Sample viewer

vx.netlux.org/Trojan.DOS.Storm

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:11:21.731934554Z 53 PC: 135ba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:21.733561201Z 53 PC: 135ba | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:11:21.735173036Z 53 PC: 135ba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:21.736631552Z 53 PC: 135ba | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:11:21.738030485Z 53 PC: 135ba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:21.739954245Z 53 PC: 135ba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:21.741385661Z 53 PC: 135ba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:11:21.742764791Z 53 PC: 135ba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:11:21.744888552Z 53 PC: 135ba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:11:21.745993399Z 53 PC: 135ba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:11:21.747146436Z 53 PC: 135ba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:11:21.748785705Z 53 PC: 135ba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:11:21.750300409Z 53 PC: 135ba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:11:21.751859033Z 53 PC: 135ba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:11:21.753701498Z 53 PC: 135ba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:11:21.754970495Z 53 PC: 135ba | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:11:21.757602996Z 53 PC: 135ba | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:11:21.768996876Z 53 PC: 135ba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:21.770454262Z 53 PC: 135ba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:11:21.771949447Z 37 PC: 135cf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:11:21.773898182Z 37 PC: 135d7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:11:21.775329587Z 37 PC: 135df | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:11:21.776672116Z 37 PC: 135e7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:11:21.779067449Z 68 PC: 13f03 | I/O control for devices (Set for = '��r����=')
2018-12-17T22:11:21.796443875Z 37 PC: 12fe1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:11:21.798381166Z 14 PC: 13c29 | Set default drive (Drive = 'C')
2018-12-17T22:11:21.800309777Z 25 PC: 13c2d | Get default drive
2018-12-17T22:11:21.801683777Z 59 PC: 13c97 | Change current directory
2018-12-17T22:11:21.805640604Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:21.807260892Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:21.813711864Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:21.818820253Z 61 PC: 13a7d | Open file (Filename = 'c:\IO.SYS')
2018-12-17T22:11:21.82537204Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.157326007Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.164265445Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.166593635Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.170704457Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.176636616Z 61 PC: 13a7d | Open file (Filename = 'c:\MSDOS.SYS')
2018-12-17T22:11:22.183992094Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.191252896Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.19828873Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.19968198Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.204471062Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.210008825Z 61 PC: 13a7d | Open file (Filename = 'c:\MS-DOS_6')
2018-12-17T22:11:22.21587429Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.21842047Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.221979262Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.227323825Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS')
2018-12-17T22:11:22.232758542Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.233759815Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.236156119Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.240392308Z 61 PC: 13a7d | Open file (Filename = 'c:\COMMAND.COM')
2018-12-17T22:11:22.244964698Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.249634311Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.255517102Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.256756597Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.259233284Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.263613429Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS')
2018-12-17T22:11:22.270075508Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.271016734Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.275024914Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.279655058Z 61 PC: 13a7d | Open file (Filename = 'c:\CONFIG.SYS')
2018-12-17T22:11:22.284341472Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.29968224Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.307432834Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.308553014Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.312939311Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.318975814Z 61 PC: 13a7d | Open file (Filename = 'c:\AUTOEXEC.BAT')
2018-12-17T22:11:22.325209873Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.332110718Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.339567561Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.34104322Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.344101165Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:22.346299896Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:22.351938463Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.353537412Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.357294469Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.358788543Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.362230464Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:22.364187933Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:22.373742547Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.374966115Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.380475773Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.381986464Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.387061061Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.394262064Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\ATTRIB.EXE')
2018-12-17T22:11:22.401810199Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.408626335Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.416306422Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.418061809Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.422304322Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.429339376Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\CHKDSK.EXE')
2018-12-17T22:11:22.436136991Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.443071981Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.451379378Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.452404681Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.456283984Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.462416158Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\COUNTRY.SYS')
2018-12-17T22:11:22.469525162Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.476368716Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.483380904Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.48495556Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.48928421Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.495842738Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\COUNTRY.TXT')
2018-12-17T22:11:22.503363974Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.510247947Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.518015562Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.520117162Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.524446256Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.530825524Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\DEBUG.EXE')
2018-12-17T22:11:22.538881477Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.545623509Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.552241472Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.553976775Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.557871695Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.563798345Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\DOSSETUP.INI')
2018-12-17T22:11:22.571260649Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.579445539Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.586554106Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.588002154Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.593128361Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.59946644Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\DRVSPACE.BIN')
2018-12-17T22:11:22.607289379Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.614060308Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.620965951Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.623889056Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.627883776Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.633878928Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EDIT.COM')
2018-12-17T22:11:22.642729389Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.650844599Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.657852655Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.660057083Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.663992136Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.669909805Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EXPAND.EXE')
2018-12-17T22:11:22.677210602Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.684025175Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.691805507Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.694009281Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.698470578Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.705001188Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\FDISK.EXE')
2018-12-17T22:11:22.713623824Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.720548499Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.727543774Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.729712326Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.733989206Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.740309178Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\FORMAT.COM')
2018-12-17T22:11:22.748678564Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.756009108Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.763169671Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.765679863Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.770209248Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.776337313Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\KEYB.COM')
2018-12-17T22:11:22.784622675Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.791360377Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.798003521Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.800089041Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.804103027Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.810186813Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\KEYBOARD.SYS')
2018-12-17T22:11:22.817924773Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.824728533Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.831631599Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.834388547Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.838558499Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.84482792Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\MEM.EXE')
2018-12-17T22:11:22.853681452Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.86049635Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.867442318Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.869726955Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.877476549Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.883915581Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\NLSFUNC.EXE')
2018-12-17T22:11:22.891999428Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.899307438Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.906325775Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.908598413Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.91391696Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.920776153Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\README.TXT')
2018-12-17T22:11:22.928811311Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.936673998Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.943684333Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.94535606Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.950703701Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.957219029Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\NETWORKS.TXT')
2018-12-17T22:11:22.964451082Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:22.972556784Z 62 PC: 13acd | Close file
2018-12-17T22:11:22.98020292Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:22.981644364Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:22.987225738Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:22.993708367Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\QBASIC.EXE')
2018-12-17T22:11:23.001433992Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.009663555Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.016691587Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.0181324Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.023636942Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.030073155Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\REPLACE.EXE')
2018-12-17T22:11:23.037314196Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.04624195Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.053274201Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.054716085Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.060236928Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.0667456Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\RESTORE.EXE')
2018-12-17T22:11:23.073986145Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.082603615Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.089614409Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.09105488Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.096590844Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.103051982Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\SCANDISK.EXE')
2018-12-17T22:11:23.110297248Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.119203559Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.126323785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.127758076Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.133312042Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.139741118Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\SCANDISK.INI')
2018-12-17T22:11:23.14696696Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.229333564Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.271476297Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.272644647Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.277230662Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.28341064Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\SETUP.EXE')
2018-12-17T22:11:23.293549783Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.414342896Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.486930029Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.488951539Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.493597643Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.500341381Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\SYS.COM')
2018-12-17T22:11:23.508486976Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.515670825Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.522594961Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.524842031Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.529527096Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.537197828Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\XCOPY.EXE')
2018-12-17T22:11:23.545206237Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.552446387Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.559549379Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.561781706Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.566450298Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.573074427Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\DEFRAG.EXE')
2018-12-17T22:11:23.58101076Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.588053598Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.594998766Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.597344895Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.602273916Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.608523119Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\DEFRAG.HLP')
2018-12-17T22:11:23.61708387Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.624582897Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.633072014Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.635004514Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.639196774Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.646914782Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EGA.CPI')
