Sample viewer

vx.netlux.org/Virus.DOS.HLLP.Vir.8563

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:38:55.137908806Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:38:55.14178882Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:38:55.144774293Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:38:55.146517933Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:38:55.14941072Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:38:55.150984114Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:38:55.15266862Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:38:55.155935469Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:38:55.157205016Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:38:55.158418757Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:38:55.163515825Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:38:55.164988365Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:38:55.166388411Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:38:55.168168772Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:38:55.169761414Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:38:55.170827242Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:38:55.172423989Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:38:55.174335499Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:38:55.176089631Z 53 PC: 13a2a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:38:55.179502784Z 37 PC: 13a3f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:38:55.18067543Z 37 PC: 13a47 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:38:55.181778971Z 37 PC: 13a4f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:38:55.184573598Z 37 PC: 13a57 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:38:55.186051212Z 68 PC: 14787 | I/O control for devices (Set for = '��%��%� ')
2018-12-17T22:38:55.241719189Z 37 PC: 13301 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:38:55.24378092Z 44 PC: 148be | Get time 0x148be: mov word ptr [0x46], cx
0x148c2: mov word ptr [0x48], dx
0x148c6: retf
0x148c7: call 0x1490e
0x148ca: jb 0x148db
0x148cc: mov cx, word ptr es:[di + 4]
0x148d0: cmp cx, 1
0x148d3: je 0x148db
0x148d5: xor bx, bx
0x148d7: push cs
0x148d8: call 0x2444a
0x148db: retf 4
0x148de: call 0x1490e
0x148e1: jb 0x148f6
0x148e3: mov ax, cx
0x148e5: mov dx, bx
0x148e7: mov cx, word ptr es:[di + 4]
0x148eb: cmp cx, 1
0x148ee: je 0x148f6
0x148f0: xor bx, bx
2018-12-17T22:38:55.247052419Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.248444026Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.252096458Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.254203479Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.260706878Z 61 PC: 140f0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:38:55.267778831Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.274903663Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.276475046Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.285030722Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.28691741Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.288061477Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.290113296Z 14 PC: 14398 | Set default drive (Drive = 'A')
2018-12-17T22:38:55.292004033Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.29337499Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.298365412Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.303563516Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.304701712Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.307742224Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.309820377Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.316412671Z 61 PC: 140f0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:38:55.322869013Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.325984376Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.327427342Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.330556215Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.332971054Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.334290797Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.337130443Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.338831232Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.340739348Z 14 PC: 14398 | Set default drive (Drive = 'A')
2018-12-17T22:38:55.341764346Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.34344615Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.347543797Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.348723932Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.356193722Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.362874108Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.364804771Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.369637002Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.370632037Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.376785276Z 61 PC: 140f0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:38:55.384012434Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.386673475Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.388151314Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.392045511Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.393851587Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.395008017Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.399008915Z 14 PC: 14398 | Set default drive (Drive = 'A')
2018-12-17T22:38:55.400298884Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.401400261Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.406191707Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.407368289Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.413132583Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.419778369Z 14 PC: 14398 | Set default drive (Drive = 'D')
2018-12-17T22:38:55.421176424Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.422835452Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.424694507Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.430842986Z 61 PC: 140f0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:38:55.437513169Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.442183059Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.443775912Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.447229446Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.449629935Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.450771227Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.453334703Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.454687785Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.460328648Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.46622698Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.467727162Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.470678232Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.471705924Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.478277746Z 61 PC: 140f0 | Open file (Filename = 'TEST.EXE')
2018-12-17T22:38:55.484776202Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.487305014Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.489032507Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.491936763Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.493555034Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.494960097Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.497390861Z 14 PC: 14398 | Set default drive (Drive = 'A')
2018-12-17T22:38:55.498358763Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.499679915Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.50350853Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.50442127Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.511190271Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.51715884Z 14 PC: 14398 | Set default drive (Drive = 'A')
2018-12-17T22:38:55.534771774Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.536288483Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.539722019Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.540725612Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.544879683Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.550994235Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:55.552096402Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:55.553837226Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.560065245Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.561377225Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.567518236Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.56846737Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.573844852Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:55.576122921Z 79 PC: 138ce | Find next file
2018-12-17T22:38:55.579160835Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:55.585076575Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:55.589996783Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:55.592438744Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:55.593381543Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:55.602602303Z 61 PC: 140f0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:38:55.609096795Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:55.61449614Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:55.615955573Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:55.621868297Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:55.623074478Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:55.624603877Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:55.626009669Z 62 PC: 14140 | Close file
2018-12-17T22:38:55.627980437Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:38:55.974773587Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:38:55.976166033Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:38:55.984020072Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:55.991647431Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.000984873Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.008015343Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.016490814Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:38:56.023055041Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:38:56.033185728Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.035084571Z 61 PC: 140f0 | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T22:38:56.042435631Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.044387589Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.045720559Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.04726892Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.054143957Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.062604431Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.069402281Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.078463862Z 63 PC: 141c3 | Read file or device (Read 3016 bytes on handle 6)
