Sample viewer

vx.netlux.org/Virus.DOS.Vbasic.b

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:56:21.750568872Z 53 PC: 12ddd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:56:21.761546418Z 48 PC: 12de9 | Get DOS version
2018-12-17T21:56:21.763424501Z 37 PC: 12df5 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:56:21.765332443Z 51 PC: 12ec0 | Get or set Ctrl-Break
2018-12-17T21:56:21.767276583Z 46 PC: 12ec0 | Set verify flag
2018-12-17T21:56:21.768953651Z 44 PC: 12ec0 | Get time 0x12ec0: mov bp, sp
0x12ec2: mov bp, word ptr [bp + 8]
0x12ec5: mov word ptr [bp], ax
0x12ec8: mov word ptr [bp + 2], bx
0x12ecb: mov word ptr [bp + 4], cx
0x12ece: mov word ptr [bp + 6], dx
0x12ed1: mov word ptr [bp + 8], si
0x12ed4: mov word ptr [bp + 0xa], di
0x12ed7: pushf
0x12ed8: pop ax
0x12ed9: and ax, 1
0x12edc: mov word ptr [bp + 0xc], ax
0x12edf: cld
0x12ee0: pop di
0x12ee1: pop si
0x12ee2: pop bp
0x12ee3: ret
0x12ee4: push bp
0x12ee5: mov bp, sp
0x12ee7: mov ax, 0x4200
2018-12-17T21:56:21.771829156Z 42 PC: 12ec0 | Get date 0x12ec0: mov bp, sp
0x12ec2: mov bp, word ptr [bp + 8]
0x12ec5: mov word ptr [bp], ax
0x12ec8: mov word ptr [bp + 2], bx
0x12ecb: mov word ptr [bp + 4], cx
0x12ece: mov word ptr [bp + 6], dx
0x12ed1: mov word ptr [bp + 8], si
0x12ed4: mov word ptr [bp + 0xa], di
0x12ed7: pushf
0x12ed8: pop ax
0x12ed9: and ax, 1
0x12edc: mov word ptr [bp + 0xc], ax
0x12edf: cld
0x12ee0: pop di
0x12ee1: pop si
0x12ee2: pop bp
0x12ee3: ret
0x12ee4: push bp
0x12ee5: mov bp, sp
0x12ee7: mov ax, 0x4200
2018-12-17T21:56:21.774361357Z 25 PC: 12ec0 | Get default drive
2018-12-17T21:56:21.776198696Z 54 PC: 12ec0 | Get free disk space
2018-12-17T21:56:21.78524051Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.78667699Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:21.793907311Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.795287244Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:21.801348502Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.803619888Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:21.809968213Z 61 PC: 12f4d | Open file (Filename = 'TEST.EXE')
2018-12-17T21:56:21.816714611Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.819326941Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.821051361Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:21.82811092Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:21.831831764Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.833357388Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:21.8358561Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.838106113Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:21.840854499Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.842374093Z 64 PC: 12f29 | Write file or device (Write 5096 bytes on handle 5)
2018-12-17T21:56:21.858411826Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.86081191Z 62 PC: 12f3d | Close file
2018-12-17T21:56:21.868879496Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.87103973Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:21.873680688Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.875073381Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:21.882163817Z 61 PC: 12f4d | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:56:21.88871027Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.890139653Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.892515205Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:21.899258152Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.900967436Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:21.90439201Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.906033417Z 64 PC: 12f29 | Write file or device (Write 9 bytes on handle 5)
2018-12-17T21:56:21.908991853Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:21.919341398Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.921035785Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:21.927892156Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.929934386Z 62 PC: 12f3d | Close file
2018-12-17T21:56:21.938682261Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:21.940082662Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:21.943508171Z 61 PC: 12f4d | Open file (Filename = 'PRINT.COM')
2018-12-17T21:56:21.950485472Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.952295186Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.953951436Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:21.961316402Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.963031381Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:21.96584265Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.968346591Z 64 PC: 12f29 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T21:56:21.97457937Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:21.984592143Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:21.987438871Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:21.994861066Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:21.996754708Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.00643416Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.00919472Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.012520516Z 61 PC: 12f4d | Open file (Filename = 'HELLO.COM')
2018-12-17T21:56:22.020748388Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.022981769Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.02478703Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.032851414Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.035098937Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.03810128Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.040866055Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.044447347Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:22.05399235Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.056124271Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.072401025Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.074296517Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.090148567Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.092028497Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.095141606Z 61 PC: 12f4d | Open file (Filename = 'PHANG.COM')
2018-12-17T21:56:22.117996695Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.120538789Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.122200555Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.128772669Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.131116597Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.134134106Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.135882057Z 64 PC: 12f29 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:56:22.140718282Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:22.149868316Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.151259054Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.158912795Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.160622346Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.168678474Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.171361262Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.175273153Z 61 PC: 12f4d | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:56:22.182034704Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.184636775Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.186673216Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.193247154Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.195627471Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.198695135Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.200419085Z 64 PC: 12f29 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:56:22.204169636Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:22.226799971Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.228349987Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.235780127Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.237907611Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.255404697Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.256542384Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.260373001Z 61 PC: 12f4d | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:56:22.267636958Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.269203885Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.271847498Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.278823078Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.280296204Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.283697729Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.285579529Z 64 PC: 12f29 | Write file or device (Write 11 bytes on handle 5)
2018-12-17T21:56:22.288659176Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:22.298542784Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.299941533Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.302890444Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.305602987Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.313579424Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.314972146Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.318712933Z 61 PC: 12f4d | Open file (Filename = 'PAH.COM')
2018-12-17T21:56:22.325371012Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.327177339Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.32985617Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.336610678Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.338390013Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.342020602Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.344072724Z 64 PC: 12f29 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:56:22.347862271Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:22.357767363Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.359779795Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:22.366616123Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.369281118Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.377654654Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.379405607Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.38300943Z 71 PC: 12f6f | Get current directory
2018-12-17T21:56:22.386340631Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.390572374Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.395171573Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.40422763Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.414480509Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.420485456Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.425043412Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.42618284Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.435787524Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.438029823Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.444397041Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.445678623Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.453281386Z 61 PC: 12f4d | Open file (Filename = 'TEST.EXE')
2018-12-17T21:56:22.460763542Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.463411965Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.466215982Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.474139747Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.477330087Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.480294621Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.483993447Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.486464868Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.489083158Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.492199733Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.49363756Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.50148828Z 61 PC: 12f4d | Open file (Filename = 'SLEEP.COM')
2018-12-17T21:56:22.50946719Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.511364861Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.513992605Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.521163523Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.522888085Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.526572641Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.529771096Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.531508023Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.53523983Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.537725363Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.539228911Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.542707603Z 61 PC: 12f4d | Open file (Filename = 'PRINT.COM')
2018-12-17T21:56:22.551026735Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.552942759Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.555440449Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.563573362Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.565316941Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.568504559Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.572447033Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.574305303Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.577119796Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.580446827Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.581886478Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.584979371Z 61 PC: 12f4d | Open file (Filename = 'HELLO.COM')
2018-12-17T21:56:22.59281487Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.594983623Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.596715416Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.605004532Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.60711248Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.610390329Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.614188989Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.616303871Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.61935162Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.622297724Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.623972837Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.627187145Z 61 PC: 12f4d | Open file (Filename = 'PHANG.COM')
2018-12-17T21:56:22.635783611Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.639219687Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.640751398Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.647775473Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.649518433Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.652262496Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.655663172Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.65736073Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.660540163Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.663273642Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.664652633Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.66781333Z 61 PC: 12f4d | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T21:56:22.675167672Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.676975434Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.678672773Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.686308345Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.688143572Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.69089818Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.694591658Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.696540394Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.69942203Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.702382619Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.704796827Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.707890261Z 61 PC: 12f4d | Open file (Filename = 'MANDEL.COM')
2018-12-17T21:56:22.715390253Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.717391764Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.719124904Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.726378974Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.728009316Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.734991769Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.738918601Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.740551991Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.743388307Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.746197668Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.747523498Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.750631904Z 61 PC: 12f4d | Open file (Filename = 'PAH.COM')
