Sample viewer

vx.netlux.org/Virus.DOS.Vbasic.h

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:27:59.951985728Z 26 PC: 15311 | Set disk transfer address
2018-12-17T22:27:59.959101518Z 53 PC: 15316 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:59.960256941Z 48 PC: 15322 | Get DOS version
2018-12-17T22:27:59.961175845Z 37 PC: 1532e | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:27:59.963241929Z 51 PC: 1543c | Get or set Ctrl-Break
2018-12-17T22:27:59.964286666Z 46 PC: 1543c | Set verify flag
2018-12-17T22:27:59.965406024Z 44 PC: 1543c | Get time 0x1543c: mov bp, sp
0x1543e: mov bp, word ptr [bp + 8]
0x15441: mov word ptr [bp], ax
0x15444: mov word ptr [bp + 2], bx
0x15447: mov word ptr [bp + 4], cx
0x1544a: mov word ptr [bp + 6], dx
0x1544d: mov word ptr [bp + 8], si
0x15450: mov word ptr [bp + 0xa], di
0x15453: pushf
0x15454: pop ax
0x15455: and ax, 1
0x15458: mov word ptr [bp + 0xc], ax
0x1545b: cld
0x1545c: pop di
0x1545d: pop si
0x1545e: pop bp
0x1545f: ret
0x15460: push bp
0x15461: mov bp, sp
0x15463: mov ax, word ptr [bp + 4]
2018-12-17T22:27:59.968285349Z 42 PC: 1543c | Get date 0x1543c: mov bp, sp
0x1543e: mov bp, word ptr [bp + 8]
0x15441: mov word ptr [bp], ax
0x15444: mov word ptr [bp + 2], bx
0x15447: mov word ptr [bp + 4], cx
0x1544a: mov word ptr [bp + 6], dx
0x1544d: mov word ptr [bp + 8], si
0x15450: mov word ptr [bp + 0xa], di
0x15453: pushf
0x15454: pop ax
0x15455: and ax, 1
0x15458: mov word ptr [bp + 0xc], ax
0x1545b: cld
0x1545c: pop di
0x1545d: pop si
0x1545e: pop bp
0x1545f: ret
0x15460: push bp
0x15461: mov bp, sp
0x15463: mov ax, word ptr [bp + 4]
2018-12-17T22:27:59.970996451Z 25 PC: 1543c | Get default drive
2018-12-17T22:27:59.972441335Z 54 PC: 1543c | Get free disk space
2018-12-17T22:27:59.98118313Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:27:59.986040484Z 78 PC: 1543c | Find first file
2018-12-17T22:28:00.001195826Z 61 PC: 1543c | Open file (Filename = 'TEST.EXE')
2018-12-17T22:28:00.007765714Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.012824891Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.014402768Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.021658923Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.032338041Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.03352103Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.035582774Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.038124322Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.039538765Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.041670727Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.043027454Z 78 PC: 1543c | Find first file
2018-12-17T22:28:00.047072459Z 61 PC: 1543c | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:28:00.051682715Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.052770103Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.053973345Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.064318942Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.066618677Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.069195566Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.072547444Z 64 PC: 1543c | Write file or device (Write 9 bytes on handle 5)
2018-12-17T22:28:00.075629954Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.091844335Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.094052663Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.101869902Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.104043827Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.108251554Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.110201218Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.118781077Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.120508701Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.124094082Z 61 PC: 1543c | Open file (Filename = 'PRINT.COM')
2018-12-17T22:28:00.131454805Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.134018951Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.136099101Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.142831339Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.145344854Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.150501941Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.152315057Z 64 PC: 1543c | Write file or device (Write 5 bytes on handle 5)
2018-12-17T22:28:00.156161343Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.16577896Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.167523032Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.174922523Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.177554272Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.180722619Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.182628259Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.191694755Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.193130169Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.196304083Z 61 PC: 1543c | Open file (Filename = 'HELLO.COM')
2018-12-17T22:28:00.203373925Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.204758345Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.206547235Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.213884149Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.216267921Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.220131589Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.222588522Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:00.225635917Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.2453738Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.248223377Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.25480496Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.258008447Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.261483373Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.26301535Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.271130077Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.273406954Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.276409038Z 61 PC: 1543c | Open file (Filename = 'PHANG.COM')
2018-12-17T22:28:00.283929734Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.286023901Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.287727042Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.294743447Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.297321872Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.299985812Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.302174439Z 64 PC: 1543c | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:28:00.306439279Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.316369069Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.318067584Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.327706903Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.329254452Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.332553696Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.335391299Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.343392406Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.34467741Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.349343166Z 61 PC: 1543c | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:28:00.356896208Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.358547865Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.36093103Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.367562414Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.369151184Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.372671825Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.374201263Z 64 PC: 1543c | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:28:00.376994813Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.387625161Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.389234557Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.397520587Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.399319675Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.409422472Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.411058704Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.419852897Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.421724262Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.424511959Z 61 PC: 1543c | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:28:00.432090934Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.43478458Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.436408022Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.44309573Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.445551254Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.448595799Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.450267127Z 64 PC: 1543c | Write file or device (Write 11 bytes on handle 5)
2018-12-17T22:28:00.454114093Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.46322034Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.464786715Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.468633398Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.470250965Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.473055737Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.475685138Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.483675359Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.485100257Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.489235985Z 61 PC: 1543c | Open file (Filename = 'PAH.COM')
2018-12-17T22:28:00.496639512Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.498353122Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.50138685Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.508093492Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.509680637Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.514171613Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.51584246Z 64 PC: 1543c | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:28:00.518800339Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:00.529140815Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.531054485Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.538172313Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.541386774Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:00.544504608Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.546475267Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.554598646Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.55642722Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.55916517Z 71 PC: 1543c | Get current directory
2018-12-17T22:28:00.562758555Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.56735971Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.57157346Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.580982921Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.590272486Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.598906286Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.609617725Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.610674875Z 78 PC: 1543c | Find first file
2018-12-17T22:28:00.62005996Z 61 PC: 1543c | Open file (Filename = 'TEST.EXE')
2018-12-17T22:28:00.626662375Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.629505848Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.630890165Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.638488803Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.641065349Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.642504307Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.645643096Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.647459669Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.648688745Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.652209572Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.653283574Z 78 PC: 1543c | Find first file
2018-12-17T22:28:00.659191177Z 61 PC: 1543c | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:28:00.666451116Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.668105687Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.669742655Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.677529333Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.679110407Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.681510653Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.684979897Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.686869467Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.689363009Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.69180267Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.693089376Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.695903889Z 61 PC: 1543c | Open file (Filename = 'PRINT.COM')
2018-12-17T22:28:00.703339426Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.704786973Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.706623648Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.713645469Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.715057231Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.717385228Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.720954665Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.722362293Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.724815205Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.72727384Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.728628676Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.73135501Z 61 PC: 1543c | Open file (Filename = 'HELLO.COM')
2018-12-17T22:28:00.738294462Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.739944389Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.741562956Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.749654551Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.751046586Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.753424885Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.757010467Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.758430491Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.760908748Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.764356214Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.766009748Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.769617184Z 61 PC: 1543c | Open file (Filename = 'PHANG.COM')
2018-12-17T22:28:00.776962209Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.778746443Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.780178967Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.787386741Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.789015472Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.791449844Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.795019033Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.796547247Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.799065775Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.802068066Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.803478111Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.80676715Z 61 PC: 1543c | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:28:00.813794608Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.815689455Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.817593347Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.825882904Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.82774675Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.830609792Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.834446177Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.836249145Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.839157112Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.841921721Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.843319967Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.846596381Z 61 PC: 1543c | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:28:00.853625479Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.8552107Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.857349528Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.863722792Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.865264321Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.872989528Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.875904422Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.87765946Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.881255878Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.883376556Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.885115532Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.889290898Z 61 PC: 1543c | Open file (Filename = 'PAH.COM')