2018-12-17T22:38:56.085237876Z 64 PC: 141c3 | Write file or device (Write 3016 bytes on handle 5)
2018-12-17T22:38:56.093339291Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.096261728Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:38:56.099033303Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.10726685Z 65 PC: 14239 | Delete file (Filename = 'ATTRIB.EXE')
2018-12-17T22:38:56.118194705Z 86 PC: 1427d | Rename file
2018-12-17T22:38:56.129405104Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:56.130622865Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:56.132436921Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.138167788Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.139193781Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.146009162Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.147061807Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.150280258Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.152176405Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.155640888Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.159568102Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:56.161963903Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:56.164545278Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.165529712Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.172396753Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:56.173877806Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:56.175191059Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.180525169Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.181507714Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.186912149Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.188426393Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.191174795Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.196999707Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:56.198291123Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:56.201665591Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.204385381Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.210837993Z 61 PC: 140f0 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:38:56.217662478Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.224018215Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.225882702Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.231968195Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.233922594Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.235739166Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.237562194Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.240440745Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:38:56.251569742Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:38:56.253041261Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:38:56.263632896Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.270398831Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.277675353Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.285686087Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.293082113Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:38:56.29597382Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:38:56.300887858Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.302736223Z 61 PC: 140f0 | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T22:38:56.309227952Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.311635818Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.313214262Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.315746551Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.322564851Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.330618409Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.336895968Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.345003748Z 63 PC: 141c3 | Read file or device (Read 4049 bytes on handle 6)
2018-12-17T22:38:56.351586334Z 64 PC: 141c3 | Write file or device (Write 4049 bytes on handle 5)
2018-12-17T22:38:56.359559845Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.361544823Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:38:56.364264733Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.371659066Z 65 PC: 14239 | Delete file (Filename = 'CHKDSK.EXE')
2018-12-17T22:38:56.38278576Z 86 PC: 1427d | Rename file
2018-12-17T22:38:56.393833383Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:56.395389006Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:56.396369411Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.399772768Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.401321965Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.407098825Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.408008442Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.413988971Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.415083951Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.417800978Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.419424423Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.421863971Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:56.430319822Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:56.431837931Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:56.434240554Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:56.435328122Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:56.444701524Z 61 PC: 140f0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:38:56.451415633Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.457761093Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.459274954Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.465695936Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.467432008Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.468683402Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.470419679Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.473068869Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.474129948Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.477415382Z 61 PC: 140f0 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:38:56.484448369Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.489852982Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.49172518Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.496435713Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.497438394Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.498415246Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.499961896Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.501384303Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.502396414Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.505194843Z 61 PC: 140f0 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:38:56.509365365Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.513570645Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.515229475Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.521225976Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.523266602Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.525009647Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.526701346Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.529057849Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.529984287Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.544639711Z 61 PC: 140f0 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:38:56.557285435Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.563034315Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.564959328Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.577786794Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.579145528Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.580461829Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.582530958Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.584228084Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.585251786Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.589461665Z 61 PC: 140f0 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:38:56.597421404Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.602686592Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.604450293Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.619976318Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.622176706Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.624072536Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.625907719Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.628735725Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.629841374Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.636126905Z 61 PC: 140f0 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:38:56.643242689Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.648621568Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.649968927Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.656222054Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.658166341Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.6595903Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.661070018Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.662730796Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.664003555Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.667179112Z 61 PC: 140f0 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:38:56.673705347Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.679520745Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.68098792Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.687006632Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.688589206Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.689825884Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.69132518Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.693036772Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.693949357Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.697485445Z 61 PC: 140f0 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:38:56.703987716Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.709299025Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.710976844Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.717490995Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.719176397Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.720950847Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.722423167Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.724631983Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.72634804Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.729539515Z 61 PC: 140f0 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:38:56.738091536Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.743959075Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.745743128Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.753357814Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.755016385Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.756677251Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.759533309Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.761369157Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.762405225Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.765935609Z 61 PC: 140f0 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:38:56.772628224Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.77867422Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.780227296Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.786399113Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.788612755Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.789960271Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.791325614Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.793533685Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:56.795459694Z 79 PC: 138ce | Find next file