2018-12-17T21:56:22.758070578Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:22.75981857Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.761517522Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.76870965Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.770203243Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.772591877Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:22.777556654Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:22.779002506Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:22.782679412Z 62 PC: 12f3d | Close file
2018-12-17T21:56:22.785120574Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.786234978Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.790363662Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.791435357Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.79770752Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.800095906Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.80263208Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.803965023Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.807245534Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.808802Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.811422879Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.813948902Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.8166683Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.817906512Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.823431382Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.825273295Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.831900471Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.834548652Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.837427506Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.838797195Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.842716325Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.844151499Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.846852827Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.852144615Z 14 PC: 12ec0 | Set default drive (Drive = 'C')
2018-12-17T21:56:22.854170389Z 25 PC: 12ec0 | Get default drive
2018-12-17T21:56:22.855651038Z 54 PC: 12ec0 | Get free disk space
2018-12-17T21:56:22.896745739Z 71 PC: 12f6f | Get current directory
2018-12-17T21:56:22.899882359Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.903669315Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.908463338Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.912540493Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.916576261Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.922094186Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.925814705Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.92684819Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.936754523Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.938185632Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.943641205Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.945576982Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.951100816Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.95248941Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.959451019Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.960874953Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.963502773Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.965588183Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:22.9711093Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.972512236Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.976326704Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.977663957Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:22.980353441Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:22.990067285Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:22.99136637Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:23.000634762Z 61 PC: 12f4d | Open file (Filename = 'KEYB.COM')
2018-12-17T21:56:23.009448127Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.011183678Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.012713793Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.019466927Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.021056859Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.027404372Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.031269859Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.032874095Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.035907329Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.037987131Z 64 PC: 12f29 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:56:23.047585222Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.383433734Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.38511775Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.389062987Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.392281465Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.402056698Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.404965002Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:23.41656654Z 61 PC: 12f4d | Open file (Filename = 'ATTRIB.EXE')
2018-12-17T21:56:23.424272635Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.426156908Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.428967575Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.434978258Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.43774565Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.440461412Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.446064337Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.447679512Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.451497749Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.453115026Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.456020469Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.458558439Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.462056718Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.464443067Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.467526206Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.469150275Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.472675717Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.4741915Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.475897865Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.477701777Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.479732684Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.481037958Z 64 PC: 12f29 | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:56:23.487277135Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.496535118Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.498212362Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.50179326Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.50582673Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.509119078Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.511892391Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.514316922Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.51579886Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.523674955Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.524918898Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:23.527517025Z 61 PC: 12f4d | Open file (Filename = 'CHKDSK.EXE')
2018-12-17T21:56:23.532154324Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.533414509Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.535027008Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.539715922Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.541716625Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.544042188Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.548163291Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.549251027Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.551820106Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.553209954Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.555276029Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.556854351Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.559434274Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.561453929Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.563323151Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.564628171Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.56726837Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.568404882Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.570212317Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.572022045Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.573947854Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.575145732Z 64 PC: 12f29 | Write file or device (Write 15 bytes on handle 5)
2018-12-17T21:56:23.579861297Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.586032433Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.587787888Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.589960641Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.591181503Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.594607964Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.595941882Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.598262941Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.599824422Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.606417286Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.607796114Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:23.61123081Z 61 PC: 12f4d | Open file (Filename = 'DEBUG.EXE')
2018-12-17T21:56:23.616407344Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.61882422Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.620158264Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.624696868Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.627724315Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.629007108Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.632893525Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.634942583Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.636896679Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.638055395Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.640871644Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.641972736Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.645098837Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.646276856Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.648394011Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.650346611Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.65278827Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.65434334Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.657007858Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.659630514Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.662859663Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.664971353Z 64 PC: 12f29 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:56:23.669665268Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.678093181Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.679793349Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.682252742Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.684848565Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.687935351Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.689140038Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.692313063Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.69356181Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.699561737Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.701452286Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:23.704711038Z 61 PC: 12f4d | Open file (Filename = 'EXPAND.EXE')
2018-12-17T21:56:23.709647713Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.711078732Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.712289339Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.716919201Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.719091171Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.720489931Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.726219956Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.729661063Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.732198866Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.734430063Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.73743997Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.739154845Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.741271429Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.742574549Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.745736141Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.747073615Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.749256391Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.751271866Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.753807886Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.755277408Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.758026151Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.759781136Z 64 PC: 12f29 | Write file or device (Write 15 bytes on handle 5)
2018-12-17T21:56:23.766951223Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.776248423Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.778445369Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.782650277Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.784778745Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.787841664Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.790313872Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.793004819Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.794613086Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.803983029Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.805308156Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:23.80976767Z 61 PC: 12f4d | Open file (Filename = 'FDISK.EXE')
2018-12-17T21:56:23.816532981Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.818245523Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.819962838Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.82458506Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.827427883Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.829451251Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.834873676Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.837424467Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.840245067Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.841648474Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.844675103Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.846218182Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.849700792Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.851766971Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.854727342Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.856311296Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.859348988Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.860678524Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.863097877Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.86483626Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.867405953Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.868834104Z 64 PC: 12f29 | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:56:23.87573285Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:23.884458573Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.886109936Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.889186732Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.890583382Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.902707574Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.904505128Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:23.907466443Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.909923611Z 62 PC: 12f3d | Close file
2018-12-17T21:56:23.917935447Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:23.919606951Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:23.923569375Z 61 PC: 12f4d | Open file (Filename = 'MEM.EXE')