2018-12-17T22:11:23.65755729Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.6659534Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.675306205Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.677001663Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.680934966Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.687145721Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EGA2.CPI')
2018-12-17T22:11:23.694815683Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.700618988Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.709522366Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.712064602Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.720148552Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.72737776Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EGA3.CPI')
2018-12-17T22:11:23.736128017Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.742977032Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.749854318Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.751652927Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.759236374Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.765526504Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\EMM386.EXE')
2018-12-17T22:11:23.77321796Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.780078351Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.787878657Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.789750922Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.794886589Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.80219165Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\ISO.CPI')
2018-12-17T22:11:23.80985509Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.820786573Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.828705088Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.830546646Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.834895165Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.842247635Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\KEYBRD2.SYS')
2018-12-17T22:11:23.849934253Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.856880974Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.865633492Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.867094024Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.871424298Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.878725312Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\MSCDEX.EXE')
2018-12-17T22:11:23.886324037Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.893219821Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.901059623Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.902870292Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.907211877Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:23.914446344Z 61 PC: 13a7d | Open file (Filename = 'c:\DOS\QBASIC.INI')
2018-12-17T22:11:23.922044111Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:23.930132809Z 62 PC: 13acd | Close file
2018-12-17T22:11:23.938002622Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.939819039Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.943201943Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:23.945691114Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:23.953920047Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.955000106Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.959026996Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.960161948Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.963917994Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.965915894Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.969346602Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.970752537Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.975470538Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.976862728Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.980289162Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.982800084Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.986243443Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.987632099Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.992014367Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.993399309Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:23.996797915Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:23.99933583Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.002450933Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.003668381Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.008237278Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.009631678Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.013453793Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.014921845Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.018359105Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.020363411Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.023804642Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.025186491Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.029497009Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.0308701Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.034295789Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.036092856Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.039536616Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.041122806Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.045220316Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.046585299Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.050767961Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.052275696Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.055652218Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.05775047Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.061155395Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.062512607Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.066453598Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.067781048Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.071159795Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.073379592Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.076745783Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.078114388Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.082321632Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.08368366Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.087805118Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.089607206Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.092983499Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.094522242Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.096653949Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.097555273Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.100257486Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.101202326Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.103314206Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.104763881Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.106919523Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.107824464Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.11035469Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.111195359Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.113531054Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.114718142Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.11674167Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.118322621Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.120989997Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.121879461Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.124500194Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.12547008Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.127596644Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.129011033Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.131041412Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.131894276Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.134173212Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.135071637Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.13778232Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:24.138726441Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:24.145247432Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.146828696Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.149905999Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.150867869Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.154082639Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.157985649Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM')
2018-12-17T22:11:24.162242314Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.164705916Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.167465033Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.171621679Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CONTROL.HLP')
2018-12-17T22:11:24.176387258Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.181692144Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.186433258Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.187726147Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.190506099Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.196365546Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SETUP.EXE')
2018-12-17T22:11:24.200858957Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.205806699Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.210647234Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.211703813Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.214796063Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.219677526Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SETUP.HLP')
2018-12-17T22:11:24.224796362Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.231397209Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.236296946Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.237379089Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.247093726Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.252619083Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SETUP.TXT')
2018-12-17T22:11:24.258648319Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.265779312Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.272531211Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.274027393Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.277703458Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.282582014Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM.INI')
2018-12-17T22:11:24.290631063Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.298357479Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.305666106Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.308786882Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.313258822Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.319846444Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WIN.INI')
2018-12-17T22:11:24.327319969Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.332873446Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.339563137Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.341215514Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.345771053Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.354895034Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINHELP.EXE')
2018-12-17T22:11:24.364130795Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.37423768Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.383138192Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.38432386Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.390024539Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.397981115Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WIN.COM')
2018-12-17T22:11:24.405984981Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.413850632Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.423694801Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.424983404Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.431145332Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.440813576Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\BOOTLOG.TXT')
2018-12-17T22:11:24.448484211Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.456850586Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.46448904Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.46592186Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.470615954Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.477321915Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MOUSE.INI')
2018-12-17T22:11:24.484907279Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.492478574Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.499264685Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.500419041Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.506135445Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.511834289Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MSD.EXE')
2018-12-17T22:11:24.516419181Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.521574947Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.526534405Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.528266936Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.531106993Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.535074141Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PACKAGER.EXE')
2018-12-17T22:11:24.540251928Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.54543238Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.551578923Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.55413977Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.557000106Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.561900767Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PBRUSH.EXE')
2018-12-17T22:11:24.567151901Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.57318033Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.578630381Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.580255636Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.58734864Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.593875581Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SOL.EXE')
2018-12-17T22:11:24.600895502Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.608397617Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.617150836Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.619354718Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.623725157Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.631252687Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\TERMINAL.EXE')
2018-12-17T22:11:24.638373224Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.645786526Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.653627458Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.6548178Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.658875152Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.665645727Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINFILE.EXE')
2018-12-17T22:11:24.673030697Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.681762842Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.689341825Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.690906654Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.695121847Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.699325185Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINFILE.HLP')
2018-12-17T22:11:24.705594217Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.711173134Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.716350201Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.71771982Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.720886249Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.724971171Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINTUTOR.EXE')
2018-12-17T22:11:24.729658263Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.734712378Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.739167877Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.740794099Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.743535699Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.74792743Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WRITE.EXE')
2018-12-17T22:11:24.753616235Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.758317061Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.762999306Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.764934306Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.768025992Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.774623631Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CALC.EXE')
2018-12-17T22:11:24.781865415Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.787976274Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.793202707Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.794270608Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.796972603Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.80347489Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CALC.HLP')