2018-12-17T22:38:56.798886175Z 61 PC: 140f0 | Open file (Filename = 'CALC.EXE')
2018-12-17T22:38:56.8069631Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:56.812274954Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:56.813754397Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:56.819873096Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:56.821076484Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:56.823090142Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:56.828329913Z 62 PC: 14140 | Close file
2018-12-17T22:38:56.830309656Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:38:56.874276339Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:38:56.876171153Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:38:56.886601039Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.89491323Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:56.979599191Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:56.987379444Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.088656601Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:38:57.096006464Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:38:57.099898229Z 62 PC: 14140 | Close file
2018-12-17T22:38:57.102691715Z 61 PC: 140f0 | Open file (Filename = 'CALC.EXE')
2018-12-17T22:38:57.109218812Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:57.11074044Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:57.112453016Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:57.11405633Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.120881638Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.260615946Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.265343708Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.337506697Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.34160097Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.421021135Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.428245106Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.564895051Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.57097534Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:57.715598133Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:57.72234228Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:58.169509884Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:58.178255113Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:58.852340765Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:58.860103474Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.02243748Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.031948487Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.041333746Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.047686963Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.056752774Z 63 PC: 141c3 | Read file or device (Read 2112 bytes on handle 6)
2018-12-17T22:38:59.065351299Z 64 PC: 141c3 | Write file or device (Write 2112 bytes on handle 5)
2018-12-17T22:38:59.073483036Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.075671544Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:38:59.079946868Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.087061836Z 65 PC: 14239 | Delete file (Filename = 'CALC.EXE')
2018-12-17T22:38:59.097679118Z 86 PC: 1427d | Rename file
2018-12-17T22:38:59.110258006Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:59.111797829Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:59.113716404Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.119585199Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.120638019Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.129346754Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.130494613Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.133754953Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.13554806Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.138858707Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.150993139Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:59.153259158Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:59.155780399Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.157319831Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.163243791Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:59.164723679Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:59.166507166Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.169935717Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.170972208Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.177029007Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.178061468Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.180914588Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.182401492Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.184841067Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.190618577Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:59.192336037Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:59.195653904Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.197243495Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.203684004Z 61 PC: 140f0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:38:59.210346959Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.217030937Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.218356928Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.230180059Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.232004526Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.233282615Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.23464393Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.236454812Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.237372605Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.241013121Z 61 PC: 140f0 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:38:59.247497474Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.252873709Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.256066009Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.262952476Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.264200327Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.265944145Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.267235808Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.272853012Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.27378897Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.276933885Z 61 PC: 140f0 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:38:59.28398432Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.289434831Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.290985717Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.297419867Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.298724633Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.300446762Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.301784021Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.303435732Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.305046801Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.308207844Z 61 PC: 140f0 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:38:59.314726701Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.32028748Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.321693271Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.329275844Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.330661868Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.331922978Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.333956082Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.336311795Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.337308581Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.340740244Z 61 PC: 140f0 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:38:59.34510099Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.351011126Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.352350232Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.358620291Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.360886937Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.362550424Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.364315711Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.367257739Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.368537687Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.372500626Z 61 PC: 140f0 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:38:59.379672806Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.385161381Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.387607267Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.393686813Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.395259846Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.397346882Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.39900724Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.401202528Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.402968036Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.406239806Z 61 PC: 140f0 