2018-12-17T21:56:23.931643535Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:23.934500219Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.936554874Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.942944419Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.946354259Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.947674938Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.953268939Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.955271466Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.957786869Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.959805838Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.962275321Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.96375671Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.966873459Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.96852071Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:23.972228027Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.973794999Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.9763482Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.978611732Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.981132641Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.982765383Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:23.985798053Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:23.987245463Z 64 PC: 12f29 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:56:23.993706662Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.002130616Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.00409864Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.007885011Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.009585764Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.012779217Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.015485646Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.018381466Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.020538713Z 62 PC: 12f3d | Close file
2018-12-17T21:56:24.028190611Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:24.029293555Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:24.036389482Z 61 PC: 12f4d | Open file (Filename = 'NLSFUNC.EXE')
2018-12-17T21:56:24.04392239Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.045764574Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.048000899Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.05370685Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.057275302Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.059396534Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.065271298Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.067583369Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.070077709Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.071330911Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.074447259Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.075920583Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.079402716Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.08097306Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.083753174Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.086142088Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.088913023Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.091009134Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.093145209Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.094596279Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.098730246Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.100328786Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.106414873Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.115496076Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.117223033Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.121447317Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.123101146Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.125984Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.127847946Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.130713951Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.13263589Z 62 PC: 12f3d | Close file
2018-12-17T21:56:24.140617279Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:24.141840141Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:24.146134368Z 61 PC: 12f4d | Open file (Filename = 'QBASIC.EXE')
2018-12-17T21:56:24.154015264Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.155491864Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.15750376Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.165037507Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.168125089Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.16952071Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.174869877Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.177629441Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.186965404Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.188552651Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.192541635Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.194441487Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.198095794Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.199604231Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.202404265Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.205361091Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.208095098Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.210782188Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.213387795Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.214831302Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.218848799Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.220476028Z 64 PC: 12f29 | Write file or device (Write 11 bytes on handle 5)
2018-12-17T21:56:24.228261541Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.236575989Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.23797262Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.240890893Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.246206812Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.249461038Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.251906453Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.254680284Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.257317203Z 62 PC: 12f3d | Close file
2018-12-17T21:56:24.264850111Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:24.266204173Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:24.270981813Z 61 PC: 12f4d | Open file (Filename = 'REPLACE.EXE')
2018-12-17T21:56:24.27778062Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.280079383Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.282118939Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.288102556Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.291826924Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.293826442Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.299429837Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.30123296Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.306216684Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.308719693Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.311824829Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.313493525Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.317341799Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.319021663Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.321995394Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.323714822Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.326507451Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.329288303Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.332042121Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.33391209Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.337585294Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.339303123Z 64 PC: 12f29 | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:56:24.346424979Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.355053401Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.356722612Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.361014318Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.362695009Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.366662875Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.368667775Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.371375305Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.373649822Z 62 PC: 12f3d | Close file
2018-12-17T21:56:24.381700909Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:24.383186386Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:24.387574724Z 61 PC: 12f4d | Open file (Filename = 'RESTORE.EXE')
2018-12-17T21:56:24.394235565Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.396874139Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.398571928Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.404788711Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.408770585Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.410464151Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.416921488Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.418979764Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.422075921Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.424282593Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.426992642Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.429337612Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.432320118Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.433970757Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.43736227Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.438824493Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.442724905Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.444175597Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.446599171Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.448990132Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.451635578Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.453360623Z 64 PC: 12f29 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:56:24.460851275Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.765053301Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.767733246Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.773202315Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.774751295Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.779683406Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.782907318Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.788785318Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.792002275Z 62 PC: 12f3d | Close file
2018-12-17T21:56:24.79908704Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:24.802100235Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:24.805309618Z 61 PC: 12f4d | Open file (Filename = 'SCANDISK.EXE')
2018-12-17T21:56:24.810967071Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.813330287Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.814531625Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.821482254Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.824238769Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.825690296Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.83056007Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.832121098Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.834557177Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.836187003Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.838351042Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.849697778Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.855590508Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.858537967Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:24.862272016Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.863873094Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.868590649Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.870333777Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.874765067Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.876803737Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:24.879505972Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.882078414Z 64 PC: 12f29 | Write file or device (Write 10 bytes on handle 5)
2018-12-17T21:56:24.888741426Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:24.930122893Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.933302035Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.956687516Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.958897858Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.962346384Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:24.972400058Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:24.97587998Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:24.977640061Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.03049608Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.031830129Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.03427513Z 61 PC: 12f4d | Open file (Filename = 'SETUP.EXE')
2018-12-17T21:56:25.039130458Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.040393123Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.042192089Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.046952889Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.049689143Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.051259238Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.056892619Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.059127567Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.061380041Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.063401662Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.066283717Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.067396716Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.070909077Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.072361081Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.074516813Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.076166368Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.079406858Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.081006903Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.0833103Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.084784679Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.088173875Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.089880031Z 64 PC: 12f29 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:56:25.095987068Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:25.155168622Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.157053129Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.161056409Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.163605752Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.167766461Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.169330632Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.171731655Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.173954227Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.186499262Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.188964856Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.192398528Z 61 PC: 12f4d | Open file (Filename = 'XCOPY.EXE')
2018-12-17T21:56:25.200771521Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.203793531Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.206135641Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.222094997Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.232456814Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.235069956Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.240743855Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.242483353Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.246375843Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.249278095Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.252949196Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.254532906Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.257037495Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.259481448Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.262485083Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.2638715Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.267500873Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.269871604Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.274050175Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.27645555Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.28395183Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.286039967Z 64 PC: 12f29 | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:56:25.293682102Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:25.301859804Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.303696505Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.307642424Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.309603588Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.312730986Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.315544693Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.318707462Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.321563483Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.330081716Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.331367067Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.335889116Z 61 PC: 12f4d | Open file (Filename = 'DEFRAG.EXE')