2018-12-17T22:11:24.807923648Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.815663825Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.827918535Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.829371363Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.834178021Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.840090303Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CALENDAR.EXE')
2018-12-17T22:11:24.849101278Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.855884191Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.862307759Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.864466867Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.868296668Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.8742342Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CALENDAR.HLP')
2018-12-17T22:11:24.882001046Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.888776076Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.895434937Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.897808267Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.901965524Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.908172609Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CANYON.MID')
2018-12-17T22:11:24.916730075Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.923521536Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.931127337Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.932093519Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.936065631Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.943261996Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CARDFILE.EXE')
2018-12-17T22:11:24.950106598Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.95682203Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.964113254Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.965331178Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:24.969714699Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:24.975759679Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CARDFILE.HLP')
2018-12-17T22:11:24.983177135Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:24.99093811Z 62 PC: 13acd | Close file
2018-12-17T22:11:24.998380722Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:24.999774226Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.005167073Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.011403454Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CHARMAP.EXE')
2018-12-17T22:11:25.018665589Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.023181545Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.027960377Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.029875835Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.033291114Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.038807707Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CHORD.WAV')
2018-12-17T22:11:25.044283842Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.050256453Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.057358289Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.058766825Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.062413985Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.067502011Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CLIPBRD.EXE')
2018-12-17T22:11:25.07335911Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.078835447Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.084976082Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.086201128Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.093727412Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.098724206Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CONTROL.EXE')
2018-12-17T22:11:25.104818618Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.109612666Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.114964894Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.116598075Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.119852433Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.124451503Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CONTROL.INI')
2018-12-17T22:11:25.129672798Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.134500913Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.14027063Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.141209554Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.14495534Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.149178606Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\DRWATSON.EXE')
2018-12-17T22:11:25.15379366Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.159427175Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.16434073Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.165634654Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.16879606Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.173057381Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\EMM386.EXE')
2018-12-17T22:11:25.17855268Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.18482873Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.191643625Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.193253051Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.19730244Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.205461294Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\EXPAND.EXE')
2018-12-17T22:11:25.21312038Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.220648464Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.228235872Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.229682929Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.234969781Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.241426932Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\GLOSSARY.HLP')
2018-12-17T22:11:25.248408229Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.255876401Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.262750779Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.264626517Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.268638658Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.274780338Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MORICONS.DLL')
2018-12-17T22:11:25.282553857Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.290362034Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.298183412Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.299762582Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.304015256Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.311483673Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MPLAYER.EXE')
2018-12-17T22:11:25.319138886Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.32622789Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.33318111Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.334593796Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.339531786Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.345861083Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\NETWORKS.WRI')
2018-12-17T22:11:25.35337714Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.361345009Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.367945005Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.370324732Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.3750228Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.381421465Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\NOTEPAD.EXE')
2018-12-17T22:11:25.390713846Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.397925625Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.405903896Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.407558911Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.411861472Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.418970406Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PACKAGER.HLP')
2018-12-17T22:11:25.426119513Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.433338569Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.441267508Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.442670305Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.448747955Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.455980682Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PBRUSH.HLP')
2018-12-17T22:11:25.463313783Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.471225247Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.477976164Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.480424886Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.485258674Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.491649288Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PIFEDIT.EXE')
2018-12-17T22:11:25.49994732Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.507459874Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.514271862Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.518172225Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.523092724Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.529955215Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PIFEDIT.HLP')
2018-12-17T22:11:25.537260754Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.54416074Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.551809701Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.552792676Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.557270805Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.563621226Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PRINTERS.WRI')
2018-12-17T22:11:25.570743597Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.577781161Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.585082785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.587116768Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.5920915Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.59832585Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PRINTMAN.EXE')
2018-12-17T22:11:25.611497165Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.620831645Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.628229567Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.629466284Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.635838812Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.642816486Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PRINTMAN.HLP')
2018-12-17T22:11:25.649813812Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.658054828Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.664898174Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.666282379Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.671404506Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.677759914Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PROGMAN.EXE')
2018-12-17T22:11:25.68572886Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.692598715Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.699494555Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.702223623Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.7065603Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.712206512Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PROGMAN.HLP')
2018-12-17T22:11:25.716779094Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.721617769Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.727831186Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.729298669Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.735227839Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.741751303Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\README.WRI')
2018-12-17T22:11:25.748938306Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.755510281Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.761363304Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.763561555Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.768221648Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.775972757Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\RECORDER.EXE')
2018-12-17T22:11:25.784678323Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.791066307Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.796380305Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.797469068Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.801131432Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.807152514Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\RECORDER.HLP')
2018-12-17T22:11:25.813831514Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.818790892Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.824309744Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.825756927Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.829220528Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.833159668Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\REGEDIT.EXE')
2018-12-17T22:11:25.838340934Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.843439408Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.84861147Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.850293381Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.853316684Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.857721163Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\REGEDIT.HLP')
2018-12-17T22:11:25.86589807Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.872687687Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.880574661Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.882438575Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.887345318Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.894659655Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\REGEDITV.HLP')
2018-12-17T22:11:25.902399659Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.909182285Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.930179934Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.931736472Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.943364536Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.950523027Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SMARTDRV.EXE')
2018-12-17T22:11:25.957854678Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:25.969962381Z 62 PC: 13acd | Close file
2018-12-17T22:11:25.97818684Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:25.98012522Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:25.984407013Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:25.991984194Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SOUNDREC.EXE')
2018-12-17T22:11:25.999179175Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.005969909Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.012833989Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.013898734Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.018144946Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.024963186Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSINI.WRI')
2018-12-17T22:11:26.03189717Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.040446378Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.047146218Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.04821091Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.053308708Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.059327924Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\TERMINAL.HLP')
2018-12-17T22:11:26.067059706Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.073916776Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.080923929Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.08296114Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.087172462Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.09471223Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINHELP.HLP')
2018-12-17T22:11:26.102389306Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.109306687Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.117648894Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.119712418Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.124374132Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.130759257Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINLOGO.BMP')
2018-12-17T22:11:26.137963122Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.144898076Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.152125054Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.153685675Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.157741295Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.164506502Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINMINE.EXE')
2018-12-17T22:11:26.171399018Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.178065642Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.185618119Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.186902604Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.194945153Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.201117941Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINTUTOR.DAT')
2018-12-17T22:11:26.208211315Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.220532011Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.227487869Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.229988743Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.234705708Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.241292516Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WRITE.HLP')
