.EXE')
2018-12-17T23:02:54.025451316Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:54.027459934Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.029228555Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:54.036028172Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.038356649Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:54.044445153Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.049613609Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:54.052842459Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.054827972Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:54.059351414Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.061266406Z 63 PC: 13b02 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T23:02:54.065593065Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.073282449Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:54.079178794Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.082213402Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:54.098214943Z 64 PC: 13b02 | Write file or device (Write 1 bytes on handle 5)
2018-12-17T23:02:54.102696807Z 64 PC: 13b02 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T23:02:54.270281861Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.272159696Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:54.276708073Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.278786386Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.285201337Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.287410774Z 63 PC: 13b02 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:02:54.290486026Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.292261512Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.296175427Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.297983297Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.300986512Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.303591114Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.306692505Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.308409096Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.312707792Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.314306585Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.3173276Z 66 PC: 13b02 | Move file pointer
2018-12-17T23:02:54.319793987Z 64 PC: 13b02 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T23:02:54.322778438Z 87 PC: 13b02 | Get or set file date and time
2018-12-17T23:02:54.324582786Z 62 PC: 13b02 | Close file
2018-12-17T23:02:54.366969989Z 67 PC: 13b02 | Get or set file attributes
2018-12-17T23:02:54.382426931Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.385346113Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.39226227Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:54.393630476Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:54.401481361Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:54.403082346Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:54.410318518Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.413327723Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.416731787Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.4181614Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.422898302Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.4244598Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.430097197Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.431518291Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.435756254Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.436961141Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.440501571Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.441542275Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.445541362Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.446620968Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.450842393Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.451872449Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.455405835Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.458460997Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.46192509Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.463440984Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.468310822Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.469837658Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.47452468Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.47577494Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.478972443Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.481506006Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.484661123Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.485851337Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.490090616Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.49143468Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.494508914Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.496891683Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.500029419Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.50102552Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.505132537Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.506168218Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.509330326Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.511423776Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.516141154Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.518617362Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.521655034Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.522700914Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.527549852Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.528917897Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.532077588Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.533263654Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.537176728Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.538626485Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.542262447Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.543571927Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.546828168Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.548287273Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.551772798Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.553034967Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.556756498Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.558241357Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.561208125Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.56389951Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.567174864Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.568385607Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.573820012Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.574863078Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.578001212Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.580300994Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.583285949Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.585902402Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.588902525Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.590297509Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.59411709Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.595729963Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.599917974Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.601431461Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.60543548Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.606981426Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.61172629Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.612930128Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.615972264Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.618243371Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.621259843Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.622711602Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.626104505Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.627242425Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.631520592Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.632585338Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.635381933Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.636591706Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.639511992Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.640458449Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.643945427Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.646385018Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.649716778Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.652893814Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.656330661Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.657814366Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.662653561Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.663804803Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.66803748Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.669100772Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.671962241Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.67394154Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.677051226Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.678114585Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.682053931Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.683014541Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.685877731Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.688692583Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.69152127Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.692441026Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.695738632Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.696723905Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.701064207Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.702309895Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.705214519Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.707513354Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.710574241Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.711744757Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.715807452Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.716726102Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.719890049Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.722117784Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.72497459Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.727592994Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.730589342Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.731650973Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.73577461Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.736836065Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.739807077Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.746139869Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.749159687Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.750479891Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.753507507Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.754688995Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.757987324Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.759779134Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.762696782Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.764846647Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.767835593Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.768695415Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.772046608Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.773575411Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.777420871Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.778638879Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.783371883Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.784618315Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.789290926Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.790559447Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.793727405Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.796447712Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.799635434Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.801053782Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.805628788Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.806854656Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.811628315Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.813390271Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.816560782Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.819267978Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.822423549Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.825079135Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.828444607Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.829784833Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.834613801Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.835936084Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.839252692Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.84201264Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.845265149Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.847766568Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.851424446Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.852712609Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.856208838Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.858323464Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.861399015Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.863978208Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.867762286Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.868659931Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.87173178Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.873524119Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.876540393Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.878582499Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.881760574Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.882663666Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.885786614Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.887854946Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.890922954Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.89248205Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.895552225Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.896406246Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.900020231Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.90109536Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.903931462Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.905478297Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.908458065Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.909403884Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.912998096Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:54.92120806Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.922232961Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.928449981Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.929830273Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.932812029Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.93408014Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.937227417Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.938866991Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.942007956Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.943431231Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.946258332Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.948061358Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.950875484Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.951752539Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.955296961Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.956495721Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.959738977Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.961718502Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.964947813Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.965857134Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.968887811Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.969956492Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.972726123Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.974121931Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.97704833Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.977932199Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.98075265Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.981894807Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.98803189Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.989230387Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.992211263Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.993096784Z 79 PC: 13bad | Find next file