2018-12-17T21:56:25.34277069Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.345553207Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.347166792Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.353353455Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.356450204Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.35824673Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.365019992Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.366583204Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.36932309Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.372054096Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.374681885Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.377925142Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.380729951Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.382566632Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.384540795Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.390315262Z 61 PC: 12f4d | Open file (Filename = 'EMM386.EXE')
2018-12-17T21:56:25.397861586Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.399952904Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.401742568Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.408388365Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.410377389Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.412783524Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.419052272Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.421639026Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.424397806Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.42648353Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.428481537Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.432006857Z 61 PC: 12f4d | Open file (Filename = 'MSCDEX.EXE')
2018-12-17T21:56:25.439694915Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.441734824Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.44341578Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.450791642Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.45350659Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.455766616Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.46131461Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.462920312Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.466925883Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.468415612Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.471922883Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.473467345Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.476318767Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.478521031Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.479627488Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.484005422Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.485093069Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:25.491855651Z 61 PC: 12f4d | Open file (Filename = 'EDIT.COM')
2018-12-17T21:56:25.499250157Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.500898721Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.50312821Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.508747654Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.511841738Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.514537077Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.517072528Z 64 PC: 12f29 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:56:25.520056124Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:25.529019666Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.531637702Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.537389951Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.540319918Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.547635204Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.548982151Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.553547233Z 61 PC: 12f4d | Open file (Filename = 'FORMAT.COM')
2018-12-17T21:56:25.56009828Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.562805419Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.564814301Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.571092526Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.573609176Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.579447288Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.582697652Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.584509919Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.587420719Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.590096716Z 64 PC: 12f29 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:56:25.596224948Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:25.605532866Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.607099235Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.610298385Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.613027384Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.619796629Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.622084141Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.625876688Z 61 PC: 12f4d | Open file (Filename = 'KEYB.COM')
2018-12-17T21:56:25.63289838Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.635669457Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.637230304Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.644569941Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.64650231Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.652778395Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.656115573Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.657568483Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.660965521Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.662888035Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.664666145Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.668136062Z 61 PC: 12f4d | Open file (Filename = 'SYS.COM')
2018-12-17T21:56:25.67490135Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.67792933Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.67960493Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.686263601Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.68833079Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:25.694184788Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.697875387Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.699297382Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:25.702776472Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.70448739Z 64 PC: 12f29 | Write file or device (Write 8 bytes on handle 5)
2018-12-17T21:56:25.71125061Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:25.720516687Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:25.722057712Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:25.72644705Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:25.728097719Z 62 PC: 12f3d | Close file
2018-12-17T21:56:25.735985625Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.737213899Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.740437488Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.742352894Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:25.748217766Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.750196923Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.753244751Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.755070191Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.758237576Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.759744306Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.763413729Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.764689086Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.76910226Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.770327116Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.773566289Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.774872235Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.778355804Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.780108912Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.783298692Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.784912659Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.788005033Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.790698295Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.798021449Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.799020547Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.803137198Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.804460112Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.808514532Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.809708998Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.813136577Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.815286828Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.818486022Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.820307462Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.823558106Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.825507115Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.828562156Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.829773236Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.83400557Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.835360281Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.839189021Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.840245736Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.844358318Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.845840412Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.848803131Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.850591978Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.853698434Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.856043061Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.859666024Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.860994097Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.865402664Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.866759813Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.871819685Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.872913098Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.876128594Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.878355201Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.881543037Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.883080209Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.886154356Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.887940136Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.891123313Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.892426121Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.896404824Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.897486226Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.901154573Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.902356312Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.906329268Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.908049763Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.91126997Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.913096927Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.916012504Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.918372405Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.92152022Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.922994269Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.926952088Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.928278482Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.93262147Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.93398224Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.93833446Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.939550781Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.943088718Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:25.947912857Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.949555261Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.957229358Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.95859279Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:25.962324671Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:25.968162023Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.969734555Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:25.980443335Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.981824281Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:25.989153637Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:25.990330877Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:25.99751445Z 61 PC: 12f4d | Open file (Filename = 'SETUP.EXE')
2018-12-17T21:56:26.004602177Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.006373704Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.009312368Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.015694162Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.019526646Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.021605962Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.028144342Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.030871771Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.033620028Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.036921126Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.038425895Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.042425335Z 61 PC: 12f4d | Open file (Filename = 'WINHELP.EXE')
2018-12-17T21:56:26.049219375Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.058545558Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.060679387Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.067605774Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.071676557Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.073363102Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.079949097Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.082045102Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.084817593Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.088134265Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.089489757Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.093972168Z 61 PC: 12f4d | Open file (Filename = 'MSD.EXE')
2018-12-17T21:56:26.101855885Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.103897167Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.106669093Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.112836828Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.116894697Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.118594715Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.125286445Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.127349261Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.130112437Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.133001427Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.135786053Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.13841487Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.141649463Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.144231867Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.147402693Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.149071659Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.153134187Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.15482856Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.158519111Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.160567479Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.163517717Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.166310284Z 64 PC: 12f29 | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:56:26.172623139Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:26.182927653Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.18462955Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:26.188657239Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.190747597Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:26.193920202Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.196833397Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:26.199812381Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.202575278Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.209877812Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.212141356Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.216023893Z 61 PC: 12f4d | Open file (Filename = 'PACKAGER.EXE')