2018-12-17T22:11:26.252903179Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.259807912Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.267224536Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.268459837Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.272759557Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.279541306Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\256COLOR.BMP')
2018-12-17T22:11:26.28692308Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.295304214Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.30323318Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.304634269Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.309700553Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.317239253Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\ARCADE.BMP')
2018-12-17T22:11:26.325713486Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.332655211Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.341571223Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.344027417Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.349380159Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.357742167Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\ARGYLE.BMP')
2018-12-17T22:11:26.365897253Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.392329154Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.399393811Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.400863011Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.406167048Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.412774741Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CASTLE.BMP')
2018-12-17T22:11:26.421800903Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.429634623Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.436640812Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.439335955Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.443773405Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.452629677Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CHARMAP.HLP')
2018-12-17T22:11:26.460546557Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.467324273Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.475687748Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.477133098Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.482528515Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.489485229Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CHIMES.WAV')
2018-12-17T22:11:26.496698232Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.50248685Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.507603268Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.50921981Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.512381216Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.521024028Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CLIPBRD.HLP')
2018-12-17T22:11:26.528201306Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.53495022Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.542141343Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.543537687Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.548741375Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.555966316Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\CLOCK.EXE')
2018-12-17T22:11:26.563149969Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.570255022Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.577191704Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.578951228Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.584130632Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.591444925Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\DING.WAV')
2018-12-17T22:11:26.598645504Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.606995744Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.614492108Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.615604526Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.620633142Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.62726273Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\EGYPT.BMP')
2018-12-17T22:11:26.634345031Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.64260903Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.649996086Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.652381465Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.65707766Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.6636027Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\HIMEM.SYS')
2018-12-17T22:11:26.671997414Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.678493295Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.68635127Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.688104148Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.692444666Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.700241944Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\HONEY.BMP')
2018-12-17T22:11:26.707587489Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.716192424Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.723786737Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.724870347Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.730480428Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.736954178Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MPLAYER.HLP')
2018-12-17T22:11:26.745352104Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.752270224Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.759527338Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.761913355Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.766362752Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.778088143Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MSD.INI')
2018-12-17T22:11:26.786388472Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.794032072Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.802684758Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.805314883Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.815362789Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.821976087Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\NOTEPAD.HLP')
2018-12-17T22:11:26.830267565Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.837322419Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.844355316Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.847115117Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.852261577Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.859842906Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PBRUSH.DLL')
2018-12-17T22:11:26.867731247Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.874703396Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.882830535Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.884284027Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.889732585Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.89663803Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\RAMDRIVE.SYS')
2018-12-17T22:11:26.904070326Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.912159673Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.919852517Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.922332518Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.927110351Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.93372238Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\RECORDER.DLL')
2018-12-17T22:11:26.942471881Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.949394666Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.95736779Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.959182341Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:26.963569107Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:26.971417397Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\REDBRICK.BMP')
2018-12-17T22:11:26.978851293Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:26.987460784Z 62 PC: 13acd | Close file
2018-12-17T22:11:26.994777462Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:26.995877047Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.001325644Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.007888227Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\RIVETS.BMP')
2018-12-17T22:11:27.01621422Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.023564058Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.030587347Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.033208459Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.041064683Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.048734084Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SCRNSAVE.SCR')
2018-12-17T22:11:27.057370082Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.064549179Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.071714828Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.073228537Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.078612254Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.085332949Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SOL.HLP')
2018-12-17T22:11:27.092605115Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.100059611Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.106750453Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.108561316Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.113014266Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.121360116Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SOUNDREC.HLP')
2018-12-17T22:11:27.128887038Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.135758391Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.143360396Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.144315659Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.14963732Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.1576441Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SQUARES.BMP')
2018-12-17T22:11:27.164782821Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.172545527Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.176985944Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.178243889Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.180812522Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.185647791Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SSFLYWIN.SCR')
2018-12-17T22:11:27.190756475Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.195532481Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.201018224Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.202075553Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.205988209Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.211118142Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SSMARQUE.SCR')
2018-12-17T22:11:27.216686281Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.22186235Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.226752657Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.228808694Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.231681432Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.236662073Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SSSTARS.SCR')
2018-12-17T22:11:27.241616961Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.246647166Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.252013919Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.25299293Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.257121649Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.26276492Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\TASKMAN.EXE')
2018-12-17T22:11:27.268754052Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.274216665Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.279560344Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.28136404Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.284527239Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.289838833Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\THATCH.BMP')
2018-12-17T22:11:27.294411529Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.299930088Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.305133625Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.306966573Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.309948526Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.314177632Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WININI.WRI')
2018-12-17T22:11:27.319823736Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.325767429Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.331503153Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.332696459Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.338380548Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.342771894Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINMINE.HLP')
2018-12-17T22:11:27.348163714Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.354949966Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.360209523Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.361855329Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.364825185Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.371279267Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINVER.EXE')
2018-12-17T22:11:27.378231769Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.385128083Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.390969055Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.392055533Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.395896096Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.4011584Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\ZIGZAG.BMP')
2018-12-17T22:11:27.41416615Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.419832049Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.427070549Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.428235748Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.432528759Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.439436279Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\_DEFAULT.PIF')
2018-12-17T22:11:27.44683199Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.453903469Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.460708549Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.462783022Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.467731121Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.475428456Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\DOSPRMPT.PIF')
2018-12-17T22:11:27.48252891Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.489976896Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.495215218Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.496275852Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.500277434Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.50415931Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\TEMP')
2018-12-17T22:11:27.508935837Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.510159797Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.513542628Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.517464429Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\PROGMAN.INI')
2018-12-17T22:11:27.525241748Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.532243496Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.53959882Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.541734178Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.545687079Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.552681208Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\REG.DAT')
2018-12-17T22:11:27.559668581Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.567414853Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.574589153Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.575663158Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.580886708Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.587166939Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\MAIN.GRP')
2018-12-17T22:11:27.595404089Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.60195259Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.609409565Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.61145907Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.615823532Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.62264796Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\ACCESSOR.GRP')
2018-12-17T22:11:27.629734627Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.637691217Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.64433827Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.645725911Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.650400727Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.657586474Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\GAMES.GRP')
2018-12-17T22:11:27.665676046Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.67329166Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.680675728Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.681819259Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.686745412Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.691059995Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\STARTUP.GRP')