2018-12-17T23:02:54.996365545Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:54.998150661Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.001051624Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.002418526Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.005531349Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.006445166Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.010292265Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.012193703Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.015132823Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.017330348Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.020151708Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.021044438Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.024029075Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.025909898Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.028783501Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.030841814Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.033819955Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.034697111Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.038812952Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.039757588Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.042687474Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.044105652Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.047217861Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.048670028Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.052015745Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.055076237Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.058575659Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.061206059Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.068024454Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.06931067Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.073947308Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.075109237Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.078316674Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.081119363Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.084280687Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.08563844Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.09071173Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.091921979Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.095732501Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.098920818Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.102002423Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.105067903Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.10809423Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.109400352Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.113041773Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.114746236Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.118011447Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.119241003Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.124117818Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.125470104Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.129894611Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.131126649Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.133934472Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.135629222Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.138433416Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.139394263Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.143006952Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.143959115Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.146798655Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.148195326Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.154057595Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.154999849Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.157804022Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.159588418Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.16244579Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.163962232Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.166742641Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.167639547Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.170640442Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.172433268Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.175928297Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.177714725Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.180536461Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.181426518Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.18481082Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.185722376Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.188445534Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.189901034Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.192634271Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.193735254Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.196771769Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.198282015Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.20113497Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.202060302Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.205503714Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.206572728Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.209763599Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.21133868Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.214526459Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.215681486Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.218978307Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.221488881Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.227674511Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.229841782Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.2330824Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.234158457Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.238344519Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.239598286Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.243019789Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.247249169Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.250338723Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.251549982Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.256887185Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.257921332Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.262567945Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.264499627Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.268366552Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.270116108Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.27409958Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.275498737Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.278990369Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.282551529Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.286066934Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.289348304Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.292671668Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.294172403Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.299166293Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.300567686Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.304527536Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.307618114Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.311618923Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.313089968Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.318173193Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.319873398Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.326259082Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.3288502Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.33203565Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.333222944Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.338184342Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.339462211Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.34256119Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.344980309Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.349224931Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.35038511Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.354798778Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.356075809Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.359510408Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.362121524Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.365443861Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.366991071Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.371694364Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.372985233Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.376411268Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.378747266Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.38224234Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.385858976Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.38959489Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.391258738Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.394798266Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.396236663Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.401064512Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.402611098Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.405999653Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.408492382Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.411849388Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.413335529Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.420167631Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.421403068Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.423539807Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.424674366Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.428476658Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.429466981Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.434432613Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.436122954Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.438226783Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.439127138Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.441766451Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:55.445848522Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:55.447639673Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:55.452949428Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:55.453744359Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:55.458014963Z 26 PC: 13b87 | Set disk transfer address
2018-12-17T23:02:55.458893969Z 78 PC: 13b91 | Find first file
2018-12-17T23:02:55.462493879Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.463856365Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.466331755Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.46723992Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.469191942Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:55.473548801Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.474442209Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.476475019Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.47812045Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.48013509Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.48104518Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.483607927Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.48475466Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.486819559Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.487799946Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.490734219Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.491517874Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.49353987Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.495214324Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.497792489Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.499014093Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.501962573Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.502841047Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.504907152Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.506545429Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.510803074Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.511521612Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.514158712Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.514964232Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.51683484Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:55.519588678Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.521190298Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.522956337Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.523837475Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.526342362Z 26 PC: 13ba9 | Set disk transfer address
2018-12-17T23:02:55.527175231Z 79 PC: 13bad | Find next file
2018-12-17T23:02:55.529015996Z 59 PC: 13b02 | Change current directory
2018-12-17T23:02:55.531875815Z 14 PC: 13b02 | Set default drive (Drive = 'F')
2018-12-17T23:02:55.53287344Z 25 PC: 13b02 | Get default drive
2018-12-17T23:02:55.533793124Z 14 PC: 13b02 | Set default drive (Drive = 'A')
2018-12-17T23:02:55.535769769Z 64 PC: 13b02 | Write file or device (Write 17 bytes on handle 2)
2018-12-17T23:02:55.538457352Z 76 PC: 13b02 | Terminate with return code (Return code = '0')