2018-12-17T21:56:26.222723945Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.225835187Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.2275256Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.234482185Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.237678239Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.23955798Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.263250208Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.26470646Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.267805572Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.269626801Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.270998532Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.274320449Z 61 PC: 12f4d | Open file (Filename = 'PBRUSH.EXE')
2018-12-17T21:56:26.282033365Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.285046235Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.286776852Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.294328514Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.296861229Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.298924331Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.30456608Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.306357507Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.309850776Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.311954541Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.314542885Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.318885535Z 61 PC: 12f4d | Open file (Filename = 'SOL.EXE')
2018-12-17T21:56:26.327357983Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.329593007Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.331469633Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.338584398Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.341101306Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.344026618Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.349467667Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.351623182Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.354364261Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.357384973Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.359049942Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.362531107Z 61 PC: 12f4d | Open file (Filename = 'TERMINAL.EXE')
2018-12-17T21:56:26.37078952Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.372568471Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.37519423Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.381618039Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.384590953Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.387284044Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.393645468Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.396558525Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.399310867Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.402314022Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.403969332Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.407468075Z 61 PC: 12f4d | Open file (Filename = 'WINFILE.EXE')
2018-12-17T21:56:26.416031703Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.417812425Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.420471092Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.427152319Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.430961619Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.432961869Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.438675508Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.441428551Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.444118194Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.447102048Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.448298091Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.451939773Z 61 PC: 12f4d | Open file (Filename = 'WINTUTOR.EXE')
2018-12-17T21:56:26.459680048Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.461252536Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.463989663Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.471996401Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.476889162Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.479135341Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.485531391Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.48840473Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.491255188Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.495208701Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.496731346Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.501667644Z 61 PC: 12f4d | Open file (Filename = 'WRITE.EXE')
2018-12-17T21:56:26.517819875Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.51961345Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.521918487Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.533675588Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.539171265Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.540620061Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.547427559Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.549267447Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.552742698Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.556416178Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.557833768Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.562631553Z 61 PC: 12f4d | Open file (Filename = 'CALC.EXE')
2018-12-17T21:56:26.570615102Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.572737344Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.575578854Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.582153655Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.585934524Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.587457038Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.596336574Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.598511477Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.602318893Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.604955187Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.606715328Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.611372122Z 61 PC: 12f4d | Open file (Filename = 'CALENDAR.EXE')
2018-12-17T21:56:26.619837785Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.623252294Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.625028796Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.632170029Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.635155127Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.636747344Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.642981656Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.644371622Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.647999077Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.650037242Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.652068244Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.655934716Z 61 PC: 12f4d | Open file (Filename = 'CARDFILE.EXE')
2018-12-17T21:56:26.663740422Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.665315659Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.668574354Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.678331451Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.683058983Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.685014834Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.691462297Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.693648452Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.696212092Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.699618575Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.704064275Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.709030179Z 61 PC: 12f4d | Open file (Filename = 'CHARMAP.EXE')
2018-12-17T21:56:26.715463762Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.717462644Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.719819962Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.727320417Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.731097956Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.732810844Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.739672308Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.741294398Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.74499742Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.746898751Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.749317736Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.752851574Z 61 PC: 12f4d | Open file (Filename = 'CLIPBRD.EXE')
2018-12-17T21:56:26.760867996Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.763185757Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.765127059Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.773284987Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.776133648Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.779093895Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.784855297Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.78725952Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.790499659Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.792621256Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.795406027Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.801878337Z 61 PC: 12f4d | Open file (Filename = 'CONTROL.EXE')
2018-12-17T21:56:26.810125925Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.812363562Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.815072898Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.821558177Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.824640509Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.82740132Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.832949078Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.835418095Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.838244282Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.842191935Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.843611521Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.848248521Z 61 PC: 12f4d | Open file (Filename = 'DRWATSON.EXE')
2018-12-17T21:56:26.855465417Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.857449129Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.860221481Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.866134039Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.869375276Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.870810317Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.877035269Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.878607812Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.882171472Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.884047176Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.886333281Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.890178356Z 61 PC: 12f4d | Open file (Filename = 'EMM386.EXE')
2018-12-17T21:56:26.897851808Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.900095693Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.901785335Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.90829432Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.910903752Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.915135247Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.920816393Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.923271852Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.927123648Z 62 PC: 12f3d | Close file
2018-12-17T21:56:26.93027188Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:26.931558166Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:26.934902957Z 61 PC: 12f4d | Open file (Filename = 'EXPAND.EXE')
2018-12-17T21:56:26.94291801Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:26.944724673Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.947688177Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.953823397Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.957659397Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.959680898Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.965677385Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.968877785Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.971654299Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.974091627Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.976794934Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.979679184Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.982193828Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.984884419Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:26.98851354Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.990437449Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.994198136Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.995553648Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:26.99853916Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:26.999927192Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.00370787Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.005273942Z 64 PC: 12f29 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:56:27.01320125Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:27.021944151Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.024494004Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:27.027559888Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.030625619Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:27.033537737Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.035086529Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:27.038219816Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.03980201Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.047332962Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.048711151Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.053430766Z 61 PC: 12f4d | Open file (Filename = 'MPLAYER.EXE')
2018-12-17T21:56:27.060235458Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.063021605Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.06468018Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.072765622Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.075835215Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.077754639Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.084012168Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.086213254Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.089314305Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.091154048Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.093192365Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.096533268Z 61 PC: 12f4d | Open file (Filename = 'NOTEPAD.EXE')
2018-12-17T21:56:27.104664231Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.106506093Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.109233007Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.115864961Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.118727038Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.121776222Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.127378556Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.12936685Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.132097556Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.134969768Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.135952842Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.140552301Z 61 PC: 12f4d | Open file (Filename = 'PIFEDIT.EXE')
2018-12-17T21:56:27.148046246Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.150612952Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.151936907Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.15936136Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.162383082Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.164816318Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.170982402Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.172975737Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.176093435Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.178291474Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.180167648Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.183471947Z 61 PC: 12f4d | Open file (Filename = 'PRINTMAN.EXE')