2018-12-17T22:11:27.695526113Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.700772076Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.705676415Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.707338752Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.710409167Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.714937898Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\APPLICAT.GRP')
2018-12-17T22:11:27.719303258Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.725254825Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.73028067Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.731084677Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.734401465Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.738297297Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\QBASIC.PIF')
2018-12-17T22:11:27.743891655Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.748887676Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.755605613Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.756721711Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.761249839Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.765827856Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\EDIT.PIF')
2018-12-17T22:11:27.771057286Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.777623639Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.784313712Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.787738915Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.795448831Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.802886222Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\WINFILE.INI')
2018-12-17T22:11:27.811051655Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.81849593Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.82790462Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.829181884Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.834290275Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.841654938Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\DOSAPP.INI')
2018-12-17T22:11:27.850240642Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.858247201Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.865351311Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.868665644Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.871808983Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:27.874232284Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:27.883587829Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.885352937Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.892036282Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.893136996Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.898110753Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:27.89944294Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:27.909710406Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.918504643Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.922401592Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.92384669Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.927219496Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.932007695Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\CPWIN386.CPL')
2018-12-17T22:11:27.937773068Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.944200908Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.94934255Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.950862791Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.953572037Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.95947793Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\GDI.EXE')
2018-12-17T22:11:27.963874266Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:27.9683378Z 62 PC: 13acd | Close file
2018-12-17T22:11:27.973729048Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:27.974496893Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:27.977776427Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:27.983971489Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SETUP.INF')
2018-12-17T22:11:27.997552365Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.003708354Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.009141832Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.011180471Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.01419509Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.02217854Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\USER.EXE')
2018-12-17T22:11:28.036206424Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.044327238Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.051088498Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.052391757Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.056626656Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.062956703Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\CGA40WOA.FON')
2018-12-17T22:11:28.071574402Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.078517777Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.087200426Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.089080168Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.093593233Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.101250198Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\CGA80WOA.FON')
2018-12-17T22:11:28.108541693Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.116860161Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.124016028Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.126144626Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.130563804Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.137698956Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COMM.DRV')
2018-12-17T22:11:28.145406856Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.152322992Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.161092688Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.162541257Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.167813868Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.174738992Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\DOSAPP.FON')
2018-12-17T22:11:28.182691389Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.191531289Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.199049604Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.201666017Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.206265817Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.214354589Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\DOSX.EXE')
2018-12-17T22:11:28.221679173Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.230421772Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.237466392Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.239290237Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.244142007Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.250767486Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\EGA40WOA.FON')
2018-12-17T22:11:28.258778734Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.265603026Z 62 PC: 13acd | Close file
2018-12-17T22:11:28.463429867Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:28.464934596Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:28.470761254Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:28.476676305Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\KEYBOARD.DRV')
2018-12-17T22:11:28.483310457Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:28.95881381Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.067140707Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.068566527Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.07291063Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.08030656Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\KRNL286.EXE')
2018-12-17T22:11:29.085439357Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.180273623Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.301206252Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.313251371Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.317398052Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.323484864Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\KRNL386.EXE')
2018-12-17T22:11:29.332637079Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.339291653Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.346750852Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.34788191Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.353002968Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.359793271Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\LZEXPAND.DLL')
2018-12-17T22:11:29.367227271Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.3751383Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.381893458Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.384591504Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.39184097Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.399493817Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MOUSE.DRV')
2018-12-17T22:11:29.406718342Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.414588768Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.421912015Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.423341408Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.42904032Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.435504509Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VER.DLL')
2018-12-17T22:11:29.443244479Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.450153077Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.457564533Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.458615379Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.463824402Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.469980602Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGA.3GR')
2018-12-17T22:11:29.477372503Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.484452013Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.493413606Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.494653561Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.499139108Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.50555575Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGA.DRV')
2018-12-17T22:11:29.512517474Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.519345602Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.526531418Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.528276857Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.531563595Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.538428872Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGACOLOR.2GR')
2018-12-17T22:11:29.545233549Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.552599171Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.559008336Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.56025633Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.564517457Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.570919734Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGALOGO.RLE')
2018-12-17T22:11:29.579126066Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.585735123Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.594407818Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.595490326Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.600054614Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.607280444Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGAOEM.FON')
2018-12-17T22:11:29.614523596Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.621382661Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.629187785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.630992515Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.63520076Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.642890343Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGASYS.FON')
2018-12-17T22:11:29.649999067Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.657961828Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.665505336Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.667720713Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.671925984Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.679057855Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WIN.CNF')
2018-12-17T22:11:29.685972458Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.692758377Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.700548333Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.701737013Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.706741891Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.712973303Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WIN87EM.DLL')
2018-12-17T22:11:29.719996221Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.728236907Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.735186153Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.737993648Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.742326572Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.749574463Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\EGA80WOA.FON')
2018-12-17T22:11:29.756962174Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.764684784Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.771253578Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.772527008Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.777178189Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.783885111Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MMSOUND.DRV')
2018-12-17T22:11:29.791666775Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:29.799597871Z 62 PC: 13acd | Close file
2018-12-17T22:11:29.807411043Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:29.809163973Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:29.814898973Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:29.821777895Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SYSTEM.DRV')
2018-12-17T22:11:29.830499594Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.138817616Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.146524602Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.147687036Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.152759705Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.159016841Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGAFIX.FON')
2018-12-17T22:11:30.177644144Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.184556251Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.191809002Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.193611292Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.198090893Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.204485089Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VGALOGO.LGO')
2018-12-17T22:11:30.211619895Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.221629368Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.228239886Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.229827655Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.233576094Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.240408021Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SOUND.DRV')
2018-12-17T22:11:30.248024128Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.255333082Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.261732883Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.263200193Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.270043555Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.276624357Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MAIN.CPL')
2018-12-17T22:11:30.283538712Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.291537102Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.29806986Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.299800656Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.303693322Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.311206613Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VTDA.386')
2018-12-17T22:11:30.318123561Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.326400618Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.333258513Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.335088104Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.338986353Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.34558116Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WIN386.EXE')
2018-12-17T22:11:30.352278499Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.360873227Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.367450741Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.368656354Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.374148221Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.38015772Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\APPS.INF')
2018-12-17T22:11:30.387034146Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.394411466Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.401917501Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.402887239Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.406884331Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.412787248Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COMMDLG.DLL')