2018-12-17T22:28:00.895978586Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:00.89757609Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.900152104Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.907383893Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.909350586Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.913049804Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:00.915704667Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:00.917181601Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:00.920445751Z 62 PC: 1543c | Close file
2018-12-17T22:28:00.922435224Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.923668642Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.927190732Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.928310844Z 78 PC: 1543c | Find first file
2018-12-17T22:28:00.934087162Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.93600507Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.938785631Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.93998588Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.943015627Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.944081368Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.946602778Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.948160704Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.950858412Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.952149356Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.954689017Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.955846891Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.95847351Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.959671569Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.961980583Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.963512607Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.965903728Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:00.966943379Z 79 PC: 1543c | Find next file
2018-12-17T22:28:00.969798954Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:00.973899488Z 14 PC: 1543c | Set default drive (Drive = 'C')
2018-12-17T22:28:00.97505442Z 25 PC: 1543c | Get default drive
2018-12-17T22:28:00.976779693Z 54 PC: 1543c | Get free disk space
2018-12-17T22:28:01.020404015Z 71 PC: 1543c | Get current directory
2018-12-17T22:28:01.022742838Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.027166846Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.031104764Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.035050303Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.040827551Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.04476377Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.048869158Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.051209753Z 78 PC: 1543c | Find first file
2018-12-17T22:28:01.059217834Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.060581115Z 78 PC: 1543c | Find first file
2018-12-17T22:28:01.067170902Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.068620009Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.071414416Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.073798114Z 78 PC: 1543c | Find first file
2018-12-17T22:28:01.079334089Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.080751503Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.083856142Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.084912535Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.087635926Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:01.096688689Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.097721284Z 78 PC: 1543c | Find first file
2018-12-17T22:28:01.106703772Z 61 PC: 1543c | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:28:01.114040372Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.115554588Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.117821504Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.123506425Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.125907732Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.127858929Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.133389557Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.134905839Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.138498833Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.139935426Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.142647848Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.145248453Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.147963533Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.150935688Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.153781413Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.155409301Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.159214087Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.160767039Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.163448941Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.166395493Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.168934309Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.17154973Z 64 PC: 1543c | Write file or device (Write 8 bytes on handle 5)
2018-12-17T22:28:01.17921225Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:01.527229461Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.529292865Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.533906636Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.535715406Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.539272797Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.542089065Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.545147381Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.548108325Z 62 PC: 1543c | Close file
2018-12-17T22:28:01.555271892Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.556736786Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.561560145Z 61 PC: 1543c | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:28:01.568182676Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.569949013Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.571989572Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.575772485Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.577396889Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.57928491Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.585835171Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.587769316Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.591346395Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.592423706Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.595207962Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.597261501Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.59911646Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.600223633Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.602785959Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.603914493Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.606233088Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.607361385Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.609118059Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.610974775Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.612757402Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.613911727Z 64 PC: 1543c | Write file or device (Write 15 bytes on handle 5)
2018-12-17T22:28:01.618533933Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:01.6337158Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.635238883Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.639003391Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.640402935Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.644263687Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.64586774Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.648521884Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.649922518Z 62 PC: 1543c | Close file
2018-12-17T22:28:01.655335702Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.656275711Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.659187013Z 61 PC: 1543c | Open file (Filename = 'DEBUG.EXE')
2018-12-17T22:28:01.663544548Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.664802507Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.666539833Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.670687524Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.672564084Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.674276986Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.687548734Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.689412689Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.692468396Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.694104188Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.697728414Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.700101847Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.702953327Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.705230615Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.707837793Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.70940064Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.712529858Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.714218144Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.716994484Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.719393046Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.722147392Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.724110375Z 64 PC: 1543c | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:28:01.729226733Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:01.737597896Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.741501743Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.743899822Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.745303308Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.748286637Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.749534576Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.75148805Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.753199141Z 62 PC: 1543c | Close file
2018-12-17T22:28:01.757933211Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.758891799Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.761438642Z 61 PC: 1543c | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:28:01.765794504Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.768393787Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.770448761Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.776564887Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.779398115Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.781492787Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.787281212Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.788974446Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.791334609Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.79252977Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.795516722Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.796930386Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.800265402Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.802340712Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.805083439Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.807989352Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.811800338Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.813444171Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.8170661Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.819002554Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.821735905Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.824170306Z 64 PC: 1543c | Write file or device (Write 15 bytes on handle 5)
2018-12-17T22:28:01.83075552Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:01.839351823Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.842124139Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.845316698Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.847079329Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.851397654Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.85312084Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.856078567Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.858642332Z 62 PC: 1543c | Close file
2018-12-17T22:28:01.867462343Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.869029522Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.874779427Z 61 PC: 1543c | Open file (Filename = 'FDISK.EXE')
2018-12-17T22:28:01.88669592Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.889417834Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.890817654Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.897029825Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.900715252Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.902455206Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.909174818Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.911873241Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.914561143Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.920122151Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.923433126Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.925204792Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.928332258Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.929937281Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:01.932612566Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.934711104Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.937241566Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.938680279Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.942099884Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.943361966Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:01.945836472Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.948042751Z 64 PC: 1543c | Write file or device (Write 8 bytes on handle 5)
2018-12-17T22:28:01.954667906Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:01.964359069Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.966565715Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.970011736Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.972419441Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.97567754Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:01.977524504Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:01.98144421Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:01.983024408Z 62 PC: 1543c | Close file
2018-12-17T22:28:01.990286914Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:01.992301424Z 79 PC: 1543c | Find next file
2018-12-17T22:28:01.996140327Z 61 PC: 1543c | Open file (Filename = 'MEM.EXE')