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:38:59.411969318Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.418123263Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.419474886Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.426073713Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.427377262Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.428655797Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.431056654Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.432713095Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.43393154Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.437832413Z 61 PC: 140f0 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:38:59.444403652Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.450811286Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.45283057Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.458678154Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.460973802Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.462165765Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.463400109Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.465243031Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.466127299Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.470025711Z 61 PC: 140f0 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:38:59.476493925Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.482692115Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.48462535Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.490827105Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.492203618Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.493875214Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.495448914Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.497951896Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.499154832Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.502526899Z 61 PC: 140f0 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:38:59.513469053Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.519022291Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.520733661Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.526937592Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.528175248Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.540588698Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.542544048Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.544971746Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.54706066Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.550563918Z 61 PC: 140f0 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:38:59.558843044Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:38:59.564284851Z 66 PC: 14222 | Move file pointer
2018-12-17T22:38:59.565654282Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:38:59.572774218Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.574155715Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.575488738Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.578333001Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.580457246Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:38:59.59394464Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:38:59.59539285Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:38:59.605166134Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.612801453Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.621697918Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.628580908Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.636527977Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:38:59.643114363Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:38:59.646863561Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.649672038Z 61 PC: 140f0 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:38:59.680690692Z 66 PC: 14928 | Move file pointer
2018-12-17T22:38:59.683202138Z 66 PC: 14936 | Move file pointer
2018-12-17T22:38:59.685516627Z 66 PC: 14944 | Move file pointer
2018-12-17T22:38:59.687443809Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.694512829Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.702633498Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.708786885Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.717951985Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.724231234Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.735122666Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.741507327Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.750088657Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.757547096Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.765461002Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.771462987Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.780674703Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.787525809Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.796403785Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.801686133Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.810682575Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.8185284Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.826960671Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.834579742Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.843485693Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.850517511Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.860815767Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.86676222Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.87607565Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.882837604Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.891753272Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:38:59.899074014Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:38:59.907618659Z 63 PC: 141c3 | Read file or device (Read 2480 bytes on handle 6)
2018-12-17T22:38:59.914708262Z 64 PC: 141c3 | Write file or device (Write 2480 bytes on handle 5)
2018-12-17T22:38:59.922774474Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.92451321Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:38:59.927775202Z 62 PC: 14140 | Close file
2018-12-17T22:38:59.934985175Z 65 PC: 14239 | Delete file (Filename = 'CALENDAR.EXE')
2018-12-17T22:38:59.946063744Z 86 PC: 1427d | Rename file
2018-12-17T22:38:59.958744874Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:38:59.960332477Z 25 PC: 1439c | Get default drive
2018-12-17T22:38:59.962369926Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.965038103Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.966231521Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.970270658Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.971276107Z 78 PC: 138b1 | Find first file
2018-12-17T22:38:59.97754149Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.978702984Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.981896108Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:38:59.983296066Z 79 PC: 138ce | Find next file
2018-12-17T22:38:59.985823801Z 59 PC: 14406 | Change current directory
2018-12-17T22:38:59.992151862Z 25 PC: 1433f | Get default drive
2018-12-17T22:38:59.993242993Z 71 PC: 14352 | Get current directory
2018-12-17T22:38:59.99589248Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:38:59.997336141Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:00.003473381Z 61 PC: 140f0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:39:00.011463002Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.017060975Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.018756119Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.026228172Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.028082335Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.031283035Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.033337734Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.039947295Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.054656665Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.058407279Z 61 PC: 140f0 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:39:00.066477581Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.071901303Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.073955132Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.080784191Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.082343443Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.084902941Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.086397215Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.088371003Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.090610641Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.094318643Z 61 PC: 140f0 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:39:00.103063133Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.10932914Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.11112107Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.121639658Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.12345188Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.126183707Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.128316901Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.13042405Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.132914229Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.136431116Z 61 PC: 140f0 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:39:00.143019435Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.149241799Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.150855275Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.15838896Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.160475168Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.162184664Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.165134031Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.166824565Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.168778254Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.171935227Z 61 PC: 140f0 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:39:00.17890879Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.184444365Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.185718789Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.19311597Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.194980951Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.196274767Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.198851533Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.200433811Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.20181007Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.206243502Z 61 PC: 140f0 