2018-12-17T21:56:27.19075815Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.192527092Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.196145312Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.202888617Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.205931816Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.207574985Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.213854848Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.215704884Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.219720572Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.222039078Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.225850292Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.234012019Z 61 PC: 12f4d | Open file (Filename = 'PROGMAN.EXE')
2018-12-17T21:56:27.24262792Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.244356788Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.247163934Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.253187069Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.25676407Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.258443202Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.264628816Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.266452385Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.26922507Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.272352302Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.273698671Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.277842803Z 61 PC: 12f4d | Open file (Filename = 'RECORDER.EXE')
2018-12-17T21:56:27.284723977Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.286992291Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.288588817Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.29517897Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.297643Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.300455033Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.306933606Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.309124854Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.311768028Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.314748137Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.317290754Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.320831612Z 61 PC: 12f4d | Open file (Filename = 'REGEDIT.EXE')
2018-12-17T21:56:27.328485304Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.329942613Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.331706736Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.335487431Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.338105502Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.339214285Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.343619204Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.344763701Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.347743172Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.34910272Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.35115661Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.353860954Z 61 PC: 12f4d | Open file (Filename = 'SMARTDRV.EXE')
2018-12-17T21:56:27.359264674Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.36049081Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.362693961Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.36686902Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.369470352Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.370519062Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.375110183Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.376742235Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.37873823Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.381409455Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.382379546Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.385326333Z 61 PC: 12f4d | Open file (Filename = 'SOUNDREC.EXE')
2018-12-17T21:56:27.38949279Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.391178527Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.392254409Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.397003744Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.398992295Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.40096286Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.404482725Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.406221828Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.407955788Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.410028104Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.410975281Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.422063858Z 61 PC: 12f4d | Open file (Filename = 'WINMINE.EXE')
2018-12-17T21:56:27.426455813Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.428666872Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.429836769Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.434320379Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.436150651Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.437970972Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.441626769Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.443748833Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.445667582Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.448499802Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.44990974Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.456621482Z 61 PC: 12f4d | Open file (Filename = 'CLOCK.EXE')
2018-12-17T21:56:27.463644764Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.467025248Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.469730564Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.477116835Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.480127422Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.483176745Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.48929334Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.492051303Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.496029961Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.498298557Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.501554924Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.50851695Z 61 PC: 12f4d | Open file (Filename = 'TASKMAN.EXE')
2018-12-17T21:56:27.517551248Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.519652174Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.52359529Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.529778271Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.532585135Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.53563315Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.539447611Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.540976039Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.550497704Z 61 PC: 12f4d | Open file (Filename = 'WINVER.EXE')
2018-12-17T21:56:27.557906961Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.560987474Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.563465317Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.570467789Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.573214822Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.585100087Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.587934386Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.589188451Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.595008535Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.596428651Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:27.604068444Z 61 PC: 12f4d | Open file (Filename = 'WIN.COM')
2018-12-17T21:56:27.611044865Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.613278575Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.614711304Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.622337776Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.624016241Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:27.63098093Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.63429991Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.636030803Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:27.64037234Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.642542815Z 64 PC: 12f29 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:56:27.655449777Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:27.85382934Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:27.856127273Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:27.859604754Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:27.861063757Z 62 PC: 12f3d | Close file
2018-12-17T21:56:27.972958196Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.97525411Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.977620536Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.979016978Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:27.983678778Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.985214021Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.988411142Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.990840451Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:27.992930827Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:27.99848311Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:27.999431356Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:28.008137356Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.009161878Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:28.014745564Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.015669254Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:28.020724878Z 61 PC: 12f4d | Open file (Filename = 'GDI.EXE')
2018-12-17T21:56:28.025148927Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.027342968Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.028472649Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.034699429Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.036633412Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.038041119Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.042439929Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.044738168Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.047666073Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.049704589Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.05223763Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.055724861Z 61 PC: 12f4d | Open file (Filename = 'USER.EXE')
2018-12-17T21:56:28.064266405Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.06611651Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.069121834Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.076677101Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.080875815Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.082561453Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.089943071Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.091374145Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.094268102Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.096248945Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.097878351Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.101315382Z 61 PC: 12f4d | Open file (Filename = 'DOSX.EXE')
2018-12-17T21:56:28.109298705Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.111098187Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.113845154Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.119997444Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.124549957Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.126270977Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.133495272Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.135219865Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.140131982Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.141468027Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.144442237Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.146103046Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.148945986Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.150226151Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.153238222Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.154855996Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.158929801Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.160499772Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.165282834Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.166843701Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.169862509Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.171531321Z 64 PC: 12f29 | Write file or device (Write 6 bytes on handle 5)
2018-12-17T21:56:28.179122446Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:28.188293893Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.191421304Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.194540127Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.197645867Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.200836655Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.203924184Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.206987017Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.210201403Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.217966702Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.220703695Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.224269798Z 61 PC: 12f4d | Open file (Filename = 'KRNL286.EXE')
2018-12-17T21:56:28.232605349Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.234457439Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.237714711Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.243866463Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.248764121Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.25049839Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.257146588Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.258760342Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.262690446Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.264706663Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.266596611Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.270195573Z 61 PC: 12f4d | Open file (Filename = 'KRNL386.EXE')
2018-12-17T21:56:28.278262035Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.279849354Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.282617538Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.288672583Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.293764055Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.295371515Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.302198622Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.304011366Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.307481247Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.309547714Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.311694705Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.315402625Z 61 PC: 12f4d | Open file (Filename = 'WIN386.EXE')
2018-12-17T21:56:28.323799404Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.325627878Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.328817523Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.336903305Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.341329961Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.34308578Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.350356071Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.352082812Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.35630406Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.35846848Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.361650404Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.365263949Z 61 PC: 12f4d | Open file (Filename = 'DSWAP.EXE')