2018-12-17T22:28:02.00260006Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.005184497Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.006875696Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.021720842Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.024871297Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.026300108Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.031933257Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.03352897Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.036007343Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.038506599Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.041739406Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.04312539Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.0468111Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.048196068Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.050761976Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.053095116Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.055646122Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.058060072Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.06054053Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.062132418Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.065822194Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.067433374Z 64 PC: 1543c | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:28:02.073711395Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.083154842Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.084610974Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.087601717Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.089547058Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.092584939Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.09456906Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.097093669Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.098495772Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.105593653Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.106762875Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.126830827Z 61 PC: 1543c | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T22:28:02.133665766Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.135253476Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.137599038Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.143326201Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.145965343Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.14803979Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.153872353Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.155464439Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.158667647Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.161013484Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.164574309Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.166086751Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.168903543Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.171465565Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.176948878Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.178641217Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.183165707Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.184832837Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.188365404Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.190371879Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.193147113Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.195399864Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.201779106Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.211081382Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.213511384Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.216399243Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.218053123Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.221671229Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.22317697Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.226686464Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.228255357Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.236057367Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.237779242Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.241159618Z 61 PC: 1543c | Open file (Filename = 'QBASIC.EXE')
2018-12-17T22:28:02.248936448Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.251363074Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.254166524Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.262358519Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.26521587Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.266591963Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.27338516Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.274716238Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.277328711Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.279371697Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.282029402Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.283406877Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.286610737Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.287922473Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.29126887Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.293143433Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.295885372Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.298898841Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.301542064Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.303256252Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.307101721Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.308561406Z 64 PC: 1543c | Write file or device (Write 11 bytes on handle 5)
2018-12-17T22:28:02.316314983Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.326302465Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.32811723Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.332387596Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.334072135Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.338145784Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.339997755Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.342993166Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.345721934Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.354765048Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.356346899Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.359843623Z 61 PC: 1543c | Open file (Filename = 'REPLACE.EXE')
2018-12-17T22:28:02.366420085Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.369195628Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.370873596Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.376872305Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.380570229Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.382343265Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.38863907Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.390022751Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.39290172Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.39474777Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.397912069Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.400602615Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.403108287Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.404399054Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.407439401Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.408750308Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.411906232Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.413281136Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.415715147Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.41802895Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.42144071Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.423269154Z 64 PC: 1543c | Write file or device (Write 14 bytes on handle 5)
2018-12-17T22:28:02.4298711Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.438020509Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.439789187Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.442490899Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.444573799Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.447478629Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.449059604Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.452464065Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.454114533Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.461526137Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.46282403Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.465956044Z 61 PC: 1543c | Open file (Filename = 'RESTORE.EXE')
2018-12-17T22:28:02.474029723Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.475865961Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.477864501Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.483958694Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.486895373Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.489449658Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.495111722Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.496736232Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.49988372Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.501539496Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.504890551Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.506450001Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.509271171Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.511051874Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.513756449Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.51578585Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.519079512Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.520846969Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.524785359Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.52711257Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.531115657Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.533339049Z 64 PC: 1543c | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:28:02.539706433Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.568012651Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.569574194Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.572510881Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.574339198Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.577200969Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.579998971Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.582610795Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.584026331Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.591784219Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.592818649Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.597000106Z 61 PC: 1543c | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T22:28:02.603521952Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.604964191Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.607203312Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.613619639Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.616776177Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.618791454Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.62545806Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.627924954Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.630386126Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.632175371Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.635635703Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.637467948Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.64126806Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.643494526Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.646506325Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.649432725Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.652424501Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.65509617Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.658416257Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.660263238Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.664202449Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.665720365Z 64 PC: 1543c | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:28:02.671826299Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.680709907Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.682143458Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.685841205Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.687232781Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.69042911Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.693341646Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.6962184Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.699030852Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.707431882Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.708517312Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.712499096Z 61 PC: 1543c | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:28:02.719258483Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.722560257Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.723876185Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.729720426Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.733314465Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.734753275Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.740371131Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.741976282Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.744567584Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.746528182Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.749278213Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.751116828Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.753684723Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.755311451Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.75836042Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.759962746Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.762951817Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.764828062Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.767335599Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.773087331Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.77627076Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.77804936Z 64 PC: 1543c | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:28:02.785098606Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.795655094Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.798290623Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.801144264Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.802726523Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.806416536Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.807744563Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.81099319Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.812461404Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.819917815Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.821334047Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.824573274Z 61 PC: 1543c | Open file (Filename = 'XCOPY.EXE')
2018-12-17T22:28:02.831936215Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.83341718Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.835437476Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.841160676Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.843630218Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.844973388Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.851068866Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.853072631Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.855580593Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.856872888Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.85950578Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.860812008Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.863771208Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.86530164Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.867747592Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.869133695Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.871581611Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.874567615Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.876986607Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.878370055Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.881049698Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.882411364Z 64 PC: 1543c | Write file or device (Write 14 bytes on handle 5)
2018-12-17T22:28:02.889035151Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:02.897362385Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.898778193Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.902323551Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.903669303Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.907230906Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.908546821Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:02.911704735Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.913927511Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.922004754Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.92345755Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.926650422Z 61 PC: 1543c | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T22:28:02.933888033Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.935542636Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.937897838Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.943918581Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:02.946662677Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.948647467Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.954003462Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.961823632Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.964307775Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.965859384Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.968595921Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.970349177Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.97364501Z 62 PC: 1543c | Close file