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:39:00.212817289Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.219440038Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.22104706Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.227305918Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.230328262Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.231880962Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.234053929Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.236103064Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.2373382Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.244317486Z 61 PC: 140f0 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:39:00.25091683Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.262240826Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.263880462Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.270075608Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.272395434Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.281284667Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.283091284Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.285247719Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.286320446Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.289942483Z 61 PC: 140f0 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:39:00.296276626Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.301962946Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.303372838Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.309353928Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.311267158Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.312549908Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.314582579Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.316278516Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.317201864Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.320311668Z 61 PC: 140f0 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:39:00.325473316Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.33171255Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.333218963Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.339173122Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.340933639Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.342162966Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.343694901Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.345532898Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.346497369Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.351030573Z 61 PC: 140f0 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:39:00.357652614Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.36329798Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.365661111Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.37181196Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.37361629Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.375182389Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.376803954Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.378610358Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.379534805Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.383605025Z 61 PC: 140f0 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:39:00.390156054Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.395461343Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.397006729Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.400877469Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.402363425Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.403214665Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.405893425Z 61 PC: 140f0 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:39:00.410009766Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.415301216Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.416743993Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.420849315Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.422868567Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.424097093Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.42661377Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.428230119Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.429060234Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.432496546Z 61 PC: 140f0 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:39:00.436662909Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.440513555Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.441808719Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.445446452Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.447132439Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.44815704Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.457071763Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.460577242Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:39:00.601569665Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:39:00.603443403Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:39:00.615085351Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.625328029Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.634061221Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.643362118Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.651878294Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:39:00.65842215Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:39:00.665815914Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.6679409Z 61 PC: 140f0 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:39:00.676797941Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.678590408Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.680275399Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.682741625Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.690905164Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.701379169Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.708332707Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.716748691Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.724125246Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.732535674Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.740423997Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.746382108Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:00.752181215Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:00.76025291Z 63 PC: 141c3 | Read file or device (Read 1536 bytes on handle 6)
2018-12-17T22:39:00.766118304Z 64 PC: 141c3 | Write file or device (Write 1536 bytes on handle 5)
2018-12-17T22:39:00.774226202Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.776151974Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:39:00.779011525Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.785881214Z 65 PC: 14239 | Delete file (Filename = 'CHARMAP.EXE')
2018-12-17T22:39:00.795189407Z 86 PC: 1427d | Rename file
2018-12-17T22:39:00.806809761Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:39:00.80823165Z 25 PC: 1439c | Get default drive
2018-12-17T22:39:00.810051325Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:00.829691784Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:00.831256838Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:00.836007737Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:00.839961118Z 25 PC: 1433f | Get default drive
2018-12-17T22:39:00.841481314Z 71 PC: 14352 | Get current directory
2018-12-17T22:39:00.843452121Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:00.845529247Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:00.849860207Z 61 PC: 140f0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:39:00.855509916Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.862170263Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.86437237Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.872033485Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.874620792Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.877396398Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.878990803Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.880904928Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.882680156Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.885889497Z 61 PC: 140f0 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:39:00.892916967Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.898675169Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.900743639Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.911162262Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.912473836Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.91478082Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.916182822Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.918105774Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.919772073Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.923455114Z 61 PC: 140f0 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:39:00.931122093Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.93708695Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.940362537Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.947229864Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.950266142Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.952681224Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.955013775Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.957565571Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.958853488Z 79 PC: 138ce | Find next file
2018-12-17T22:39:00.962253259Z 61 PC: 140f0 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:39:00.969721364Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:00.97529678Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:00.978012118Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:00.984448224Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:00.98628355Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:00.989265174Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:00.991147281Z 62 PC: 14140 | Close file