2018-12-17T21:56:28.374450625Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.376332716Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.379490983Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.3858144Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.389901551Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.391320601Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.398585803Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.400016106Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.402525598Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.405418173Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.408231298Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.410875921Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.413465406Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.416112169Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.41854434Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.420794832Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.42326573Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.425651751Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.428172003Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.429854793Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.4332125Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.434973614Z 64 PC: 12f29 | Write file or device (Write 14 bytes on handle 5)
2018-12-17T21:56:28.442181511Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:28.627774474Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.630489941Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.632859971Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.634713995Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.638090719Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.641516868Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.644637994Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.647851361Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.661451584Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.66366357Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.671073925Z 61 PC: 12f4d | Open file (Filename = 'SYSEDIT.EXE')
2018-12-17T21:56:28.678744342Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.680359748Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.683230856Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.689456122Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.693710716Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.695402395Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.703266107Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.704992559Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.709110157Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.711259746Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.714013908Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.717563759Z 61 PC: 12f4d | Open file (Filename = 'WSWAP.EXE')
2018-12-17T21:56:28.725722361Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.727532729Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.730597965Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.736681996Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.740956964Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.742643445Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.749869071Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.751623273Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.755703128Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.757598833Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.761859277Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.76354357Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.76761838Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.769343594Z 63 PC: 12f0a | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:56:28.77345476Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.77519246Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.779409672Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.781933624Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.785970152Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.78773655Z 63 PC: 12f0a | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:56:28.79134716Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.792465987Z 64 PC: 12f29 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:56:28.797519852Z 64 PC: 12f29 | Write file or device (Write 5120 bytes on handle 5)
2018-12-17T21:56:28.817776073Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.819712787Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.822634976Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.825489257Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.828634864Z 66 PC: 12ef5 | Move file pointer
2018-12-17T21:56:28.830671623Z 64 PC: 12f29 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:56:28.833662588Z 87 PC: 12ec0 | Get or set file date and time
2018-12-17T21:56:28.837021462Z 62 PC: 12f3d | Close file
2018-12-17T21:56:28.844621972Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.850963834Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.85824264Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.860358058Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:28.866583746Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.868068911Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:28.876006224Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.877943444Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.883085644Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.885300226Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.889327315Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.892511172Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.896316445Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.899462046Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.902947179Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.90575369Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.909027797Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.911763931Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.914780782Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.91722722Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.920463136Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.92555957Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.929201366Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.931578866Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.935034824Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.937598722Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.940914395Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.94326201Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.947252644Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.94992221Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.952325624Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.954198853Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.957857767Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.959554691Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.962795559Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.964127121Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.970211508Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.971605586Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.975687038Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.977025155Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.981282125Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.982931245Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.986143462Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.988710999Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.991914607Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:28.994492059Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:28.997740855Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.00024371Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.003516149Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.006029513Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.009193257Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.011668016Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.01484625Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.017348005Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.020518703Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.022422891Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.025537509Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.027701579Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.030850186Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.033043772Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.036878468Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.039026251Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.042156841Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.044400527Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.047706751Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.048985545Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.052938445Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.054283204Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.058305071Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.059554843Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.063536246Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.064804285Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.068386311Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.06962912Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.072776183Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.074711767Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.077982518Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.080267868Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.083316062Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.084966533Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.08813823Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.089386282Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.096332313Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.09783612Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.10171344Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.10280672Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.106532857Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.108341966Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.111519108Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.116973102Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.121162621Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.123008286Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.126461634Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.12782329Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.132008267Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.133169504Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.136750601Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.138430999Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.141747993Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.144060241Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.147440227Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.149954609Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.153430055Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.154748165Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.159121692Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.160423807Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.165040999Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.166368119Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.171422894Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.172810784Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.177486929Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.178800107Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.183383196Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.184680572Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.193647422Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.194900476Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.199597019Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.201722977Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.206217156Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.207378103Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.212101805Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.213313816Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.217462344Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.219069815Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.222091617Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.224710905Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.227802795Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.230691394Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.233723882Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.235853971Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.239631096Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.240705023Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.244705279Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.245850471Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.250497011Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.252011985Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.255368777Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.257905936Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.260923411Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.27587971Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.27939196Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.281610426Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.285294516Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.287092043Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.29018247Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.292279015Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.298343369Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.300143867Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.307009397Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.309745747Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.319224456Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.321213152Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.324482827Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.326126911Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.329320288Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.33161625Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.334687295Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.335741907Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.341764965Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.343111001Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.347183352Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.348700669Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.35257888Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.355019915Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.358234679Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.359970904Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.363647266Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.366000219Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.372884025Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.374583705Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.381331443Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.386074134Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.389950995Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.392067191Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.39514577Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.397967287Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.403302846Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.404648666Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.408483956Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.411431766Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.414953909Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.417243842Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.42106676Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.423609561Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.426940529Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.428572615Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.432250145Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.433725262Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.437952276Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.43929155Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.443135064Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.444579685Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.447889945Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.450038071Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.453464701Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.455284141Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.460275041Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.461551029Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.465399694Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:29.4749879Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.476325056Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.485341559Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.486458238Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.490759367Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.492146774Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.49640377Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.497885407Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.501127111Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.504350795Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.507680603Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.510193119Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.51395769Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.515292733Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.519741049Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.521476261Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.524707895Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.527243337Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.531522028Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.532848081Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.537301502Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.539034226Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.542303116Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.54518026Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.548424661Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.551249518Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.554559252Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.557114998Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.563696562Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.564839949Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.569760057Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.571199397Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.574216518Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.576465452Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.579761971Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.580826049Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.585382918Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.586444432Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.590464502Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.592545122Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.595490684Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.597802809Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.600733911Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.603131394Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.606943467Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.60943786Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.612909977Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.614768455Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.618378831Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.62010337Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.624114626Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.625387549Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.629581477Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.630927112Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.635596107Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.63692158Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.64035557Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.642816327Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.646543409Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.649335126Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.656518295Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.658442951Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.661948074Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.664158096Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.667387977Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.668609432Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.673100921Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.674431184Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.678481048Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.680233966Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.683386937Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.685948484Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.689833893Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.691020603Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.694147749Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.697231848Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.699602485Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.701128349Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.703690121Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.704652885Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.707869882Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.709006627Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.714120655Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.715121817Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.71858496Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.720735564Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.72404711Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.726625946Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.730592571Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.731966082Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.736084062Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.737489669Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.744626583Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.747408566Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.750438132Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.751991791Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.755565365Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.756641319Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.760917545Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.762345655Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.76681664Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.767971268Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.771031801Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.773812676Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.776857304Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.779728567Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.782769374Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.784870558Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.788460693Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.789540441Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.794053014Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.795462368Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.799653603Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.800840918Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.803890026Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.806809926Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.810555107Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.813404864Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.816715567Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.819217236Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.823003407Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.824390965Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.829322574Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.831110977Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.838159941Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.840786647Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.844556175Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.845710752Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.85003765Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.852022857Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.855421597Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.858084703Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.862396919Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.863813394Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.868752535Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.870261414Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.874570278Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.875665023Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.879349134Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.880450421Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.883989078Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.885757688Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.888848425Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.890073461Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.894176467Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.895404898Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.898888411Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.901255222Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.904928561Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.907599197Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.911039021Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.912089197Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.916834853Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.917998073Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.939031201Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.940510725Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.947942345Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.95011099Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.953425548Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.956355382Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.959497147Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.960933894Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.964353176Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.966091647Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.970639465Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.972060243Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.976235596Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.97779036Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.981620802Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.984039631Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.987625081Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.988956234Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:29.993701053Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:29.995844605Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.000592806Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.002044771Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.006906415Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.008304839Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.011153106Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.01398939Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.017288783Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.019896301Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.023937689Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.027082926Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.030644623Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.033869716Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.038331541Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.039741759Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.047429297Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.049328475Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.052684196Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.055282969Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.059034987Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.060419892Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.065678627Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.067120069Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.072580946Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.074440714Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.078131194Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:30.086641143Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.088029224Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:30.098286562Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.099701792Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:30.107722508Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.108899126Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:30.11498902Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.117654582Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:30.123612131Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.126247804Z 78 PC: 12f95 | Find first file
2018-12-17T21:56:30.132813081Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.134063474Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.138746475Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.140104498Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.143302459Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:30.149855508Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.15114214Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.155020186Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.156754728Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.160768202Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.163588778Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.166824177Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.168755289Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.17198806Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.173528458Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.177441933Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.178685326Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.182784131Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.184038061Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.188187046Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.18956555Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.193059239Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.195841967Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.199305497Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.201852655Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.208586625Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.20996479Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.214526102Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.216222154Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.219093873Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:30.223850224Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.225025687Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.227601809Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.229650935Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.232305114Z 26 PC: 12f8b | Set disk transfer address
2018-12-17T21:56:30.235099983Z 79 PC: 12f95 | Find next file
2018-12-17T21:56:30.23761065Z 59 PC: 12f59 | Change current directory
2018-12-17T21:56:30.243450665Z 14 PC: 12ec0 | Set default drive (Drive = 'F')
2018-12-17T21:56:30.245227789Z 25 PC: 12ec0 | Get default drive
2018-12-17T21:56:30.246412569Z 14 PC: 12ec0 | Set default drive (Drive = 'A')
2018-12-17T21:56:30.248917576Z 64 PC: 12f29 | Write file or device (Write 17 bytes on handle 2)
2018-12-17T21:56:30.253641872Z 76 PC: 12ec0 | Terminate with return code (Return code = '0')