2018-12-17T22:28:02.975580747Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:02.977215858Z 79 PC: 1543c | Find next file
2018-12-17T22:28:02.983316185Z 61 PC: 1543c | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:28:02.989825098Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:02.991490288Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:02.992897177Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:02.999860974Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.002448272Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.003971758Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.010140278Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.011422322Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.014514399Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.016424835Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.018292263Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.021527022Z 61 PC: 1543c | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T22:28:03.028109993Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.030372084Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.031718859Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.038087485Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.040699099Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.04223983Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.048082227Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.049594947Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.052516882Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.053866718Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.056830955Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.058233131Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.060739428Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.063092846Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.064436564Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.068059121Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.069134224Z 78 PC: 1543c | Find first file
2018-12-17T22:28:03.073699392Z 61 PC: 1543c | Open file (Filename = 'EDIT.COM')
2018-12-17T22:28:03.078030776Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.079514959Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.081442935Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.086870654Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.089265466Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.091865699Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.093615726Z 64 PC: 1543c | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:28:03.096826667Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:03.105785146Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.10805445Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.113793613Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.118200399Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.121035391Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.122870099Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.138617636Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.13971622Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.143442503Z 61 PC: 1543c | Open file (Filename = 'FORMAT.COM')
2018-12-17T22:28:03.147670663Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.149051617Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.151373572Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.166627194Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.168475554Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.174206297Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.177699289Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.179055913Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.181618036Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.183688317Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.189712521Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:03.199036679Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.200365812Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.203689604Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.205010857Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.207550242Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.209454867Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.217039927Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.218492088Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.221607611Z 61 PC: 1543c | Open file (Filename = 'KEYB.COM')
2018-12-17T22:28:03.228241959Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.229691439Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.230917931Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.236793614Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.238118557Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.244401943Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.24691491Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.248439575Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.251628239Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.253338602Z 64 PC: 1543c | Write file or device (Write 10 bytes on handle 5)
2018-12-17T22:28:03.260038915Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:03.26876597Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.27104472Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.273972857Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.275216146Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.278911804Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.280345897Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.287835198Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.288966091Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.29265723Z 61 PC: 1543c | Open file (Filename = 'SYS.COM')
2018-12-17T22:28:03.30052231Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.301989867Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.304123042Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.309721799Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.311428574Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.317228069Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.319793928Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.321737493Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.324386078Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.327455305Z 64 PC: 1543c | Write file or device (Write 8 bytes on handle 5)
2018-12-17T22:28:03.333975462Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:03.343329239Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.345272765Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.349056951Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.352245752Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:03.354930322Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.356780238Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.364305981Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.365360281Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.369241437Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.370314871Z 78 PC: 1543c | Find first file
2018-12-17T22:28:03.376557117Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.377681188Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.381411075Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.382690668Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.38583428Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.387316628Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.390311516Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.392310141Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.395651117Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.397240793Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.400137138Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.40199956Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.405032044Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.406252089Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.411589282Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.413039416Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.417571111Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.419449057Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.423521894Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.426822146Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.430132408Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.43193514Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.434963041Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.436230487Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.440009794Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.441121386Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.44492317Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.446259792Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.449546263Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.450550973Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.453997196Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.455146865Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.458135568Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.460199032Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.463138157Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.465265496Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.468272408Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.469331906Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.472967999Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.482921491Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.486673282Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.487802731Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.491246655Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.492715787Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.495930556Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.496989789Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.499854449Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.501990733Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.505097732Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.509542238Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.512653715Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.514262718Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.517435928Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.518675239Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.521765782Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.522831954Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.526646672Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.527712268Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.538766183Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.539738073Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.542550345Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.543461925Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.545679659Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.547291271Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.549420916Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.551226983Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.554814452Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.55749489Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.560547916Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.561619584Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.565250359Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.566828892Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.570871353Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.572068493Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.577238607Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:03.581169636Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.582386829Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.589300223Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.590688452Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.594855618Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:03.600601653Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.602327416Z 78 PC: 1543c | Find first file
2018-12-17T22:28:03.611215722Z 61 PC: 1543c | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:28:03.618341726Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.61997513Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.621890252Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.62877339Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.631212314Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.632991668Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.636526825Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.63808416Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.640011315Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.642315516Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.643823121Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.647894128Z 61 PC: 1543c | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:28:03.654318776Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.655874036Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.657784665Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.664223868Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.666934388Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.66801322Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.672890162Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.674161103Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.676088206Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.678327957Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.679772753Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.684402085Z 61 PC: 1543c | Open file (Filename = 'MSD.EXE')
2018-12-17T22:28:03.69092978Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.693522982Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.695320991Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.703404789Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.705610419Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.706775775Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.712205543Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.714138224Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.71766214Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.719665684Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.723554422Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.725216557Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.727876984Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.730678117Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.733234191Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.735360151Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.738317898Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.740467258Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.743632184Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.744955654Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.74774725Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.749166846Z 64 PC: 1543c | Write file or device (Write 14 bytes on handle 5)