2018-12-17T22:11:30.41974555Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.426281308Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.433212336Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.434162441Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.439482614Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.446585807Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\CONTROL.INF')
2018-12-17T22:11:30.454247142Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.461765483Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.468640112Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.46978827Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.47430006Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.480410825Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\DDEML.DLL')
2018-12-17T22:11:30.487761778Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.495051818Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.502343121Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.503270632Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.507657155Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.513783726Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\DRIVERS.CPL')
2018-12-17T22:11:30.521565669Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.528377925Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.535444452Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.536608569Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.541367825Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.547478404Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\DSWAP.EXE')
2018-12-17T22:11:30.554628477Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.56147426Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.568625814Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.570144635Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.573901754Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.579846953Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MCISEQ.DRV')
2018-12-17T22:11:30.586535508Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.593301049Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.599702954Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.601170102Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.605379382Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.61230731Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MCIWAVE.DRV')
2018-12-17T22:11:30.619212026Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.626492914Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.633966188Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.636166205Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.640306754Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.64709655Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MIDIMAP.DRV')
2018-12-17T22:11:30.654188317Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.660886699Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.667955398Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.669075657Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.674016124Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.680035854Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MMSYSTEM.DLL')
2018-12-17T22:11:30.687717305Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.695225006Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.702582946Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.703897916Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.708711341Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.714875087Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\OLECLI.DLL')
2018-12-17T22:11:30.722666882Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.729997744Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.737467327Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.738490089Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.742818261Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.748553134Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\OLESVR.DLL')
2018-12-17T22:11:30.755646459Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.762521799Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.769153091Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.770048474Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.774198316Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.779922256Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SHELL.DLL')
2018-12-17T22:11:30.787244586Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.79415988Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.800740247Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.801614406Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.808714109Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.814521703Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SYSEDIT.EXE')
2018-12-17T22:11:30.822275972Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.828696785Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.835699778Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.836597413Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.840536693Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.846224177Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TOOLHELP.DLL')
2018-12-17T22:11:30.852692448Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.859709138Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.866500312Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.867683721Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.871437564Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.87739602Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WINOA386.MOD')
2018-12-17T22:11:30.884828462Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.891478368Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.897956271Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.899119024Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.902878131Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.909391606Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WINOLDAP.MOD')
2018-12-17T22:11:30.916083683Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.923100324Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.9274211Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.92868714Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.932564437Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.938991948Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WSWAP.EXE')
2018-12-17T22:11:30.943388221Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.95088894Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.957440241Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.958373612Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.962586939Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:30.968531851Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIAL.FOT')
2018-12-17T22:11:30.975930118Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:30.98228656Z 62 PC: 13acd | Close file
2018-12-17T22:11:30.990391546Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:30.991585876Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:30.996203407Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.002167398Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIAL.TTF')
2018-12-17T22:11:31.009202498Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.01735486Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.024161081Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.025274432Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.030130562Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.036290031Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALBD.FOT')
2018-12-17T22:11:31.044018813Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.05052938Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.057214757Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.058116409Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.062372837Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.066285192Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALBD.TTF')
2018-12-17T22:11:31.070916543Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.07758009Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.084788908Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.087205311Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.091145404Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.097430744Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALBI.FOT')
2018-12-17T22:11:31.104190586Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.111091742Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.11855112Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.120332257Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.12417493Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.130589704Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALBI.TTF')
2018-12-17T22:11:31.137614276Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.144982685Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.151760389Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.152779402Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.156712511Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.162702034Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALI.FOT')
2018-12-17T22:11:31.16972392Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.176240848Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.183045327Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.184002048Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.188084299Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.194029877Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ARIALI.TTF')
2018-12-17T22:11:31.20096296Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.208159483Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.214827369Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.215831066Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.219014412Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.222877894Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COUR.FOT')
2018-12-17T22:11:31.227443961Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.234994258Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.242294261Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.243427156Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.247496717Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.253952233Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COUR.TTF')
2018-12-17T22:11:31.262552328Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.269449528Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.276869587Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.277873906Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.281901466Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.288004729Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURBD.FOT')
2018-12-17T22:11:31.295106695Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.301816757Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.309351605Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.310404106Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.318604177Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.325067127Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURBD.TTF')
2018-12-17T22:11:31.332956859Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.340161849Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.347254598Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.348227268Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.352806176Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.373172801Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURBI.FOT')
2018-12-17T22:11:31.380220314Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.386597436Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.393690348Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.394581297Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.399212302Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.405243297Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURBI.TTF')
2018-12-17T22:11:31.412206997Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.419498015Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.42640895Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.427351989Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.431621344Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.437659194Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURE.FON')
2018-12-17T22:11:31.444646925Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.451347318Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.458679157Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.459597649Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.464194332Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.470196526Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURI.FOT')
2018-12-17T22:11:31.477125639Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.483806578Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.490596373Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.491560717Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.495646092Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.501807329Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\COURI.TTF')
2018-12-17T22:11:31.521620208Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.528722289Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.535247037Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.53633363Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.54073922Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.546892638Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MIDIMAP.CFG')
2018-12-17T22:11:31.554685224Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.561252105Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.568680949Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.569812324Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.574354616Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.580526538Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MMTASK.TSK')
2018-12-17T22:11:31.589221017Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.595753187Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.602370338Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.603302005Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.607410823Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.613466644Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\MODERN.FON')
2018-12-17T22:11:31.620460223Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.626967382Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.633569541Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.634517249Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.638521717Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.644545455Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\ROMAN.FON')
2018-12-17T22:11:31.652292188Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.658840961Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.665398322Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.666307073Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.670780465Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.676869938Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SCRIPT.FON')
2018-12-17T22:11:31.685085306Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.69170176Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.698764448Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.699886482Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.703991455Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.710034338Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SERIFE.FON')
2018-12-17T22:11:31.718169227Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.724480568Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.731062047Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.732022842Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.736289546Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.742480964Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SETUP.REG')
2018-12-17T22:11:31.749484781Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.756867259Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.763667194Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.765644468Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.769521442Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.790205255Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SMALLE.FON')
2018-12-17T22:11:31.805866385Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.812852039Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.81952608Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.820796305Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.825851006Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.832346589Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SND.CPL')