2018-12-17T22:39:00.994416905Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:00.996300247Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.000114304Z 61 PC: 140f0 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:39:01.007962665Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.012883411Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.015549274Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.021611653Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.022948802Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.024891567Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.026571512Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.029071144Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.030484634Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.034920299Z 61 PC: 140f0 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:39:01.041857409Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.047304034Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.049536856Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.055589264Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.05805538Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.059803127Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.061425768Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.064480175Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.065872016Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.070227641Z 61 PC: 140f0 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:39:01.077314043Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.082868923Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.08571536Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.091872186Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.094358871Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.095835404Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.097698207Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.100597811Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.101873387Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.106921122Z 61 PC: 140f0 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:39:01.113995907Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.119588235Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.122385506Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.128886291Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.131585389Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.133278436Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.1352268Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.137333045Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.138426808Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.142338018Z 61 PC: 140f0 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:39:01.148324552Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.154523686Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.155673076Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.159495948Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.161672465Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.162810982Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.16445826Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.166065053Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.167064063Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.169673789Z 61 PC: 140f0 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:39:01.173972608Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.178352711Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.179482407Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.186470775Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.187603818Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.189704545Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.191130226Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.192863326Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.194545234Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.197910184Z 61 PC: 140f0 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:39:01.205503494Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.210948866Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.213291646Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.219310206Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.220605238Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.222807856Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.225161597Z 61 PC: 140f0 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:39:01.23020225Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.233940498Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.235996784Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.239983011Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.241514627Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.243079984Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.245353433Z 61 PC: 140f0 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:39:01.250151425Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.255001209Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.256342167Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.261407Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.262552045Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.264672311Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.266082078Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.268590663Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.269511357Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.272039755Z 61 PC: 140f0 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:39:01.276938632Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.280571133Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.282732999Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.286698085Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.294497046Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.296695946Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.29979997Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.302361713Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:39:01.314518331Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:39:01.317698684Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:39:01.327873806Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.336459719Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.345431751Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.353530879Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.362445746Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:39:01.369147238Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:39:01.37377308Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.376090356Z 61 PC: 140f0 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:39:01.383902053Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.391864674Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.394722726Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.39726301Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.403784392Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.413934856Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.421219662Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.429172216Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.433617044Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.44044523Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:01.447549583Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:01.455442106Z 63 PC: 141c3 | Read file or device (Read 2128 bytes on handle 6)
2018-12-17T22:39:01.461994072Z 64 PC: 141c3 | Write file or device (Write 2128 bytes on handle 5)
2018-12-17T22:39:01.47017631Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.473946586Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:39:01.477878447Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.486162204Z 65 PC: 14239 | Delete file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:39:01.498774265Z 86 PC: 1427d | Rename file
2018-12-17T22:39:01.512044713Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:39:01.514780268Z 25 PC: 1439c | Get default drive
2018-12-17T22:39:01.516597639Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:01.523690859Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:01.525051892Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:01.531035037Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.53325331Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.536424293Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.538355665Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.541483506Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.542697207Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.547838905Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.549277063Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.553244713Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:01.559254256Z 25 PC: 1433f | Get default drive
2018-12-17T22:39:01.56123666Z 71 PC: 14352 | Get current directory
2018-12-17T22:39:01.564392751Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:01.565918574Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:01.575863827Z 14 PC: 14398 | Set default drive (Drive = 'D')
2018-12-17T22:39:01.577336796Z 25 PC: 1439c | Get default drive
2018-12-17T22:39:01.580052889Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:01.581428752Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:01.588586313Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:01.590281778Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:01.596937004Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.59855935Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.601689739Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.603517897Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.606268786Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:01.612318011Z 25 PC: 1433f | Get default drive
2018-12-17T22:39:01.613259827Z 71 PC: 14352 | Get current directory
2018-12-17T22:39:01.616640012Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:01.617642005Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:01.624257434Z 61 PC: 140f0 | Open file (Filename = 'SETUP.EXE')
2018-12-17T22:39:01.632395516Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.63777046Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.64065718Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.645290491Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.646363151Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.647998847Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.649133767Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.651028772Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.65193352Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.654873368Z 61 PC: 140f0 | Open file (Filename = 'WINHELP.EXE')