2018-12-17T22:28:03.765257188Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:03.77399312Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.776065154Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:03.779034499Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.781083249Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:03.78418006Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.785580243Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:03.788970333Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.792174021Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.805601223Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.806786549Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.810887952Z 61 PC: 1543c | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:28:03.817559099Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.819131078Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.821003715Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.826826242Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.830385507Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.831777839Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.837441393Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.839053486Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.84192044Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.843955931Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.846495482Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.850078906Z 61 PC: 1543c | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:28:03.858292348Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.863065488Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.866839202Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.874406434Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.877286041Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.880710232Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.886426522Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.88868375Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.891281829Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.893083133Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.895142815Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.902386182Z 61 PC: 1543c | Open file (Filename = 'SOL.EXE')
2018-12-17T22:28:03.909713564Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.91163907Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.913513028Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.920551175Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.923318139Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.92594238Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.931520435Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.933830967Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.93660796Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.939367785Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.941621608Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.945175334Z 61 PC: 1543c | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:28:03.953003357Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.954559574Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.956820674Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.962969342Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:03.966390803Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.968011266Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.975607065Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:03.977259523Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:03.980249811Z 62 PC: 1543c | Close file
2018-12-17T22:28:03.98364192Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:03.984951921Z 79 PC: 1543c | Find next file
2018-12-17T22:28:03.989441697Z 61 PC: 1543c | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:28:03.996618476Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:03.999081368Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.000913485Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.007917204Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.011756398Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.013469937Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.019955285Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.021339993Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.024573897Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.026431832Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.027832321Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.031365222Z 61 PC: 1543c | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:28:04.038104075Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.039763483Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.041087342Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.048127993Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.050771913Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.052650971Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.058143672Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.060318033Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.062874701Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.065030956Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.066169611Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.069623297Z 61 PC: 1543c | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:28:04.07672793Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.078454015Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.080923738Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.086752219Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.090752717Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.092126776Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.098770473Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.1004019Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.104107549Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.106051921Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.107098176Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.111324698Z 61 PC: 1543c | Open file (Filename = 'CALC.EXE')
2018-12-17T22:28:04.118113448Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.121479381Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.123168917Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.130678827Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.133593258Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.135521138Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.142004934Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.143793857Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.148500283Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.150642324Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.153188111Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.156871992Z 61 PC: 1543c | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:28:04.164951483Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.166626425Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.168333229Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.174809375Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.177397708Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.179591117Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.184986772Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.186940871Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.189324027Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.191738642Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.192943669Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.197683082Z 61 PC: 1543c | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:28:04.204448392Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.206973645Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.208430902Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.214322738Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.218535058Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.220267542Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.22743338Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.22894006Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.232916214Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.235435036Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.237152531Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.241795375Z 61 PC: 1543c | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:28:04.248841208Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.251475781Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.252931368Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.259984695Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.262695096Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.265168083Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.270793263Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.273978091Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.276595371Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.278429711Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.280317982Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.283638303Z 61 PC: 1543c | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:28:04.291639066Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.293179485Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.29588235Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.302312733Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.306258168Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.307900321Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.314583064Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.316115017Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.31885644Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.321711429Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.322914619Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.330498836Z 61 PC: 1543c | Open file (Filename = 'CONTROL.EXE')
2018-12-17T22:28:04.337032174Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.3398449Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.341375658Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.348715219Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.352013967Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.355173918Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.36074207Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.363120491Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.366186808Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.369461194Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.370518719Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.374260608Z 61 PC: 1543c | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T22:28:04.382998023Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.384963585Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.388026076Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.394306221Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.398437861Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.400252485Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.406887345Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.408719983Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.411651407Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.413895373Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.415204175Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.419253619Z 61 PC: 1543c | Open file (Filename = 'EMM386.EXE')
2018-12-17T22:28:04.425734802Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.427885025Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.430049781Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.435924446Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.438402481Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.440396696Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.445756516Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.447979906Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.450437132Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.453459291Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.454928118Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.459287297Z 61 PC: 1543c | Open file (Filename = 'EXPAND.EXE')
2018-12-17T22:28:04.465847991Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.468428654Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.469794152Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.47631037Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.47884973Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.480358359Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.486443296Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.487770788Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.490755508Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.49230116Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.49539591Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.496867279Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.500085172Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.501810434Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.505471119Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.507076219Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.51014621Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.511790262Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.51509719Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.516738208Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.520195505Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.521637816Z 64 PC: 1543c | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:28:04.528167992Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:04.536750066Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.539915877Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:04.54303719Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.545870908Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:04.549034853Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.551693145Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:04.554893805Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.556625629Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.564393211Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.565411707Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.569261868Z 61 PC: 1543c | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T22:28:04.57652317Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.57905318Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.580376945Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.586678403Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.589185559Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.591172777Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.597251072Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.598877749Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.601546342Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.603499113Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.605227512Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.608598518Z 61 PC: 1543c | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T22:28:04.616081228Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.617516634Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.619172677Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.624919161Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.627913113Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.629261155Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.635012174Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.636333907Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.639112786Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.640829465Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.642148991Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.645266948Z 61 PC: 1543c | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T22:28:04.6532634Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.654986878Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.657273233Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.663336217Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.667013448Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.668544853Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.675451663Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.676924052Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.680503765Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.682632497Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.685369833Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.688780022Z 61 PC: 1543c | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T22:28:04.696894837Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.698646258Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.70162247Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.707734695Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.711503854Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.713133316Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.719791619Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.721587198Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.724616793Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.72820572Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.729553127Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.737221097Z 61 PC: 1543c | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T22:28:04.744032303Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.747049558Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.748715542Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.753217772Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.757837626Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.759736712Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.765166494Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.767085355Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.77000751Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.773095538Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.774379746Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.778175179Z 61 PC: 1543c | Open file (Filename = 'RECORDER.EXE')