2018-12-17T22:11:31.840213951Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.846869177Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.855683573Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.856685312Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.86178359Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.867951065Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SSERIFE.FON')
2018-12-17T22:11:31.87564339Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.883178217Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.890185313Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.891575268Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.899214594Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.905931275Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SYMBOL.FOT')
2018-12-17T22:11:31.913280003Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.920680973Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.927413141Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.928397573Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.933744226Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.939888896Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SYMBOL.TTF')
2018-12-17T22:11:31.94851496Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.955258557Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.963472812Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:31.964533783Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:31.970384723Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:31.976836522Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\SYMBOLE.FON')
2018-12-17T22:11:31.984555181Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:31.992615888Z 62 PC: 13acd | Close file
2018-12-17T22:11:31.999370405Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.000362647Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.004572012Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.011116039Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMER.DRV')
2018-12-17T22:11:32.018803013Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.026194821Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.033302046Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.034780551Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.038530338Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.042401901Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMES.FOT')
2018-12-17T22:11:32.04777105Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.052360916Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.059891739Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.06088192Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.064780659Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.07211521Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMES.TTF')
2018-12-17T22:11:32.079558943Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.086931332Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.094177413Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.095121907Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.099632212Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.105811232Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESBD.FOT')
2018-12-17T22:11:32.113212218Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.120526564Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.127482275Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.13008078Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.134374564Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.141515263Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESBD.TTF')
2018-12-17T22:11:32.148374719Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.155842104Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.162491406Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.164464108Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.168369317Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.175171747Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESBI.FOT')
2018-12-17T22:11:32.18231824Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.189736309Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.196680228Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.197482573Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.200814067Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.204885775Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESBI.TTF')
2018-12-17T22:11:32.209910958Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.214239281Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.218673764Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.219556687Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.222173407Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.226941041Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESI.FOT')
2018-12-17T22:11:32.234282666Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.244406935Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.250871423Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.252673115Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.257357522Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.263818263Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\TIMESI.TTF')
2018-12-17T22:11:32.271243152Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.278571516Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.286453019Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.28737999Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.292199843Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.298389019Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\VTDAPI.386')
2018-12-17T22:11:32.305481632Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.312545211Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.319815785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.321311538Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.325676166Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.33318017Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WIN386.PS2')
2018-12-17T22:11:32.340773358Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.347404772Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.35256784Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.353581361Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.358276618Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.364327829Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WINGDING.FOT')
2018-12-17T22:11:32.372699558Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.379546754Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.387275855Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.388264429Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.391914757Z 67 PC: 12e1f | Get or set file attributes
2018-12-17T22:11:32.399160015Z 61 PC: 13a7d | Open file (Filename = 'c:\WINDOWS\SYSTEM\WINGDING.TTF')
2018-12-17T22:11:32.41050038Z 64 PC: 13aae | Write file or device (Write 0 bytes on handle 5)
2018-12-17T22:11:32.417594206Z 62 PC: 13acd | Close file
2018-12-17T22:11:32.424977869Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.426798866Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.432970629Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:32.434983798Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:32.441428504Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.443772282Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.447201445Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.449578636Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.452753733Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.454830142Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.45784935Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.458970328Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.463412572Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.464360918Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.468270367Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.469233846Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.473158962Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.474313988Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.47751482Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.478509455Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.481937393Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.483410306Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.486279153Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.487930948Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.490825268Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.497214818Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.499962501Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.501256101Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.504213635Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.505088658Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.508986264Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.510381701Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.516015323Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.517352429Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.521116871Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.522514155Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.526388799Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.528032435Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.531064561Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.532716965Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.535771621Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.536958615Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.540754461Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.541862605Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.545955221Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.547001564Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.551042938Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.552718421Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.557324364Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.558361809Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.566831804Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.568281914Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.573015754Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.57432635Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.578114429Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.579788045Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.5828191Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.585146319Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.588205939Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.590418485Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.593435352Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.595223367Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.598691701Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.599771499Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.605061012Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.606042025Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.610240307Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.611316973Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.615575606Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.616589273Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.619562567Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.62149039Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.62457411Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.626562739Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.629668509Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.631595779Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.634703506Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.636987291Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.640989576Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.643543881Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.64669485Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.648365795Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.652094719Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.653050948Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.656863027Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.657894461Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.660988296Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.662749742Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.665799035Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.667131121Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.670417631Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.671611154Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.676568578Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.677445236Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.680154651Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.681141185Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.684946531Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.685809446Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.688631659Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.68958156Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.691881532Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.69357035Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.695712867Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.697376964Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.699508505Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.7010696Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.703137658Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.705023808Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.707415047Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.708175448Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.71147782Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.712500162Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.715431907Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.716373825Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.719645491Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.720859933Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.723360766Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.725094434Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.727694831Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.729007528Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.732337658Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.733314247Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.737254528Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.738389702Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.742053172Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.743064859Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.746158681Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.747189916Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.750096327Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.751972722Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.754910848Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.757418775Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.759797442Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.761187133Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.764320587Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.765394185Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.769525326Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.770627786Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.774317699Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.775378584Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.778493121Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.780133209Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.783384274Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.78529632Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.788435838Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.790202912Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.793439801Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.801630384Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.806951488Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.808057786Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.812652492Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.813844345Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.817868568Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.81932918Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.824245047Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.825668309Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.828993738Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.831141827Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.834254227Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.83580222Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.838358527Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.839251089Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.842190117Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.843058666Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.845778623Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.847411454Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.853546878Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.856381923Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.858584229Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.860418788Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.863697903Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.865232803Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.869991598Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.871345974Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.875581929Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.877010819Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.879193524Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.881596113Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.883830237Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.886077325Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.890127916Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.89115995Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.895983225Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.89697576Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.901084168Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.902140733Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.90657004Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.907540201Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.910823786Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.912798443Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.916446553Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.91890317Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.922051399Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.924660611Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.927940106Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.930895588Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.933952838Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.935378954Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.93887371Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.940161685Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.944306414Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.945682489Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.948980609Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.951234054Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.954732387Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.958689101Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.962664384Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.965803386Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.969389326Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.970782186Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.975760957Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.977155051Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.981729044Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.983738312Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.987239008Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.989149727Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.992224386Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.993334361Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:32.99733985Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:32.998504927Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.001724952Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.003040027Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.006170816Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.00820844Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.014253062Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.015858738Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.018926691Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.019929393Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.0242636Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.025470477Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.028831223Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.030796398Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.033880944Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.036468225Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.039643109Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.041116855Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.044134165Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.045047844Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.049091162Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.050008005Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.0528768Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.05489192Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.057896513Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.059063048Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.064303241Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.065420304Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.06944387Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.070715297Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.074208801Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.076635905Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.079717571Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.082308536Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.085436833Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.087584082Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.090899169Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.092148617Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.09984525Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.10095861Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.105232805Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.106174979Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.109346638Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.110795355Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.114149576Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.116270473Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.11933349Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.120570185Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.123653752Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.124908826Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.128863461Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.130100626Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.133687874Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.135506581Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.138658562Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.140255877Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.143288852Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.14422318Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.14945056Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.150673615Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.154849871Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.155935981Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.158998176Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.161168655Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.164199923Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.166249034Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.169220069Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.170359215Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.173995669Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.17518277Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.181469634Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.182885417Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.18640178Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.188147907Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.191430893Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.19274131Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.197129848Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.198338001Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.201513739Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.203506009Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.206824159Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.209390982Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.212626331Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.21660948Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.219862274Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.221056592Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.225604785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.226930506Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.230784748Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.232532352Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.235787654Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.23812901Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.241390079Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.242625707Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.246471758Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.247735117Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.252383992Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.25404691Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.258927171Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.260624512Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.263707158Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.26643763Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.272497785Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.273793715Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.277612773Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.278677548Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.282830625Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.2839169Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.286996284Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.289607437Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.292676873Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.295505613Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.298623984Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.299836642Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.304223351Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.306110105Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.310681133Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.311974732Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.316543948Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.318705223Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.321878592Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.323724953Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.326724562Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.328654886Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.332412126Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.333785976Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.337753585Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.339022199Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.34301046Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.344239308Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.347439389Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.349530091Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.352550521Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.354675148Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.360855096Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.361867819Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.366221407Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.367200009Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.371543457Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.372594109Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.37588723Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.378291506Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.381944005Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.38443566Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.387658082Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.389863871Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.393409716Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.394598439Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.399608092Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.40119942Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.404449252Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.406751037Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.410351791Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.411582222Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.415865054Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.417451969Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.420693692Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.422909674Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.426560066Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.427749094Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.43203191Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.433643056Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.436911357Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.439181731Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.442789749Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.4436852Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.450432126Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.451785774Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.454839451Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.456875731Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.46082788Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.461865952Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.465512556Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.466579658Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.469701643Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.472176911Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.47659675Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:33.479003627Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:33.488701826Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.490979279Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.495269137Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.496505829Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.500848804Z 26 PC: 12e77 | Set disk transfer address
2018-12-17T22:11:33.50217708Z 78 PC: 12e83 | Find first file
2018-12-17T22:11:33.508354127Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.510051839Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.513086841Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.514100004Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.517720727Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.518713115Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.522034149Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.523710284Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.526802385Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.529102156Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.53217002Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.534944644Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.538179196Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.539287928Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.54387138Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.544959681Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.548102716Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.550223912Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.554101163Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.55651607Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.559677697Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.560739526Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.569962023Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.571251441Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.578203163Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.580064617Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.583432858Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.584856073Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.587724725Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.589097787Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.593147828Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.594438799Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.597642491Z 26 PC: 12e9b | Set disk transfer address
2018-12-17T22:11:33.59924135Z 79 PC: 12ea0 | Find next file
2018-12-17T22:11:33.602828132Z 60 PC: 13ee7 | Create or truncate file