2018-12-17T22:39:01.661376288Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.668089488Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.67001609Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.676197487Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.678993606Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.680271421Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.68274685Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.684660496Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.685865365Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.690503672Z 61 PC: 140f0 | Open file (Filename = 'MSD.EXE')
2018-12-17T22:39:01.698016682Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.704583842Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.706653026Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.713814137Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.715217422Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.716854997Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.719348201Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.721387668Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.723233625Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.72703221Z 61 PC: 140f0 | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T22:39:01.734485862Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.740531231Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.742088913Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.748981484Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.750615766Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.753455395Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.755151252Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.758100498Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.75976269Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.763546689Z 61 PC: 140f0 | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T22:39:01.772067746Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.777890158Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.780534685Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.78707479Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.789298535Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.790707242Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.792497068Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.795167477Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.796319Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.800655626Z 61 PC: 140f0 | Open file (Filename = 'SOL.EXE')
2018-12-17T22:39:01.807416372Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.81426486Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.815736135Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.822071566Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.824392933Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.825854906Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.828778643Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.830513199Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.83281758Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.83633162Z 61 PC: 140f0 | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T22:39:01.843293909Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.850398206Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.851879393Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.863060218Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.864443674Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.866981784Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.869134465Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.871080397Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.87342837Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.876670707Z 61 PC: 140f0 | Open file (Filename = 'WINFILE.EXE')
2018-12-17T22:39:01.885282469Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.891253119Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.894959937Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.901858718Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.903758701Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.90708229Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.909144158Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.912839941Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.915526888Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.920352134Z 61 PC: 140f0 | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T22:39:01.927332527Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.93376418Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.936659764Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.943037094Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.946114751Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.94819132Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.950334086Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.952997596Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.954554512Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.959374326Z 61 PC: 140f0 | Open file (Filename = 'WRITE.EXE')
2018-12-17T22:39:01.966669268Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:01.973658961Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:01.975747662Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:01.98199316Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:01.985188465Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:01.986875928Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:01.989784288Z 62 PC: 14140 | Close file
2018-12-17T22:39:01.992423082Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:01.994869983Z 79 PC: 138ce | Find next file
2018-12-17T22:39:01.998810703Z 61 PC: 140f0 | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T22:39:02.00572149Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:02.013332697Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.015103514Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:02.022919422Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.024796859Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.026485061Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.030565119Z 61 PC: 140f0 | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T22:39:02.037692565Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:02.046033185Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.047429875Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:02.055080011Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.057324868Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.059855294Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.063418361Z 61 PC: 140f0 | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T22:39:02.07149795Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:02.077241245Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.080194968Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:02.087078139Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:02.089348066Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:02.091047913Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:02.092569674Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.095595537Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.096677806Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.101150405Z 61 PC: 140f0 | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T22:39:02.108180596Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:02.114982203Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.116978611Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:02.123257502Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.125051561Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.126814261Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.131938942Z 61 PC: 140f0 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T22:39:02.139486355Z 63 PC: 141c3 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:39:02.145463494Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.148296382Z 63 PC: 141c3 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:39:02.154179837Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:02.157075593Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:02.163260883Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:02.165175204Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.16909714Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:39:02.181455965Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:39:02.18410453Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:39:02.194144122Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:02.202406678Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:02.20991538Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:02.217208541Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:02.225635136Z 63 PC: 141c3 | Read file or device (Read 368 bytes on handle 6)
2018-12-17T22:39:02.233392048Z 64 PC: 141c3 | Write file or device (Write 368 bytes on handle 5)
2018-12-17T22:39:02.23805655Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.2402628Z 61 PC: 140f0 | Open file (Filename = 'CONTROL.EXE')
2018-12-17T22:39:02.247983764Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:02.24935778Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:02.251368204Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:02.255518295Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:02.262904071Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:02.270955672Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:02.277634873Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:02.286198684Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 6)
2018-12-17T22:39:02.293568823Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 5)
2018-12-17T22:39:02.302635848Z 63 PC: 141c3 | Read file or device (Read 3584 bytes on handle 6)
2018-12-17T22:39:02.309089798Z 64 PC: 141c3 | Write file or device (Write 3584 bytes on handle 5)
2018-12-17T22:39:02.317954502Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.320056962Z 64 PC: 141c3 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:39:02.323738779Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.330997095Z 65 PC: 14239 | Delete file (Filename = 'CONTROL.EXE')
2018-12-17T22:39:02.353513722Z 86 PC: 1427d | Rename file
2018-12-17T22:39:02.36665038Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:39:02.368859778Z 25 PC: 1439c | Get default drive