2018-12-17T22:28:04.785494883Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.787044815Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.789218175Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.795255571Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.799575163Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.801339879Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.809032829Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.810347402Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.813677311Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.815474855Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.817404946Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.82062076Z 61 PC: 1543c | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T22:28:04.827777714Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.829573121Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.832481168Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.838648148Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.842569055Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.844250192Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.849692785Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.851898794Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.854472254Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.85656663Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.860061485Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.864390765Z 61 PC: 1543c | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T22:28:04.871641516Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.874598039Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.876062542Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.882682218Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.885292236Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.887826781Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.893692748Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.896109195Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.898622625Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.901048709Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.902119111Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.906235558Z 61 PC: 1543c | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T22:28:04.912777696Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.915176396Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.916840438Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.924739838Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.92752384Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.930519523Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.936289365Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.938939561Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.94152627Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.944312599Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.945404673Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.950758477Z 61 PC: 1543c | Open file (Filename = 'WINMINE.EXE')
2018-12-17T22:28:04.957230138Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:04.960029054Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.961456042Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.968728054Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:04.971336791Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.974383383Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.980090731Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:04.981479838Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:04.9851501Z 62 PC: 1543c | Close file
2018-12-17T22:28:04.987113008Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:04.989259926Z 79 PC: 1543c | Find next file
2018-12-17T22:28:04.995528761Z 61 PC: 1543c | Open file (Filename = 'CLOCK.EXE')
2018-12-17T22:28:05.002873028Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.004463636Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.006706186Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.012497409Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.015762898Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.017169953Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.023902152Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.025365953Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.029365611Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.031384608Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.033704445Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.040149925Z 61 PC: 1543c | Open file (Filename = 'TASKMAN.EXE')
2018-12-17T22:28:05.047420545Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.048918298Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.051550107Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.057571891Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.059186465Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.062145456Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.064148575Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.066167002Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.072304669Z 61 PC: 1543c | Open file (Filename = 'WINVER.EXE')
2018-12-17T22:28:05.080421262Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.0822302Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.085036806Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.090815417Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.093094078Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.097197896Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.101250807Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.102582705Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.109825395Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.110915856Z 78 PC: 1543c | Find first file
2018-12-17T22:28:05.117848012Z 61 PC: 1543c | Open file (Filename = 'WIN.COM')
2018-12-17T22:28:05.124400763Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.127186762Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.128574364Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.13492612Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.136885764Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.143651372Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.146254595Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.147903422Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.150617269Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.15207437Z 64 PC: 1543c | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:28:05.159541528Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:05.178136792Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.180630077Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:05.184933639Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.187644167Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:05.191621068Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.197756573Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.209500251Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.211166721Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.215611322Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.216989352Z 78 PC: 1543c | Find first file
2018-12-17T22:28:05.224315956Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.225989865Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.229206788Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.231045852Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.234270746Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:05.240852273Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.241940815Z 78 PC: 1543c | Find first file
2018-12-17T22:28:05.251531002Z 61 PC: 1543c | Open file (Filename = 'GDI.EXE')
2018-12-17T22:28:05.259050185Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.261451296Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.270626528Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.278640174Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.281518942Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.283204346Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.286685749Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.288341236Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.290224331Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.292362619Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.293241822Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.296120508Z 61 PC: 1543c | Open file (Filename = 'USER.EXE')
2018-12-17T22:28:05.300196386Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.301949727Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.303225228Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.310098108Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.312487451Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.313825375Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.319375821Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.320966996Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.323481669Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.326044444Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.327912017Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.331430318Z 61 PC: 1543c | Open file (Filename = 'DOSX.EXE')
2018-12-17T22:28:05.337940008Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.339844354Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.341596676Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.34773421Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.350241868Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.352043699Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.357551009Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.359227096Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.362138902Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.364413948Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.36702629Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.368473695Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.371785542Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.381277293Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.384495152Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.38590173Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.389283621Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.39067109Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.393875213Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.395369762Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.398583371Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.400778555Z 64 PC: 1543c | Write file or device (Write 6 bytes on handle 5)
2018-12-17T22:28:05.408144845Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:05.416762437Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.419289746Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.422289895Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.424209336Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.428838205Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.430255647Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.433751712Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.43572052Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.443615891Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.445046868Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.449279801Z 61 PC: 1543c | Open file (Filename = 'KRNL286.EXE')
2018-12-17T22:28:05.456000397Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.458494577Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.460048112Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.465929137Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.469353048Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.470941342Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.477518852Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.478924827Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.482748055Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.484870426Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.486724554Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.489908993Z 61 PC: 1543c | Open file (Filename = 'KRNL386.EXE')
2018-12-17T22:28:05.497061799Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.49856631Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.500888315Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.506975801Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.510476423Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.511764909Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.518247403Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.519578087Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.522663988Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.524371187Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.525604744Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.531818163Z 61 PC: 1543c | Open file (Filename = 'WIN386.EXE')
2018-12-17T22:28:05.538303896Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.541935734Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.54397369Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.551843564Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.554766343Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.556861484Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.562438843Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.564624063Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.567514879Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.570275111Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.571635975Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.575455545Z 61 PC: 1543c | Open file (Filename = 'DSWAP.EXE')