2018-12-17T22:39:02.370889259Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:02.376990947Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:02.378260247Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:02.384516234Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.386233305Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.389668825Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.391656411Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.395152977Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.397189996Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.400682355Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.402891653Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.40599108Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:02.413775313Z 14 PC: 14398 | Set default drive (Drive = 'C')
2018-12-17T22:39:02.415016447Z 25 PC: 1439c | Get default drive
2018-12-17T22:39:02.416690113Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:02.422678174Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:02.424204015Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:02.430714042Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.432032852Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.436607606Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.43896863Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.443207128Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.444531126Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.450103702Z 26 PC: 138c9 | Set disk transfer address
2018-12-17T22:39:02.451359384Z 79 PC: 138ce | Find next file
2018-12-17T22:39:02.455736456Z 59 PC: 14406 | Change current directory
2018-12-17T22:39:02.46206531Z 25 PC: 1433f | Get default drive
2018-12-17T22:39:02.464180441Z 71 PC: 14352 | Get current directory
2018-12-17T22:39:02.466903213Z 26 PC: 138a5 | Set disk transfer address
2018-12-17T22:39:02.469065842Z 78 PC: 138b1 | Find first file
2018-12-17T22:39:02.483634612Z 48 PC: 142b2 | Get DOS version
2018-12-17T22:39:02.486545906Z 61 PC: 140f0 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:39:02.493412005Z 60 PC: 140f0 | Create or truncate file
2018-12-17T22:39:02.510530732Z 66 PC: 14222 | Move file pointer
2018-12-17T22:39:02.513202012Z 66 PC: 14928 | Move file pointer
2018-12-17T22:39:02.514521826Z 66 PC: 14936 | Move file pointer
2018-12-17T22:39:02.516977597Z 66 PC: 14944 | Move file pointer
2018-12-17T22:39:02.518811391Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:39:02.528026267Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:39:02.536432267Z 63 PC: 141c3 | Read file or device (Read 4096 bytes on handle 5)
2018-12-17T22:39:02.544796472Z 64 PC: 141c3 | Write file or device (Write 4096 bytes on handle 6)
2018-12-17T22:39:02.555070366Z 63 PC: 141c3 | Read file or device (Read 808 bytes on handle 5)
2018-12-17T22:39:02.563486714Z 64 PC: 141c3 | Write file or device (Write 808 bytes on handle 6)
2018-12-17T22:39:02.572997548Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.580978405Z 62 PC: 14140 | Close file
2018-12-17T22:39:02.584095458Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:39:02.585683488Z 37 PC: 139af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:39:02.587079898Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:39:02.589559836Z 37 PC: 139af | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:39:02.59159874Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:39:02.594018743Z 37 PC: 139af | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:39:02.595374008Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:02.597829251Z 37 PC: 139af | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:02.598980006Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:39:02.601138533Z 37 PC: 139af | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:39:02.602348434Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:02.603822767Z 37 PC: 139af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:02.605568326Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:39:02.606842243Z 37 PC: 139af | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:39:02.609212912Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:39:02.610393222Z 37 PC: 139af | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:39:02.612712169Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:39:02.613910119Z 37 PC: 139af | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:39:02.615957107Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:39:02.617357055Z 37 PC: 139af | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:39:02.618736775Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:39:02.619864873Z 37 PC: 139af | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:39:02.621336528Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:39:02.622391707Z 37 PC: 139af | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:39:02.623554481Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:39:02.625370675Z 37 PC: 139af | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:39:02.626398812Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:39:02.627906045Z 37 PC: 139af | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:39:02.628856715Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:39:02.631563469Z 37 PC: 139af | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:39:02.632515722Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:39:02.635584203Z 37 PC: 139af | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:39:02.636828991Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:39:02.638718788Z 37 PC: 139af | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:39:02.640757169Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:39:02.642976666Z 37 PC: 139af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:39:02.644192157Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:39:02.646364051Z 37 PC: 139af | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:39:02.64757856Z 41 PC: 1395d | Parse filename
2018-12-17T22:39:02.649730371Z 41 PC: 1396b | Parse filename
2018-12-17T22:39:02.651327018Z 75 PC: 13976 | Execute program
2018-12-17T22:39:02.66653688Z 76 PC: 1b267 | Terminate with return code (Return code = '0')
2018-12-17T22:39:02.6693785Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:39:02.671730249Z 37 PC: 139af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:39:02.672789931Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:39:02.674857696Z 37 PC: 139af | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:39:02.676143662Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:39:02.678378824Z 37 PC: 139af | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:39:02.679654615Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:02.681837707Z 37 PC: 139af | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:02.683414621Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:39:02.684672703Z 37 PC: 139af | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:39:02.686407406Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:02.689040069Z 37 PC: 139af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:02.690424799Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:39:02.691912799Z 37 PC: 139af | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:39:02.693351055Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:39:02.695583372Z 37 PC: 139af | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:39:02.697093413Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:39:02.698597061Z 37 PC: 139af | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:39:02.700170594Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:39:02.701762439Z 37 PC: 139af | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:39:02.703232832Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:39:02.704437949Z 37 PC: 139af | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:39:02.707103435Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:39:02.708577034Z 37 PC: 139af | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:39:02.711460578Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:39:02.712891952Z 37 PC: 139af | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:39:02.714833635Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:39:02.715974836Z 37 PC: 139af | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:39:02.718955431Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:39:02.720079145Z 37 PC: 139af | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:39:02.72255109Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:39:02.723683797Z 37 PC: 139af | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:39:02.726381776Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:39:02.727541663Z 37 PC: 139af | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:39:02.728984954Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:39:02.730880293Z 37 PC: 139af | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:39:02.732050178Z 53 PC: 139a6 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:39:02.734886394Z 37 PC: 139af | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:39:02.736051059Z 65 PC: 14239 | Delete file (Filename = ' (irq %d dev %x) ')
2018-12-17T22:39:02.749692679Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:39:02.750865885Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '2' AKA 'Character output')
2018-12-17T22:39:02.75372896Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive')
2018-12-17T22:39:02.75489906Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:39:02.756632958Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:39:02.758117908Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:39:02.759648086Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer')
2018-12-17T22:39:02.76173826Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector')
2018-12-17T22:39:02.762795886Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space')
2018-12-17T22:39:02.764698808Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character')
2018-12-17T22:39:02.765776246Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info')
2018-12-17T22:39:02.768541884Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory')
2018-12-17T22:39:02.769745146Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory')
2018-12-17T22:39:02.772375358Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory')
2018-12-17T22:39:02.773892545Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file')
2018-12-17T22:39:02.776122305Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '61' AKA 'Open file')
2018-12-17T22:39:02.777492436Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '62' AKA 'Close file')
2018-12-17T22:39:02.779863036Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device')
2018-12-17T22:39:02.781010014Z 37 PC: 13b81 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!')
2018-12-17T22:39:02.787646398Z 76 PC: 13bc0 | Terminate with return code (Return code = '0')