2018-12-17T22:28:05.582004128Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.585334275Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.586808386Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.59425863Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.596379062Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.598094076Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.60367357Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.605314146Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.607807404Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.609200665Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.611806976Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.613191709Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.622061003Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.623868051Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.628027398Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.630329443Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.63309045Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.635578143Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.638831333Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.640824884Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.644022119Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.646125468Z 64 PC: 1543c | Write file or device (Write 14 bytes on handle 5)
2018-12-17T22:28:05.652116977Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:05.662353379Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.663668055Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.66775114Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.669086279Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.6728796Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.674581214Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.678526724Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.680600841Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.689145265Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.690495319Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.696926305Z 61 PC: 1543c | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T22:28:05.704266342Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.706834108Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.709191419Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.716009003Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.718995426Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.720601939Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.726633282Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.72970129Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.732619613Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.736255743Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.737731169Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.742199845Z 61 PC: 1543c | Open file (Filename = 'WSWAP.EXE')
2018-12-17T22:28:05.748799952Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.750755327Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.75233821Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.758506684Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.761093147Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.76480266Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.770240746Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.772371511Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.774869778Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.777181727Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.780308126Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.781603715Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.784968136Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.786463863Z 63 PC: 1543c | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:28:05.78922105Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.791512297Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.794250219Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.796994508Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.79954779Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.800994172Z 63 PC: 1543c | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:28:05.803455539Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.805632346Z 64 PC: 1543c | Write file or device (Write 2 bytes on handle 5)
2018-12-17T22:28:05.811901654Z 64 PC: 1543c | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T22:28:05.82036926Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.821821878Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.824848568Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.827253323Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.83100358Z 66 PC: 1543c | Move file pointer
2018-12-17T22:28:05.834249261Z 64 PC: 1543c | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:28:05.837193977Z 87 PC: 1543c | Get or set file date and time
2018-12-17T22:28:05.840191451Z 62 PC: 1543c | Close file
2018-12-17T22:28:05.848499282Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.851479852Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.858931379Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.86139229Z 78 PC: 1543c | Find first file
2018-12-17T22:28:05.867723144Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.869884177Z 78 PC: 1543c | Find first file
2018-12-17T22:28:05.875864351Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.877946055Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.880928343Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.88232933Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.885471099Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.886513949Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.890487301Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.891550593Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.895898276Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.897222104Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.901133886Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.902237563Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.906084354Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.907151472Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.910529465Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.912188154Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.915242398Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.916893918Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.919861742Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.921537801Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.924507289Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.925896123Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.928914699Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.930045655Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.934647509Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.93576995Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.939384877Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.940476526Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.944203927Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.94620245Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.949628833Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.952436602Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.955819199Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.958038495Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.961111637Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.96273758Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.965655773Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.967298276Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.970161407Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.971958664Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.975069449Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.97660797Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.979272755Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.980271689Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.98398085Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.987777569Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.992950905Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.993998036Z 79 PC: 1543c | Find next file
2018-12-17T22:28:05.997488892Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:05.998630686Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.001822339Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.003055143Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.005817238Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.007616378Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.010467484Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.012011605Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.015521166Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.017177822Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.020088906Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.021041328Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.024996634Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.026215161Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.030644901Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.031965472Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.035834051Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.037085382Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.040707899Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.041835164Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.044795708Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.047242496Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.050161105Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.05238092Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.055261464Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.057031035Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.060141091Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.061167766Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.064208915Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.065548027Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.0693833Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.070764826Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.074279829Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.075272997Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.078135357Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.094187345Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.09739053Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.09938125Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.10264727Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.105262261Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.108254063Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.111011443Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.114992124Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.116792802Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.120128184Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.121270264Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.125892146Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.126977121Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.131897042Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.133306545Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.138050598Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.139439771Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.144051559Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.145566876Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.148879404Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.151068274Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.154339231Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.156805415Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.160111632Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.162394439Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.165555014Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.168959306Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.172200272Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.179610222Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.182754696Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.184143917Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.187959389Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.189138899Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.192865736Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.193975589Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.19694235Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.199287422Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.202303921Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.204353078Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.207990727Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.210364474Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.213495257Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.215076466Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.217993961Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.218894733Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.223115182Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.224326892Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.228505545Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.22969516Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.233735852Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.234838654Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.238142908Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.239917561Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.243423445Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.244640759Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.248400359Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.250370238Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.254209133Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.256175861Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.259299246Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.261090364Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.264285853Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.26589079Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.268982421Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.270129335Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.274036905Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.275188852Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.279674766Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.281053118Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.28551686Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.286941778Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.290931456Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.292654701Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.295976526Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.30122395Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.304393675Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.30878098Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.311798074Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.313890419Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.317549169Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.318689614Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.322332028Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.32429754Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.328332794Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.329831274Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.334881705Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.338810247Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.341216309Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.342206951Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.344902046Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.34586759Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.34924463Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.350331807Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.354599177Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.35563632Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.359199997Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.360222074Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.363333099Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.364381455Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.367511527Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.368355211Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.370646124Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.372146653Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.374207801Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.376119915Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.378642693Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.380475573Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.382510639Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.385501577Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.387824602Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:06.393318923Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.395091225Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.399188985Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.400491891Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.404641881Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.406561842Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.410069117Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.412802313Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.416148222Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.417026612Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.419524287Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.420616698Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.422720575Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.424597197Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.42667353Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.42780859Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.430281226Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.431176714Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.434053933Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.434942664Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.437009104Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.438886542Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.441050899Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.442648101Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.444651772Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.446710629Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.448750212Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.449964853Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.454006765Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.454816818Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.457619925Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.45850711Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.461307492Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.46273575Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.464908004Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.466350942Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.468404486Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.46996217Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.472103074Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.473112844Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.477053177Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.478212795Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.481436702Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.482308532Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.484599653Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.4861737Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.488360198Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.490156972Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.492287851Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.493723782Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.495960456Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.496857131Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.499462891Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.500617952Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.502897574Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.504605725Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.507133673Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.508554277Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.51061467Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.511507376Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.516144593Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.517085173Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.519360766Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.52058669Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.522573718Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.523791841Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.525904836Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.52680047Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.529044686Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.530266771Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.53229465Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.534133467Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.536160656Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.537276598Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.540263115Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.541203985Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.544032512Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.545388587Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.548282033Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.54927809Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.551434143Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.553581082Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.55606297Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.557334487Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.561927416Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.563024843Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.566844136Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.56788293Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.570766853Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.575110972Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.578443769Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.581414299Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.58733494Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.588716902Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.591564866Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.592516242Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.595846552Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.59679203Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.599571181Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.601000332Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.604011438Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.605246501Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.609370202Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.610795987Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.614143856Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.616274626Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.619839982Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.622064338Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.625351842Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.626712238Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.632299301Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.63367335Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.637869291Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.63914495Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.642508221Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.643934775Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.64718787Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.649467623Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.652718768Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.654611039Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.659024451Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.660157557Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.666309109Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.667703987Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.683728732Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.684754604Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.687671514Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.68974937Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.692640862Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.693615235Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.6979558Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.699092513Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.702373315Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.703429118Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.706383632Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.707926034Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.711546393Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.71250723Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.715506014Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.71646239Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.71993455Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.721352873Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.724520163Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.72602244Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.728984725Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.730143706Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.735123675Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.736224664Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.740204996Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.741652265Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.74470295Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.746966676Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.750006351Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.751009695Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.755235121Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.756862244Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.763624336Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.765915539Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.769989094Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.771927688Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.77490668Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.775861864Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.779187938Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.780228637Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.782872239Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.783846738Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.786311756Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.788968442Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.790959098Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.792866009Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.796160427Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.797536369Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.8014727Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.80274723Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.805990678Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.807788952Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.810865965Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.812039914Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.816976533Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.81810559Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.821574047Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.823871485Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.827588407Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.829657274Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.832900935Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.834114835Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.838526804Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.839728094Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.845789531Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.847472607Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.850478245Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.852604218Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.855582809Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.856610726Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.859788758Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.860910517Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.864715143Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.865817217Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.87008103Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:06.877285133Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.878629619Z 78 PC: 1543c | Find first file
2018-12-17T22:28:06.88976316Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.890921281Z 78 PC: 1543c | Find first file
2018-12-17T22:28:06.897339995Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.899152232Z 78 PC: 1543c | Find first file
2018-12-17T22:28:06.904889939Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.907333448Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.910219743Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.911703071Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.914785723Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:06.920458275Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.926446316Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.929766029Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.930787996Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.934693022Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.935962939Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.939300193Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.940608381Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.943561727Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.945515072Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.948491145Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.949342527Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.953695882Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.954741682Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.957683144Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.959427078Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.962592146Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.975400295Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.981902535Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.983248141Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.990099941Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.991220904Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.995670688Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:06.996823305Z 79 PC: 1543c | Find next file
2018-12-17T22:28:06.999780826Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:07.004760822Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:07.006053557Z 79 PC: 1543c | Find next file
2018-12-17T22:28:07.009822713Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:07.010933921Z 79 PC: 1543c | Find next file
2018-12-17T22:28:07.013511063Z 26 PC: 1543c | Set disk transfer address
2018-12-17T22:28:07.014763594Z 79 PC: 1543c | Find next file
2018-12-17T22:28:07.017026126Z 59 PC: 1543c | Change current directory
2018-12-17T22:28:07.020643207Z 14 PC: 1543c | Set default drive (Drive = 'F')
2018-12-17T22:28:07.021754533Z 25 PC: 1543c | Get default drive
2018-12-17T22:28:07.022771941Z 14 PC: 1543c | Set default drive (Drive = 'A')
2018-12-17T22:28:07.025515132Z 64 PC: 1543c | Write file or device (Write 17 bytes on handle 2)
2018-12-17T22:28:07.029721746Z 76 PC: 1543c | Terminate with return code (Return code = '0')